last executing test programs: 15m22.604096539s ago: executing program 2 (id=103): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000900), 0x80) fcntl$lock(r0, 0x5, &(0x7f0000000a40)={0x0, 0x3, 0xa5b3, 0x5d87f8b0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x761, &(0x7f0000000dc0)=ANY=[], 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000080c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000180)={0x50, 0xfffffffffffffff3, 0x0, {0x7, 0x28, 0xffffffff, 0x40000010, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f000000e0c0)="f1187c2666e938b0d719606210914a175384a7d8bfa08a4ce1a6704c4c59dca5bd31c2e0daaec1bf1788b64cc764755c8227d255c9fcb56cddc8d23a8719578a528df745f0862275073dd2c88521736ffbb58e980e9803aa1406002487d226afb38483a478d98869748c28d604cd82f416f3c4f2071aac0274092945c94a4911345f1fb12c47fd864cef4bc44ad5fb5348fea8246b3604a4c9c9a827e4aae4f7677d023169ef281c43f5341372d459170f25365fa911efb58b1a0c883d98677cce26aed7f8410a54aee36c963dd8f82fe532fd73594ee6f83265b5fbf2507319d73f87cb6d2050a7b1e001ec563d4170d9ca49e019c1f34a3f6a29e4adc72fcc343bb15caaa44814a11a621d682070b253354508d7b97b1439ad827954b305797e4de400c046ff93c99fa15125daa8b53581ae5392373621d5beffde817abdd5f4feb80aef8cbec83ad2a830c773ae907c19f5385e77e3adc425fc5d8dfd53312af6cb6556f8e3d871add2dc48a37fc05c65f32149a0ac179386d1016590ed19baede89d890902306e3ca40ddf9ea5f54b51cab0b6bc1bdddea7e6a64746cef6ecebedc1c51c670b0af450099c4052caf1eb0d4137a74f41f101a604fe08ef524e12f8f831c30e15da0947f6f584ae2ad96de45e3143f5a9dbce67edbdf5904a0ca1db282fb70dbec4870f6aeba8a74b24900d7c5a0758afadc26ac6f93695eeec1611d7a1123098420302ac2ecfb31bd545695b61c9f36663cf7ce86cd7ac350670893acf0d065fab2dc2ea43505b261393d285fbceaebe30e0d1fbf8baacb9eaf9f6ca84c598c5604fd4b11412a027760671956d312a4cd2e2dd54100519a0a8f93f5b229728bac624870cefd815a6b6d1ce8b06e045c47ee2f91e3524493df21f46cdd00a60c39f49d29965dbed6f408c42b29a3f76e0f840762b273628f7834397bb37d931231ab16f6cc7bbb5caac7a83fc5ac8c67b120b19d8dbc3ef054e7490851bbf11c4cd19d8aad281fc054613050013dec6821e034f10413f96e289f81f10a52fc941992692b2c3b849d949b5c6465f335cd7876caff414d0a00ec927c2766c83249ca5e2d5dc9a524ea5142375bae891c8bcb34e8b4044964b8141841c619c6b1da249cf65b9c16506926804e4e388b60638c46128b43ab76a32659a5e3fa64c75609e31cc2738392a868434d9108c7710d72f8a34827943ded46328621b39b646cb663500467580b76cd6ee0217149dac6168499edcbff45193f49bd28fd105740f641f341ff8ded97ebea072d805062b35819f28541423b0e16ef996323f5907b0b2a0703e9fd5c6a511787cf6321a87f648170efd691aede0c178e0daf53da03829e4e7617b5b834c6b4196d926c7d7a54b9f1b3d3bc09bb7f22fb18f09150e34bec2102eafe634e13454a9d5cdc10da8e880cddaf892af35c437768b62c73f67ccd8764c34669a91f9d669fa1ebcc4159e4be7d4e589a59cb70c1ba77ef7a6a2c6fa4481c5f2c025ee26e24ea59215f971b1bd22af51af1334432d149a9574cac0d4cb145de1038fc37317b947fffb232209f8c65dce28179c950c7b23bd1052db323662512c5fb41acc84c4e42d1daa9be21e6c1d22b6bedd5f28d2241afc578e2a33e12d1b1b6427c620ce5d80c4a5ef351b2cdaa598c478b56bf79d9dcb8b8556503c66b44b27e8df8e046469a5da9390f58144b8766f9f51d39e8d5bd44e1ad024fed57ec1a3b18f04e6bb3b011f1b23031d85c498766cb10f66e3868a76ef1e388018292fdc4435e14bcf7ff6067535ee3764d8deb725cc0fe0afffe4285958ec9595ae5c5cb04834d15429435272e5b0510f246ce806895b85ba2f81912f76f6b955e28febafbd0c2e854479c4a6150b85c05bd54a1d0d37877e6fd3ae20046380dbf82bf9c8fa8a8d48f76cfc376fc9e0e4fdf0ccb785e9833c6c9ba006f7e59318ac733c3a1250f40ceb7ac3a167727bf89daea038372e212f02cf677a009cdfd224b41fc3c142b0882a53c1b9b7de6e99974d80ff8506c71ad3e063d7bc5c5366042b1cf952c6f76fad74fb16b9d9c9804589ae4f4afbc7bbaa340c1093d76a01fb254c5ea168e83b39bd3c97b8ace4f32612b63e841fd6eb304a663e4f43fcfb5f435716df89146d0ebc0c1517734ca4c90b9dd5db6820a4d730a9a7e6748d0d2b7def30a1c242fa36f52c3f685555b0828e1dd59023290ef4626d3759462cad9371d72a9c63824c91d5cc304ab43279f199811a604c164493793886b643ba6bf53d0a9ec7e304488b18bb2eedde5c128b2ef0303f85ed54875e38d4adbbfd477e8fe9a2217f084000813aecedcccb1dbe482b4856b9ceecb28d40bde5e8376eb8c29dc71b85d4b345fc411937234b318238e962f0d5dd46fdf5149685cb3c4f9c2710f4173f4ec616f7036ccf83ba228e1cc7b205cde9b57f00502d4d1c2af6dffaa37ad30fe0f5d955cfee2e00f48cb7ba02ab86748d0238914c66ca9ad9ff0e8b397c5e527c56b0d63a9b5a7b1da19424bc0c81d627b1389a42626654d901eff0f37d64e0cc894ab2c4399c67b846839a1c40033f4f9ecf8410fc63672ad471253fadd976df6510137d903a76ccf14509dd8839024608d707c4eb69cbcd5ba9cdddb7fbac1c963a99ef6e75eea8924aad62d6aea792042cb372131a83730a6ee7de386410d91697dad01d85ffcb22b3679573fea63a38c192b1b1e3a722adacaaf8e855843e1366763456c86ba9934302e0abfea2044386f31c457cb7ff445d7b00e3ed7d1dd4b2f92c845f65af3a3f68de96dd9b7bba62b7fefb52639b6796ca56d902f9dad52f42a1b79fc814c8a58033daa9f43ee3c540cfd08b0ed21941d67dc3ee37fcb855fa4a03453833714d8f8abf83256c503713adf7f8aee122cdb01d0ed27945d42633b0fc3b2fd51f8a9d403e792c9b77be56c257110669b46bd0f8bea9ec7b895b0b1bc9a9485a51e72763c3ccaf6210af7652ccd437722b359d20bc124e7055c5e41ddc5eb66f966647a3b91f1c51f3c6e340d6e203fcd30f39dd0398f0a1c9fa58f2da697033f5988cbc6e5c8e1fce7904112964b2ac5f938b9132d680f3cb0d8ec2fb65162113462ec459356bc9d28d9efdeb9983d79ed04da1a78f02ea8f5b42210a23d9c98a734dab4069dad2a532ebced93f5dad2ec9290b0016e6db7c3c9ca3ebc71d805aafc113ac93d1e68c637000879fd736cd8a42474e607da884df065a06f4d64054512a396d99cb7dfaad6a91cfce8288cf995e83a1ffd2ec83483a807c7ab3d0703e956222dbbc2fc5d57661fd186626b41a2e18144d592174cc8e45f1580593206e6d7c7f3236eeb41aa772e663834768dc21a4c216490612e6e912ad48f1d90650f1a9a29239ffa8f00747833038b75e8759c50799eba59ba58a1ddd3d9b49806e2c7ae143e88f704d0a5556429445a41ad83a95e43bf32fe2f6954ca030a3f2697014cb351c89cbd3d2792cc73371cae124e5c0055201036c7c0c73d94215214b33234f4e21071743cd553b8d96e3387151860f5143f16980020954d80b7f60955f9c09a6501e9d0eee4d8793e9ca2d04a8aa6831d2e54c0397c6c9f2486b79d06aee46f064c02e77fc4bd7bdf31b9dcf520e26ebb7a02ff3d9eef1357dbcc83877f5613c7a8c4e3a4636d2e0161a663a946f651cb5915f07762d00c62d2ecb354d09c2088c3de6b59b5ed0002a1fd5f7eb316ab62fef44af65abb81f96f495f867e128e8829a3d2693e00a5b2a14a6b76dff7c1cd80e26dca00482b3055741fcc7973e33346264f268e22ee4a74fb45066eb24cdbf71ea7c69d3fe9e9ce52dcc7e9b0645474ba2a635c36a83135cd98f892c2619a5724faff0aed7e236cad81184dd05dc5645c7e7ad52ef76d615255b2936bc40f0ea017035a8bfacc18c7bc52ec0e29d70126a6e912c6d06856a12ec2792738a9a1c2b2bd1e9b39db4fd115bc901e0d3fba472ea0182604cc9e73cc772117d49dbf41c7098076eb0867d8eeb7b927701bd5cd21bc2b32e4ee2ab86f143770b4718f7c9ebdd32fdef6170ca284d4102360242f4d007fdcdd8fcfbb90e7d9b693fb1101dec0fa152a7417f70003159ca3633299cae4035793aa7668df47b09e0fad406e278a6105bbd2b9a523c1a8fdb394b9de39d3d9e1ce9d9ba717014dbe59855a92ff2375a3a3477c8bd22cde51e5bbb738b92ef4f3781e605c24e7140b2504b59328cb8e20c5c5d19acca392bbf60194e6257f674df0f99945132d78c76f182f2eb52058a908abf568352d50a7aa4d061380cc58cea53f166a753ffc4a51e90a0f46104decd9eaa77d48300f2c7901465effda4fdb0e70f7ede3541890732d4ff10eef7745ca362eb336febc2609f50f237eac6d4950593bfefe0718ae3bbf227ddd524178b39ce4341e68e4c1e5c65b506b73965c5e6ba8e7472d3b573d41b4e458c97d1f0164376cb24fdc38bce00df871938e65f46c3df4fc20e574581d6631d759c316af7f7709e05e9dc465b87234029ae78f071d892d5e7ab7fab90cbaba55acb3e654a18a5f0bf79d6e471d53b5fca51085a65534dbfa953379c4d4a0022f03da76fce767cfe2930992935ea897fc56dc23d377004d119c9b648986e402b035b7927e567db9019c915c0ab54e6e45435336e37d974a7ea3dfad73915badda2e0c32b87391e3226ef0509ec6a33462a246e62e0fb83065db0270c6c026415dfac7be0e7b1e790631347665e789ce6be41e7ea32b987465ca6a803508a52626d92858156920f841da0532854cd5c966f02911d10a4e12f687801d7b87891e0d7a1ed0279e3cbea3d73b3886e798d39460ef71ebafd803e3d367a0c67c31d502021a796e6c351caca55865902dea97edf28ca7f4da37d62e17df5245e52510e1d5bac6851e1a2bb2228aeb6add3c07bad5798176145d1b46d5ae3169581f2286f6ca3b09ce4c44df0031d6ed077e6af6226b6e21634037079331094fd3bcd0126d5c88069d1c240eba9a4ef943552dd69a2786301a0d94ba5f4afad155583d81cae6f68e600979674d05c5593ada14dccf11745118dfb6da366a15655469cc0fe0d31cabff9a84e40896f8726bb64bb0c548b8b7a7c031967ef8a38e85063eeeb48d271aa893cda1c66204cd3b2c35e27fa7dd972bc396283e24671b9f4c1bd9a4dcf30c8887864305b3f92ec1e678f85d552d411f8c2012bc77ae55d6d8a7c31bb6a9b80a530ef2900961a5c59fa0716f5b6ac2aa5b2313b5539414b2abb7ea3f7b4044e91e463f02e9c51891458084782209323df56148ed89c83d2fc194c127e47ae5bd711f5b130e6b21775090c6156cbe9737b33865b48489f4533945c4b9491add986d3095956796c1b217bf6b09ec63958fca7a9ec6b5435bb3fdbaca8a707c37ba79098c47cd9208351b54e292509d4bc33bf40eaac6caa9f94d0918a7461e6bb8e8b259d3d90d641dec6612dc14b683ac4cbc217f6d108f666e66817867c70f3550d1ce37daf358cce35b8231fb70a4b1e302718163e5a628e8f653eeb25041290ef5f5289ec33dcec3bece209afaf2c4c8ed6145768ac945034473b01b63986f9882514722dd85df95448be18a59c5408ec8c95d203e7a4aebc68999c760d3f3929d0d28f7d8d0ea7c02a813515c5a82fc04cdcf20654c91af430aa34859a77eeca938842600afc6035605a0a9c01acdb164f2b2c3d4d7534c5292d08edb1adc446fedce1a14b7defb274851614de5157e8b5864f7ad8bf6d2f98515c07171afbb8c9d29a2202087bba880441bf68084d5bfdf3a7926ea2767a24bacdd5a6b98080b044071b3c21854333b84156771bbffe0458aed18e110ee0ec37f542b53afd04b76bbce6653d49434f0a8fe97d11cca1b211922bc48b0fa7526693889d0ae2b5a5f7746bd20803db5c57563137910efe92c6f4e0417978ac3af913d46fa9d49acf5f84de8e67f90b409bc78c30b58913f0149eab1629c1e8409190894f2591e208f3b61ed699670de4621675e9ca789cadb219013682d0655b785065dd4d2193f0a81b84f27330aa7a06fc09979239eff65b0327bd7887dd671bc4a51ca7dcca404fc24699a7703bdb1fe4b5175760f682531523ed75396e556b391b627035bbd9e323a004ec1875771b72f02af7711046a16e1df4fe22c8cc064bef1a401a430d2ed959aae3ab82db7a86b74821ed07dcf98ca76070b6e18fc749ef2ffeeec9585bd21aedaf8c05918bfd2f9ab1e1a6f023c0f2a2a418f5ecf711526525a165652eeab3ae16405ed177706844d1ca239f52641e0a66d89565d0b83cedc51d339bcf56ca21203fdadafb447c0e337496b2c5318cd5f44e6122c617387f85c3a6f76dc4d437e45f790c5f489bd56e56b8fa1e3111806429cd4ccf871b887ab9d8ee379f4cdd23bdbc476428ff912adcf7a84810c81943a778e57bbc3690911b5e046988dc85b7ccd09b7fc061f9259369601252aaeb4863d8d57796f1f4518130c911d1a331953663ef8a80fec491308297ccea77691fe14820aca10c6719c205988802791a54348222d6a34d9bf656696f396b27cfdea9d5b0e36838640d68ebe3be9ad72450232b66a5db274087e7a350a7d6abd95adf2557ee93154a966aab798b45c2fb1d5fa1f92db67a5bb2819e580dc15955249065189e4d1621c4517a67a76da14090a90b4da7272f57acc4228b49a1e5dc30002c11d03df9b60c382c026fac97ca1e389d6bb2af95494c2775b789988860478cb1e0a0e8e6a5b823fcaf6f8a031983408624a301bfad96784c9fe217e0c656cff8b65b3897a966c5ab572d269e30124ee813ac08ecec1aa40b73a3149e0647a00c612c0910878a079b5c163029435356473beced7fbc6ded2ee3e313082501fa91dc3ff05e4be525212ab350dceb9ac95c4f1db5399ea008b8609cb0c0f1a1319b9de77bbff478c197b9318005cf401a84f49499808fc403ea3ff9e1874d5ebe7997a0c03d977542c1877348da98f1d05641c9debd0dbba6b14ce8a83ac11de52ba7451cd1bb75f58ecc32676b3d00a76ce09e5695380ecc2e73f44ece11f77238d39696572e46761c7d5e638e94693591b70fffd8ab98b3294fc2614e3ce31424947d0515baeab18ca4a23d479fa0a55d2950082cb770dbc34e138e9469f218a657dcdfee84cac9131cf6ad38000630aaf3fad747cb1dfc777188bafc927e7371ae2be48772afc09b7937784c8365c0ac6caac7de7ede4202ba8d28b18e6d20a217c30776f97546dc65822ff02be3be42f6043f828927ddcd693a7b691f9312aed70b5346cab9ff0d21e8783677bd71cd1b5e4975e588e121a90cdb6b4d3219effc8a868dd110f5cdfc119c121c84c2ad04189f84cec8f7d98d71ebb1f9793af002e2d645d7cfc03e3a4f61c28ff69f08024a93b8c712df64c83859374ae6d5575048d7baa3a0fab0ec0ecc731e3523d9deaebed7de16e9c6c453093de8738f8d7f4a244a6f15432cb494855c6c9b840d514af760c73b88099a66fc926b2f05befc766729f109ea436bbbb5ce2513fe654d7e0b379b49ed555cbddb8a690132417a31f48e530449ffe71d1f851acb1bdf245ec02dd39925782511c0d8930f17a14c54906d96a2daf27144914135cef344451982b50c71c1e5bf7d63f646fbdb749e2e9ce8e84ed334fb90d9ab7c6e7b265bdff840606ec572b035877e7d18cad3fa246ed000ec243d38da351fbea47a54dbea0942fbbf3fd9b00f19c21417159eedf477eb6af4ea228cde4ed64cc2d6890db81c74e5e08720dbea0f5364c1923cef7e0a883188a99896483d2977646bc9ebe9c8667fa68b3aa9cd961ad1dcaeba799eec564d20d771390c2ea12eb8cad0575d08320515c790155dcf477952c72c536e1bb2d6bdca553b02d23992129ce65d520c9f38bd385e37b98ac6c6974bd1fce4d53a7d11666ab3c04b6ff39f93ea50790aa027062d99c1486c5c692eefb05c29737b178526c91b62595f79396d40f2558148dd72652806ffd9fb334e744a2025070780d684dedb6db564fc76a5cf6f75766806e5c644bdb58c6c2aefe02a523f676aef200a3ea928810be43ec4367ec203edae43eedecb608cc48cde469217e36002b8419ba55ce00044a6d3590ba22c77001347c1545d07486d6a5f70ad9561fee62ee4eda80953218711d68ead9b38f3ef1012a952a572b38a5c90536754717799777574874b45e0b39e938ab2d31823bb1f44f965e225be271b69a9ccb32da2df01c65401df771f5e3e195ac9178227e3c4b522928d95391c1f6869ec2e340caf3f336e246d042da8fbe9702980babbb45067d82abebdfe34e3832c123575c479b66a33e22e47a5d8f7ee3c40fb538a3bb7a08ec13017f4c58f7ef769b7597f7252c8b6d0e4bbcefe0e32b4c1c92c5da2506d2be19bb6f71e662fb81f016404c96c50e4ad61dd3ba73746ce0489136d3b0414992f506900151bfbdf118a0e2f998f893560225da2c19280238cab9a986c747a265b22c0d6473f8248f83a3e155f4ee67cbde536b3c4dce586cc8d8ea15e55f3569ede91d29f9fdbaa88d20909f3dc3450e22ddb91722ed6e42f515db47259b74e25966408f4cab33177a74a038daf0967864330fc0be9f1f2b685cfa288bf89e72fecefca841fd0564a47826e586b6d4eb8dacbbfb0808a3255d5f69a8c56ca6e17f2041eff85aaa4eac86c1008d428d91237ec5e2cedad5383703ea7ca8e7dfb483ffd8e1f2abe1a90af170660f881f6cac3025087d72b6454bbc3f8b7308a27ee8a6e8294955903b0a69f66dbb4b6d7dfa2e726ebbdf91908990b042bd09ae9a6f6cd39a4d626f62b2efd8e85c02adeb492a9c97a4e883cd2660b570d0cf5b13c60fb58d60f07ca43b2b3a21843f85801c8d824d2bee451b86db0a61b45142a397372a3deb3bc10d80bf4f9907f5f3200c65f9cb6dd6411284ad5f7b837cb121c42b99f1e517569fc12b2606cb3f45daa0597a8aec824bfd4a31e4b17d5715ec48e8b9e666a5a9f881884b5d06cad31f1830d76db5bae7ef1833b727f6a15c0f32b8e561b41d4f286c74c901201ca52b95dd2b7bc930f5c7702eb282f4dce8dbb37f5137996967a07b0131da890e27edbbf5f5bcd3885889277d6faca161a138460fd1e70ef41179389c87338eb9eae94f2b8167e7e0683836b6153b7428ce1969da01b096eea0b4e7d5d85bb96037c17ee9ca630921367f17eb83845264fec0ecc866e58f845f2f32be57ea9d5c2c595f82efa6608c4c8946f0f56f3856fdaf3b8c0f78a017604521c727a136c2ac28c16ae19da2482c199eb7930fda5198f8269c774b8b2bd769c377a6f86416c2c3579e57a329e74021597aa1ed4e6da50806bdbdee831101cfa13b97e99fd512e43fa414f7b4cf1262c16b9e30ac4c34b108355ac16b6053751fb8c2f4eb4bbf7edcfbd0184f2250344e47bbfe9ca50f0e91e65c78270c58603c20679d739b454d1ec3301fd6b884d00d7539bdd3178126aca8ae37b9d8ecfcf14e62e653864d3ee4f1fae9ffb2197ed8a2455c90359b6a09910b79c2822f04bf07b6a27e01c9f1883fbcd08b7c26d7c8c25271338914cbc157dbbd0efada31709841831c71c1aaf111d0d46845d9aaeb7249dae34fdb050047ac38fbf0b746f33d6ea0baa5d4f7ddadeacb5831b7f9d5e219e4bae55d0b8594f52f0011badef967afef02884ce212c3341c340ee8fdca78e887b7bf2a98c31d1bb8a3969b8b4c939c362cd3edc19598fae9ccd82c88aabbad4c4ae278aa1b59d2003375cc932210f4a636af6c3126f200c8a7ac82d8226f244661ac6d73aa76edb53fa5b2216f645e873de27fbf580c7148fa72f992a220d1d4f499779e25c8b996c580a1165848d23088a6369957841653e291c7f520a8665997bf958ff7da53bef74eea85e3a1a3657945513137351cd4aab8499f23718abb8f66dd7d60e9775639e32ca1e8faacdb8f6b66d0b1b714af355773f1aed034f2e4cdaa17bac308dfd889bf123762b5c894de392a3081af84195438fdfd1868e2d978bf3ec1df5e81b9f8f6afdfbe3dc344f2a6dbf550080e403690d2ca7cfc0244014939aa79a8b3a0933e2bbc226385e3e4188a1ba2b37c34e02fd28c31f2c48d1a83294da501ab012d1d5e5fd26cd41ee71b4a150cf784486f9f6b5ab510cf07cf9792dd9e4d8bf48f06464fc957885d346fc501f21a07ac7fc71b9c01519cf4d2fa766d15eaf459fc429ace3a1a61ba078da7324ac06e65d7f36271f6898e8ccd673edeb25571c44606d7bde39d5195472e727bc7e2a2d1578328cdaf90400a7843f31793ad33d0f32885bf9b1f0e56d4a3ec40a1094e0ecec32a1712b88ff3008213795ffece882254753011c6988931fc9f19b5ad0891e20887b47ccf460e303842bb4c0b62163868e805b3bae6e4937a476e7eafe9fde0d0cf62223f714c69be6833c10d06f91a78016b1c00087415ac4a5b7b5e10f98a3e19adf60d56d5bef918c1c7ebbf7cfc37130ffae2ad7a620250c7387069ecc926f34069b717b97bf2a0ef0a2bf796034e88d30aa4235744a1aa5601ba718add8cd0cf38411f4787cd22e21dbacd9e480b13af38477e70d2a4800f680fa7cc8684fd467b86555422b1a901144b03e4327b2573769cb02de90e8e30df7afd2e571e2946d23a0efe02bac8e9698d12589378e28d1c36ce328a27abff98eca7b6da95daa681700397ce62c9b50a47cedeafd51b62e953413639a9d9978fb3e1604027751da66b5e481ec1e4697d64a4477c67ec2967e2389b6f716f77c810a62a5fd78c69907f4a4dc210db30d5d4e9dd1a82c9ca1f0dbeecb33a702f4860426e7d1c26d1a00ee4c62e3d671d545b26aab8ac758c53cea2250ed929aa715bf513a5fa242b78ddbc263990c42025ba2a52e368f6a18e2cfc0a6047e7f0e7187c3e36d61905cf0cf824a08e5c240ec56b04c909390322ce24f35001e8d5a599ffadbe2a8755920cc488f40be225110310d4e9e4d4cfa34f953c6f6cc6a5f8a89373739dc5da9445947fb58bec2c8e5b7f8c349d6df29e6a87336dd7bccb036139922faf14f3eeb92ba12d0084b1da8d36a3f9656414c0f32a1b2575a5147568ad96c2125701fc67d00e9d78788bfd0188276727d568bb0800a576913dbc5c1035fbcaa5359bc9b7fca0ef528903250be1a942e59727789ec61ee1ae617c3a23d3a89044a9ec729ef0cf7ec6a3d01e06e864c2e24c38a8389826c2cd471cca5cfd18a34050f24b99dcd26d418465a5e3623d7c9dffe7e65fc25f90710f42d00fb81b33a2db18d0ff7955c8d87ba8fdfe1186b638312505c7810dd0ead9c7722fcef542d2a73f107993e3ec78d3a0b15506ebd4d13a72384f77268b44c32a957aefda0bed253e76cb09012f104bd0c1f04e96b1fc60d08eb79ce9216fe1fde6ffe65d09056c9643ada21ef080b9da75c10f71ad334e4d3b5d3a0e55bd1ffcc18259cd28f6bbdfab16575cdcce86c95f894cd001e795cdaeac95c90d1ba94806ea2fdf45906eb7a2ba0613503f7aa7397e78c964ad3251d297ea76d88b4221efccb2c", 0x2000, &(0x7f0000000d00)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) connect$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x2, {0x2, 0x1, 0x3}, 0xfd}, 0x18) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) 15m19.033243354s ago: executing program 2 (id=113): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0xc484}, 0x4004880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e00}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = getpid() recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRESHEX=r4, @ANYRESHEX=r6, @ANYRESDEC=r6, @ANYRES16=r0, @ANYRESHEX=r4, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYRESOCT=r5], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x822, 0x9, 0x3}) r10 = socket$kcm(0x22, 0x2, 0x21) close(r10) read$dsp(r9, 0x0, 0x0) 15m16.750728003s ago: executing program 2 (id=124): r0 = socket(0x1, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x50, 0x0, @fd, 0x40000000a3d8, 0x0, 0x0, 0x9, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0x82df, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) preadv(0xffffffffffffffff, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000c, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r9, @ANYBLOB="000000000000002014001680100001800c000700fdfffff2299a"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 15m15.732499442s ago: executing program 2 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="a648c9bd9f57fb0c961fe331586060c3893610be2205d185bcf83c85fd736ada7f6324a498056bc6dba294e954a47e11c709cdf27e57604b61bcdb6da6e91b08b01eaf7186fc3fe0c953d433ed8bd2a178ff403201ac7d87969c3a01e3d67e5260d8c72653cf77945f44117ae21c784a985381d937d595c05508a74b3393c70c5b1f96f6d99eb81c5ae70d3516afce5d1c961af40aa342aa5f1739be45a234bc492a", 0xa2}], 0x1, &(0x7f0000000740)=[{0x3c, 0x102, 0x5, "9be39eec78eae9ed75249d4b067cffeb4211db7502005b94fe5daba7f78f0734073216ffd36cf3ed8b42841362d6dd"}, {0x94, 0x10b, 0x2, "93325b78008fc16149847f7cd241474f197d18ac9b73e7f2aa209b6fb360ad8c99c0c2aa23dd279e8c3e0afbea0527a9f0aa33004651c5d5388501f19cf5fbd451d1e0ced30bdb3b06716f7ef1d5ae4530ac031066723b854d4426e7237509ba212a3bd0484eec9fa496af03cf43a3cdd623ae22f309a851bd531df19abcdcbbc424cda235ff1c"}, {0x100c, 0x118, 0x4, "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"}, {0x58, 0x117, 0x3, "2fb97215fa04bc888852f9ef43ca5bc797ec6c335d5140a410e21e85d058a4f9d356f7fe63a163179698e07726987bb21bf8abbb1b854782b661e2778f92effd073aae2ac52e49efab87c7f9"}, {0x78, 0x113, 0x667e1a48, "fcf729debb35b4a36ae2e820c555eae5aceb00f5541c9dd3db82d79f6ee8b80a19a06885bcb42b9ae1e620f981af81b7551bc5d42c7c68cee27ac038379866fddd097d83af44dc96116ad069d5f1224d38863fcd7b21369512f52102eff091d82bb13e825fecb89b4f9c67"}], 0x11ac}, 0x4000000) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x8200a, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x2]}}) syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r2, &(0x7f0000002640)=[{&(0x7f0000000440)="ea8dc2f6dc71", 0x6}], 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRES8=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67886f75705f69643d", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES32=r2]) unshare(0x22010000) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r7, &(0x7f0000000300), 0x0, 0x3, 0x101) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r8 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15m14.901345502s ago: executing program 2 (id=131): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usbip_server_init(0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000d9010000d5b2839116c391a6a54f99600c158b6c83654a12237d08ba579863bf8e9c5f00a0a21e2c10a14c20497515221ebd18f073a39f207ee7b1a7e09e4ff5ed593292edff587ebe59b2d6b376ae9eab75d513d2f80e1517431ed837108e4de72ee0e975a393a2fc347988cc540333b1add944c9fe822264a0148fa70337c71d86ff543ad470c477e475378c309af85526d1d9595889729a4a688523ef407881f1f3d1e357a1378aac5dd850c8574a504155c249100101b1a16f4e2caf"]) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m14.5521813s ago: executing program 2 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xd4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/147, 0x93}, {&(0x7f0000000c00)=""/136, 0x88}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000140)=""/60, 0x3c}], 0x6}, 0x1005}], 0x1, 0x0, 0x0) r7 = openat$null(0xffffff9c, &(0x7f0000000000), 0x600000, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f00000000c0), 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x64, 0x4007, @fd=r9, 0x80000001, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}) 15m14.272619489s ago: executing program 32 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xd4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/147, 0x93}, {&(0x7f0000000c00)=""/136, 0x88}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000140)=""/60, 0x3c}], 0x6}, 0x1005}], 0x1, 0x0, 0x0) r7 = openat$null(0xffffff9c, &(0x7f0000000000), 0x600000, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f00000000c0), 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x64, 0x4007, @fd=r9, 0x80000001, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}) 12m58.591447402s ago: executing program 0 (id=693): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) (async) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500240012800b000100627269646765000014000280060006000200000005001600f7"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) sendto(r7, &(0x7f0000000540)="1d", 0x1, 0x8010, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x15, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0x1ff) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 12m58.239897638s ago: executing program 0 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xe8, 0x3d, 0x10, 0x0, 0x0, {0x1}, [@typed={0x4}, @generic="b9d720367b850e1f290ecef2aaa3ab254c8d1e4e2e68a22ad22443dab360328fcfec46b40792e61d5ed1b8f857f5e1a7efbcea045961eed3c48df3c39e120690bbcc609f7aab899ca7cd4cd1e0d197804a549f0cf7bfc68b00e8b3af8516cf253a5fa1bea8645e00190715a00d0dabd5926bd6f9f2c7810e8845f083d3b537c7e7d7bb0ff2c0623719fe6fe3678694ee3b8563dd8390089d0406716d9e599f43989e15d2007800b7aac7aa9c87f42bc6f1a5450ec1ab3e4c21d59388e4ebff126113a30ee8", @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xe8}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/config', 0x10000, 0x1a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 12m57.955869587s ago: executing program 0 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 12m57.890163706s ago: executing program 0 (id=701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xe00, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x91242a, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8917, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904", @ANYRES8=r0, @ANYRES32, @ANYBLOB="09e03d18e79305a82e9dd0508e0b88b3e8ba01be2aa5386abed3e1745a7af574bc4fb5ff9158aa55e0511ecc9e8e594a2396f46d48a42450fd64f33c854b6bcaf0bbcc3f50e3f4def9f2f83920e078eb9b12f9e0096045b31d0d5590b8b67289b2d51341ff8c2b8b14c44c8ab5c24086aedd9be32af35ae537724e28e2b6023b136d888412ba8499a7219e3e50142db1f30718319110e8531e847f245d10516a02e7cf0f538e9326d1f67c56fda467c8cde1a009cf407b209f4638c3256e3adb361539ab3dea6fdc27d061070ec47e3cf73ac9cb", @ANYRESHEX=r1], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xa1, 0x77, 0x62, 0x8, 0x401e, 0x29ac, 0x7ded, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x30, [{{0x9, 0x4, 0x20, 0x6e, 0x3, 0x8, 0x2, 0x50, 0x4, [], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0x97, 0x4, 0xa2}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x81, 0x9, 0x6}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x4e, 0xfc, 0x9}}]}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$UI_BEGIN_FF_UPLOAD(r8, 0xc06055c8, &(0x7f0000000780)={0x8, 0x3, {0x52, 0x1, 0x4, {0x2, 0xa1a8}, {0x401, 0x9}, @const={0x1ae, {0x6, 0x7, 0x8aba, 0x1023}}}, {0x52, 0xfaf5, 0x7e, {0x1, 0x1}, {0x4, 0x1}, @const={0x2, {0x30, 0x5, 0x7, 0x4}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$cdc_ncm(0x6, 0x171, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15f, 0x2, 0x1, 0x3, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "33845f1209"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0xff00, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xff, 0x73, 0xf8}, @country_functional={0xc, 0x24, 0x7, 0xdd, 0x7, [0xb, 0x9, 0x6]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x10, 0xf, 0xff}, @mdlm_detail={0xc7, 0x24, 0x13, 0x3, "c09335533e43e3bc4586b726ace6dc28051ff4c8ad72353bf5960270053e33d5aa8e610004ac65293f50df0cfa0f090d3326fe3823b2e6d3ea7808f106b0f2c5f25cd20e5505fea4e1233f00420cfe55569198eb68147a9d11082266bc66a3b31f32133c5ee50b673f77887a93278068bffae2e3056a57a148094f100a9b093e0871b4496a2362b41759096207f4c8476515d65b9cafd67ec9981c5eb79b2dcf2f4c11b8b9ae9d9c7aaa4fab261b31b0d6e41420a8d9af1b13a4312e4a69abf7313c7a"}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0xc, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x92, 0x6}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x92, 0xd, 0x4, 0x20, 0x7}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3e, &(0x7f0000000340)=@string={0x3e, 0x3, "ae21946ebae9b51330ae3ebfb1872c623c1169e6deb513d59418f7ed1152616a8c05ffc4f60efef04f991cb45204407109022e8e7a5c50f3fd63ac4a"}}, {0x3e, &(0x7f0000000380)=@string={0x3e, 0x3, "38c2d39acc049cfe06224ea082738cb455465c76f45a24f5f2723deac79fd9a0f4994e28b25ffec4ab87d66cc1372eedc27b4b84ad0d347b25ad9a0a"}}, {0x99, &(0x7f00000003c0)=@string={0x99, 0x3, "eff061d3da77a0aebbc069e4859877b2771d7e2d9b933a2bab795b84a23fd4f41922ecb6ecc9b6f05aa3354fd84a98ef5c447f4ef3b11c62a8c33e2210ae81c2aa60815bf2cd991e1051fc5d2dd464a201b17481a86c0e0a7990a673da0380cd02e86cd212cfdef2e10a2326ec37b757fe74780d9d257710a0ce423de089323a817c82b23104d2b46e73aab08a75dae474d3b29da6fa9a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x860}}]}) 12m55.663635362s ago: executing program 0 (id=713): socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x8) syz_io_uring_setup(0x1122, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8a}, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000402"]) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000180)) 12m55.171197371s ago: executing program 0 (id=717): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) poll(0x0, 0x0, 0x9) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/12], 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) r4 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000000040), 0x1, &(0x7f0000000400)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0x2000) sendfile(r0, r0, 0x0, 0x7fa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00002e8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 12m54.853941208s ago: executing program 33 (id=717): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) poll(0x0, 0x0, 0x9) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/12], 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) r4 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000000040), 0x1, &(0x7f0000000400)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0x2000) sendfile(r0, r0, 0x0, 0x7fa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00002e8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 6m45.237016212s ago: executing program 6 (id=2639): socket$inet(0x2b, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pread64(r0, &(0x7f0000000440)=""/255, 0xff, 0x5d) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000000c0)={0x20, 0x1, 0x73c, 0x4, 0x2f, 0x5, &(0x7f0000000000)="057abdaecd4ed9aba1c3e0ca39ed2cb58d2129b0802545063f4258e9c17393bba6ba00"/47}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x50) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800120001040000080003000000000008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x6fc7, 0x8000, 0x2, 0x13b, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC, @ANYRES16=r3, @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) r9 = timerfd_create(0x909d0830c92d51ef, 0x80800) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000000)=0x2) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0xc320}}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffb}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x8, 0x7fffffff, 0x2}, 0x0, 0x0) ftruncate(r9, 0xfffffffb) 6m44.228139877s ago: executing program 6 (id=2643): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x4) syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) socket$rxrpc(0x21, 0x2, 0x5) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffbb, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002100000000dc000ae50600000000000000000008001a"], 0x24}}, 0x40000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x82, 0x3}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ptrace(0x10, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000050010040000000003000000000000006b000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) 6m40.997765118s ago: executing program 6 (id=2662): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000012a6ab38fde76a83000000"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x101, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe65f, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x3, 0xfffffffc, 0x3, 0x4, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x84, 0x9, 0x3, 0x3, 0x3, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0x10001, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x6020400) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x8e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000680)=""/219}, 0x1c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m40.62801826s ago: executing program 6 (id=2663): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x6, &(0x7f00000000c0)={0x0, 0xc}, &(0x7f0000000100)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) timer_delete(r2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000230001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x4}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000001c0)={0x80002001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m38.548149585s ago: executing program 6 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0789bb00", @ANYRES16=r1, @ANYBLOB="0100000000000000000039000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x9}, 0xa}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0xc, 0x117, 0x3}], 0xc}}], 0x2, 0x14008000) (async) getsockname$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) 6m38.328145618s ago: executing program 6 (id=2673): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4000000, 0xa8c00) r1 = userfaultfd(0x80001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x5}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x140}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x420}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000019c0)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000180)="3515090000bb", 0x0, 0x0, 0x0, 0x0, 0x0}) 6m38.071127261s ago: executing program 34 (id=2673): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4000000, 0xa8c00) r1 = userfaultfd(0x80001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x5}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x140}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x420}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000019c0)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000180)="3515090000bb", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.023544232s ago: executing program 4 (id=4018): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r0]) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$rtc(&(0x7f00000000c0), 0xcad, 0x17d904) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x200802) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r6, 0x8000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'pim6reg\x00'}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x23}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x59}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x40040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x80440, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2d) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000240)={0x20, 0x39, 0x15, 0x14, 0x2, 0x8, 0x6, 0x40, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000871cf710cd060c01ce030109021b0001000000000904f30001cfaa630009058102ff03000000"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) 5.647762157s ago: executing program 1 (id=4020): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x10000100, @loopback, 0xb}, 0x1c) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f00000022c0)=""/157, 0x9d, 0x87) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x9, 0x8, 0x0, 0x4, 0x8, 0x6, 0x2, 0x4}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0xcd45, 0x4) r4 = socket$inet6(0xa, 0x2, 0x10004000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x1, 0x0, 0x0, 0x40, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d6, 0x32}, 0xa, @in=@local, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(r4, 0x69e) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f0359", 0x3}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.535965255s ago: executing program 3 (id=4022): r0 = socket$inet6(0xa, 0x3, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @loopback}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r9, 0x0, 0xf3a, 0x0) write(r8, &(0x7f0000000240)="94", 0x1) unshare(0x20000400) tee(r7, r9, 0x8f5, 0x100000000000000) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0xfe7, 0xb, 0x1, "2cc201643e3ac25e9a14ede1ecb8320243e49a8eb6fe5c784aeb84d8398ce941", 0x39565559}) r11 = socket(0xa, 0x801, 0x0) getsockopt(r11, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x50, 0x20, 0x3c}, {0x0, 0x0, 0x6, 0x0, 0x7, 0x126, 0x0, 0x54}, {0x0, 0x3}, 0x0, 0x6e6bbf, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe4) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x20}, &(0x7f0000000040), 0x0) r12 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r13, 0xc0145b0e, &(0x7f0000000040)) 3.699350475s ago: executing program 5 (id=4023): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0x4e, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b40), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x106, 0x4}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.045245112s ago: executing program 3 (id=4024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x10, 0x29, 0xb, 0x5}}, @flowinfo={{0x10, 0x29, 0xb, 0x1}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}], 0x30}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="ff0b000000008000c204ffffffff05020003c910fe8000000000000000000000000000aac91020010000000000000000000000000000072800000000081605cc060000000000000003000000000000000d00000000000000f2ffffffffffffff"], 0x60) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0b0e00", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRESOCT=r5, @ANYRES64=r5], 0x50}}, 0x4000) 2.891124842s ago: executing program 4 (id=4026): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='mountstats\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'tunl0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f00010000ffffffff0000200053fe350d"], 0x20}}, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000001c0)={0x0, 0x3}, 0x2) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) 2.701206358s ago: executing program 7 (id=4028): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="32fb8798fecd2f693da5186a5ed93a86fdd3a785a52575647e1c093fb2d21c59fe59d5b5494a6f4829dc143a7df133ae302dde78df62211e36944ca23dc7abaa60001f1095b97d6d8bf2830d8ddb34112a232891f44eb8eacdf63cdf361b9b1eaf0f715edd812ff28a4a830ca8d5fb97007a482e10cf30ab52b6ac643799461974165a81d3b5a6f887020460927a0e04a1ce3578b7af3d7caff9fd87a4a82c202fa7f531df39fa5121fd508ab35dd9808b95fa2df259909af89c00", 0xbb}], 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00'}) 2.697299856s ago: executing program 5 (id=4029): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r1, 0x0) syz_io_uring_setup(0x2222, &(0x7f0000010000)={0x0, 0x997f, 0x2000, 0x3, 0x389}, &(0x7f0000010080), &(0x7f00000100c0)=0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000010100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, &(0x7f0000010180)="8bba7aeb052a8dd63cb3ac3d78aa1cd11cb7729ae3074a14bbc5158bd9ee22acaf2a9131ac86975b4375affb5d2abb480d1fe035163ab431ee92382c4f936b9d653f1409785caabd81f3a37813e68d2ea6499469ea27b9794816169bff14106de4bd1ac4be46890ba11eda366e73da448932ce9489733ba72d8c9b8fcae915136e338180e9e4334331e07775a78a8929da4024c34cc53595c75d9f363f2c38607d282a1a113d789d029e1a25015718790f976d2256eb153eab8bda5402dc10573a890137dc9a4a8217ab3baf81e813e96db06db5b41f59b0", 0xd8, 0x5, 0x0, {0x0, r4}}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x3ffffe, 0x10100, 0x0, 0x74, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000010440)={'rose0\x00', 0x112}) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000010280)='rose0\x00', 0x6) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r12, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000200)={0x80007, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x104) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) 2.604290011s ago: executing program 7 (id=4030): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001ff83bd9ee7e1ee070000000000", @ANYRES32=0x0, @ANYRES32=r0], 0x28}}, 0x802) 2.553181555s ago: executing program 7 (id=4031): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0xffffffffffffff9c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x9, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bd03000000000000006652bfdd45ad57629828612b86b7970000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x5, 0x5]}}) 2.365138587s ago: executing program 1 (id=4032): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') read$rfkill(r0, &(0x7f0000000000), 0x8) preadv(r0, &(0x7f0000002240), 0x0, 0x37, 0x0) 1.921923333s ago: executing program 1 (id=4033): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000500)="0bc3ff5839b4f421de7ab2f981fec8", 0xf}, {0x0}], 0x2) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0xfa0}}], 0x18}}], 0x1, 0x20020000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000400800008000000e254a72a2f6357720000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000cc7dee63d9b48919b492e1f9ff283643b6b51318f344b8bef1094401072bd850ab6633c2ac157e", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r7, &(0x7f0000001780)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000800), 0x62, 0x12141, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = open$dir(&(0x7f0000000600)='./file0\x00', 0x490200, 0x8d) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000000b80)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c00)=""/139, &(0x7f0000000cc0)=""/89, &(0x7f0000000d40)=""/163, 0xd000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r6) 1.921140106s ago: executing program 4 (id=4034): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0xf4, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x31f, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10019}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}}, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_CPUID2(r12, 0x4048aecb, &(0x7f0000000680)=ANY=[@ANYRESDEC=r11, @ANYRESDEC=r5, @ANYBLOB="b954d4f5f5066044444632f400eaf1c31a5eb5b1864335a2bf77084ee1ad06a3a9258dd088c83ed38bfeb235df097d5c74e5f00e4587f300c28b3d2b4df26a994483def991b624f5ab77eea02ccadfc93ffa9c1044e1cb9b266e10f74e662f4a8167a6135ba8fcf93bf6cb590b0dcf53f4689c0271f743c794a56aabedcdd5aabdb7a1c137902beeb9d3f67679886fbac5e3bfaa44d960b1f12797efcbfe4ddc433439510184bfd8447977b5b366f61d48a2dba42e21000f5417a4f412803256e71eafaa1ee7ad9093ff01ddd058860e9b3a5bed1cf27f548f79e74af77dff62", @ANYBLOB="6b5abe9c53bef2ae2c65b4eeb5824ab2914f8ba6e811bf73d3dc357dad7aed5f9fa00a0c02705dd653ad30c2ca8b089eedc75f2bf2864b6a9157c5c2a5656edfd22583d0f329c653caef6974c9792ca38e32dd5698e2c91230fc119082a27450f7f06fda9b829ce1f8848bb811b3e71225935d97581cae0278e754847b7181a9430c1b8e46f3f7084235ee2f33682874cbb231183f3935fb415026ee2148498aebe5c39649bebb5661f2481d535b587673c4935d9cbb8dedb4e0d5b05e6cbc480defd3389c3fa6", @ANYRES64=0x0, @ANYRESHEX=r8]) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.71824138s ago: executing program 3 (id=4035): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000001080)=ANY=[@ANYBLOB="311c97735e1c41055a61209f8ed617ef6b018c57e7d6fc196c2d0fa81c3a35a51e5f16b60e21da205bd9f57ee4bb891812e77a2852775e34b4e9b8296c734b3e070099126589dfef1c151ea87370975869ed6e4ea8607103d8c7aafb53df859a37491467ada01ca0dddd7e4ecde2f247e673303f6bedf13227e1f2282c9cb9c1db1860aede5c8675b0ff361c2ed28957af263b2efb343ec3627af5c9dd5858358b12dc5eb923cac235cecd0dea56c7802e08b73242677e55bd58f4066cb8d55780f090b4aa7455476fc3a98e0eb8322016b0c4769063", @ANYRESDEC=0x0], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x121e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0xdb0c, 0xa, 0x1, {0x22, 0x350}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x0, 0x81}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x8, 0xf1, 0xff, 0x3b}, 0x13, &(0x7f0000001180)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x5, 0xc}]}, 0x8, [{0xc5, &(0x7f00000011c0)=@string={0xc5, 0x3, "bb9f58aac21f830718efbd34961a665ce99043a0d5e253b4d4cf4ec6f7395a5da4aef6184aa04d9d5706342e881b29fc5852850e3daece435aa208114bcaab691665f84f5d00ba57820f0c0534393e0839050336157cecf39dd1d334c4c0b99e5431411fc9bf37fbe2066fece264da0d9f999ef19ceec71dbcc17902912999c0315980d145781f3b71382042994bd9be1c0b3ccc4e873de9279667c6cd6923c9bfca2cb7c663a2ac044bf41a710268f39a04195d53dfbc831ffea6c04100cc6a112857"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x42d}}, {0xd1, &(0x7f0000001340)=@string={0xd1, 0x3, "1f7c2951bf6698c22a244cbe59c5fe3ef0361d6b62356bfd731ec0616066abcc0e8bdbd7a2dd4c0a3a3e5119148e492adb03ae6fe9949d089cd4fb081105b3bf58633b24e4f66e0c02790dae435dc1820bc2d485dbb6c176f394f31b38bc0fa4f7a627c34e573c505c5aa581ac7f8eb30972ec91a6d597d1eea423e1f52842570981cb7d8d50dd19ef8a01be3741bc36787dfb42b0f5c6daa17c96111f44c2f5ca3d157f6ba6affefb9a97fb24505e1481006ee6e5960e50abfa28adfb22d1242818bb12ff95341caf61f0f66dc0e7"}}, {0xbc, &(0x7f0000001440)=@string={0xbc, 0x3, "da371270246b8e53a86496ffec7b535eceaa15b75537909f966a0065027cfc21faedd9fb5660ae650a586e690d8fe42431eef4469b861f025c90a0b32fb896253df34a56359db0bd842481c0b57dcdb6106a016c3b9086a8e34a5b6e468d50785dc39075bfb5e477e43c413ae476b456148e83fc0a66189b91e4170e0e89c7c8c7283cd7cea9c0ec3159fb804141701f38b0bc6ceb17c9d42df26611a0df2ceff1b01d0a0a1e04455c89b130f07582b984b21d8d475d7ddf804d"}}, {0xc2, &(0x7f0000001500)=@string={0xc2, 0x3, "e36d4b85733456e7eb4f7ae29119cb31d011febcbd13fbda3ac0155d0c9618db6d859fd538192497ef4ea95f9cc24f43c988eda85a1b56643e13f3722f25e3703d210b9a6856ee692afb71f7fd7ece078b92ad6cd631de0ae284ea845fbf237636653e96f81c30443038345b9d54c99ab9e274ef6a24ef20dfbf8b29b4e22ccb565c51318e9275443b0d995dee3a6da2bdbca5b918c059667087b0dc47245729d2010484736ea38321acfca8af4d031170760383d1768b1ff59f3cbcdc019b2b"}}, {0xab, &(0x7f0000001600)=@string={0xab, 0x3, "9541d67a9a306d378b38da862f5fea67fc1a6719b12f98ebb65eadd255a3ad2f8aac792a3ad9be759d7bb6cecd3dbb57495b3719d4a5b48c349ee56c4d22bab96242668fe5340d2c68b1b16ddadb5788ed42042b4811fced53ed500d86d375b052071713f7cfb954b3bddb2ac4c2f03192bea5436edc5c680faee1e99e20bf97fe3e385a67564b7bb0f061fd8efe2589f257aca16cb7a86f7a7a10b78059880d53c7ef292747df4f9d"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_ep_read(r0, 0x7, 0x1000, &(0x7f0000000080)=""/4096) 1.184004319s ago: executing program 7 (id=4036): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r5, 0x25}], 0x1, 0xe8) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) clock_gettime(0x0, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0x2c, 0x0, &(0x7f0000000200)) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000780)="d2", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r13, 0xffffffffffffffff, 0x0) 1.113420584s ago: executing program 1 (id=4037): setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6}) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x400400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1c03, 0x10}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x7f, "921a87da41b7a61614032f46510cd970532b99a75d74425336961941857d2d36ff398674b4e95f6b0903db56f4bfb5ace075650dd9b64ef8f713a950df5fd235aa4722b88061f1bdfa456728ea3449f658d71c0db9c20959a4e66e9df8e20a8ac2d9c55984ac446ca3e24fc0bb0161c66d2fca3d731be806eea00447bf8e75"}, &(0x7f0000000200)=0x87) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7881, 0x80, 0x9, {{0x3b, 0x4, 0x2, 0x5, 0xec, 0x67, 0x0, 0x80, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x84, [@loopback]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0x9, [{@broadcast, 0x5d4e16a9}, {@multicast2, 0x2}, {@broadcast, 0x7c}, {@local, 0x4}, {@multicast1, 0x4}]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x5, "cc4d34"}, {0x5, 0x6, "912f0e39"}, {0x1, 0x3, "95"}, {0x6, 0x7, "c83d1b53d9"}, {0x5, 0x2}, {0x5, 0x10, "487752fff16b08b8dad84a117306"}, {0x1, 0x5, "3b4ea3"}, {0x5, 0x3, "e4"}, {0x7, 0x8, "b1c8a8a29a91"}]}, @end, @generic={0x44, 0x6, "111fd068"}, @noop, @rr={0x7, 0x1b, 0x26, [@loopback, @multicast2, @private=0xa010101, @local, @private=0xa010100, @rand_addr=0x64010102]}, @rr={0x7, 0x23, 0xcc, [@broadcast, @multicast1, @private=0xa010100, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x5, [{@remote, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x5c, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xfe}, 0x7f}, {@broadcast, 0x7f}]}]}}}}}) sendmsg$can_raw(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r3}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x4, 0x1}, 0x28, 0x3, 0x0, 0x0, "a88a9b1b2f4ec17660464e3bac891d58a30a40e9214aba0daa456a515213252aac0e357561e9592195cb102b29edb70cca2257b0d2ebf36252668fb8052b6b74"}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat(r0, &(0x7f0000000580)='./file0\x00', 0xa202, 0x11a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000005c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1a, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe8a7, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xc, 0xf, 0xa, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x1, 0x1, 0x1, 0x8, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x98, 0xd, &(0x7f0000000780)=""/13, 0x41100, 0x3a, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x602422e7, @void, @value}, 0x94) bind$l2tp6(r0, &(0x7f0000000880)={0xa, 0x0, 0x2, @empty, 0x3, 0x3}, 0x20) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000008c0)={0xf7f0, 0x2, 0x5, 0x6, 0x8000}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl1\x00', r3, 0x7800, 0x80, 0x7ff, 0x9, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@end]}}}}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1c) r6 = syz_usb_connect$cdc_ecm(0x6, 0x99, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x7, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "f87da6"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x1, 0xfd}, [@acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xdc, 0x1, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe0, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0xff, 0x1, 0x2, 0x8, 0x7}, 0x3f, &(0x7f0000000a80)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0xf, 0x12}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0x0, 0x7, 0x9901, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xe1, "69e3bc9cb6bf7357cea5b5b98ef912de"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5c444b7c83ff818884b9d6b16dbf9f07"}]}, 0x7, [{0xd5, &(0x7f0000000ac0)=@string={0xd5, 0x3, "c24105dec16a31078293c350c65904579101a620ea09362bfeb77f66d19d5eec0e0694edd1466c833ab00f0b6471fc5319f2ebfb477685fa323fcae0c1e6bdde8b9926494b48214a03f31bed4f0d579bde5ce0003e7b1c51e33115c357cd82505f67c9ffc279346a7c4b56bbe2d0c0b2e9ae8cc17f96bf96a9cebe89138aa88e99887e005006352262b3af422807d67e696e636f5205cc01b490ad44e289e45272c84e6686b14bd5904b007e40654ea31714ee60b37b9a63f4808ace14168d1b7594ba1ca16456541b45ab67dd454b547232e0"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x3001}}, {0xbe, &(0x7f0000000cc0)=@string={0xbe, 0x3, "4d8c35312dd4fb39977c34898c601e287f404c802469f0ce3be86530bbea23db75090dc764fd90ce1172b4a5654195bfdd3fb35bcd2f7f9b3f28cd89444de17ba65e4f4455280f34a387d4515babc7c26d1b7cd56cc7b659a609c509cba1417b92e50acd97920fc53c4f3de8edc60506fce62d69df0025bbffe034841acc390d70bdf95ca7b5c0e92cd6617568f2e79fe9ad7b5bc5ccfacecf698eaa6c232163ecbbfe0876e42a1ed3de3b60b967960e815d18ac7f86f40728a04ebc"}}, {0x85, &(0x7f0000000d80)=@string={0x85, 0x3, "4d8a27aa5e84ad18f45321cf0ebbb0441726cba13054c03e749f2821fc908d097565e3636ade7cd45ef7c04d0e81cb887c24655bab55c03ea41dee8f80b1fd4aa36220ac50fd4cc7e0afaeadb7bad7080f1354fff04a93135597083167e833f423dcee1901fdb053163005e4670407cec3df3e4b090e820189e2fde6372a01cb507569"}}]}) syz_usb_control_io(r6, &(0x7f0000001080)={0x18, &(0x7f0000000ec0)={0x40, 0x22, 0xa4, {0xa4, 0x23, "6707409da6b8cf34ce5d2307b898ffd4ed4f3b137cba32c96ba9b9e9154e6090d998ed86a781456a808956cc56eb85fae1a645a509166083d24ba0df0e1ce56aae49adba7242e5b01901f2035ba9cf75b7b8f51545ef88ddabed0224d279dd93100a736a1cff8664ac83845d8eb4b48adc67f545a4bc9f9fffe075111a0c7809c64eadda6d878b4b59116b26e7e67d8bdfe182be0b5fbecbca4e171d000d72fdf25c"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f0000000fc0)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xa4, 0x0, 0x81, 0xf00, 0x1eb4}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x519, 0xf00, 0x0, [0xc000, 0x1403f, 0xff00]}, @generic={0x8, 0x10, 0xb, "b239a09fbc"}, @ptm_cap={0x3}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x6, 0x81, "c2f7dcb2", "a9603b4c"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xec, 0x1, 0x3, 0x10, 0x6, 0x0, 0xc96}}}, &(0x7f0000001580)={0x44, &(0x7f00000010c0)={0x0, 0x1d, 0xf1, "4c69b3806a8bf894b4af9766d57a29d66bd90c51330b76b42dc9b07a833ce3f07e33f9fb18a243ac4a85adb0ec4cb6cbe2ed2d3ad21b0884562811305a60c5e74b46d0b16bc9307a6ab921e1d0df66b7baf5cbaccc54d7a5f8cc3140066f61093fed46d37b1416914cd743ae93eef22efcb3f2e967ed9ed4e70a6a16c4b5c895dbcc342c941165d6e87e7a93bb7e02587c8da493116107a9306cd66d9f51d8e77119c9120690567e90454cf636c403972d63471ab9536c3aba1918d2bc2a5d147b25bb0afe0142e5c0e023308c5e21841188cb90dcfe9d63541563fce232f6dc1453136f4f170c90d816ba8193ed5ef86c"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0xa0, 0x2}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0xc732}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0xb8}, &(0x7f0000001340)={0x40, 0xb, 0x2, "fc56"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x14a5}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, &(0x7f0000001400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x19, 0x2, "93ce"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xb}}) syz_open_dev$usbfs(&(0x7f0000001600), 0x8, 0x200280) fsetxattr$security_ima(r5, &(0x7f0000001640), &(0x7f0000001680)=@v1={0x2, "9978560cdae5b08ff62af0"}, 0xc, 0x2) syz_usb_control_io(r6, &(0x7f0000001880)={0x18, &(0x7f00000016c0)={0x0, 0x5, 0x1c, {0x1c, 0x30, "4d43845dc02b94681329930021af7eb3a36429b1dd01370ceb35"}}, &(0x7f0000001700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000001740)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5dbec979b57652c3328e4b63cbff3660"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x69e0df3, 0xf000, 0x8, [0xcf, 0x18000, 0x30, 0xc0c0]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x400, 0x78f, 0x1ff, [0xffc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0edd271dde464e6fbe8fab25869d2af3"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf, 0x8, [0xff2040, 0x0, 0xffc03f, 0x1b864b29928b18de, 0xaea026294ccf5ffc]}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x2, 0x8, "494fa557", 'Qf)L'}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x6c, 0xa9, 0x4, 0x9, 0x4, 0x3}}}, &(0x7f0000001d00)={0x44, &(0x7f00000018c0)={0x20, 0xd, 0x5b, "ef2395a6df5cdb2466f88f26429a1515c7f79958a9cfa1a6c817dbfb8edaee4d993d34a95dbbd289aee50e0fde4670d0c595a511c0b60853c7268bc92b2b8d5f2ca870bd5b0ca158ae4beed81ef0712286adc36a2686fa0659a333"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0xdb}, &(0x7f00000019c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000001a40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001a80)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001ac0)={0x40, 0xb, 0x2, "016c"}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001b80)={0x40, 0x17, 0x6, @local}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, "32c0"}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0x8f}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0xfb}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x5}}) fcntl$setstatus(r4, 0x4, 0x40000) pread64(r5, &(0x7f0000001d80)=""/22, 0x16, 0x5) fcntl$setsig(r2, 0xa, 0x34) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2c1bc02919211b8d}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x77c78e0b71cbb02}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'wlan1\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001f00)={@loopback, @multicast1, 0x0}, &(0x7f0000001f40)=0xc) bind$can_j1939(r7, &(0x7f0000001f80)={0x1d, r8, 0x2, {0x2, 0x1, 0x4}}, 0x18) 722.180349ms ago: executing program 5 (id=4038): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffc, 0x2) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 668.053731ms ago: executing program 3 (id=4039): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r5, 0x25}], 0x1, 0xe8) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000780)="d2", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r8, 0xffffffffffffffff, 0x0) 597.456085ms ago: executing program 4 (id=4040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0) 549.264671ms ago: executing program 3 (id=4041): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001ff83bd9ee7e1ee070000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x28}}, 0x802) 452.147595ms ago: executing program 5 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x8050) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0800002001c0a0bb34ee01b70900e27cf91b781b1517fcf5cca9a5ae22487bc7b829fb9ddf97c273bddefb70919080355147ce011bf27f8f515e26a52bad80ff3433db227e6b26d5fc7ab5b0c1611a117663f3eeb14d9da20907cbe8019abdaca54c2a3e51122e5cbc37224fd7f809f70a956acac54a1163296628750880216a60f52c747513bd18b4df20cb07ae321313e9dedae101db01e06272fe1c7b545ba6eb83d0a326d5926e3d073555d5fa87c826406b345904797c506ec24d2fb4194ef206f2d54ebd1df7b3d37f65eb802aee422a189e69345ddefc24626dcf", @ANYRESDEC=r2, @ANYRES32=r3, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048899}, 0x4800) 439.612212ms ago: executing program 4 (id=4043): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') read$rfkill(r0, &(0x7f0000000000), 0x8) preadv(r0, &(0x7f0000002240), 0x0, 0x37, 0x0) 403.255381ms ago: executing program 3 (id=4044): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='mountstats\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'tunl0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f00010000ffffffff0000200053fe350d"], 0x20}}, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000001c0)={0x0, 0x3}, 0x2) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) 334.51938ms ago: executing program 5 (id=4045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03ef0000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 315.031871ms ago: executing program 7 (id=4046): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r5, 0x25}], 0x1, 0xe8) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000780)="d2", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) 255.016518ms ago: executing program 4 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x5, 0x220000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000400)={0x1, 0x6, 0x3, 0x5, 0x4, 0x5af, 0x0, 0x7, 0xffff, 0xc, 0x7fffffff, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800, 0x0, 0x1}, 0x1c) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='geneve0\x00', r8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000100000800000000000000000000772033cf742937afdd0d3971faec1e941a27a1c010ceb8f25f0a16cf4327c937236a07cc50ea94aa7307521f137f17e363209057408d7e2769e61ec0a806ce69d2c25c38ec07d8bcf0e2e1d9a3831100b08790d2b484e14f92c1e82740079977d5196414559dff78d0f5cc0f6cf2f88b364d070d7c4994db61765967b54fd6b2f066f5f3f138fb6da45fcedc9d56c4273efc1e3e17168da2e08e812245bfc36a48d553ac826d6a4caf3ac2f25c047e89ac1565125e7db4cdd7d29e", @ANYRES32=r3, @ANYBLOB="001c0000600000001c0012800b00010067656e65766500000c00028005000a0000000000"], 0x3c}, 0x1, 0x2}, 0x4000800) 219.367708ms ago: executing program 1 (id=4048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2011003d0007010000000000000000017c0000040000000c0001800600060086dd0000b8200280b4"], 0x20dc}}, 0x10) 51.595525ms ago: executing program 7 (id=4049): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x7}]) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, r2, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005480)={0x1c, 0x22, 0x20, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x80) 51.362255ms ago: executing program 5 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010026bd7000fcdbdf2504000000080017000c00000004001d"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (fail_nth: 9) 0s ago: executing program 1 (id=4051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) kernel console output (not intermixed with test programs): [ 930.436628][T18024] ? exc_page_fault+0x599/0x8b0 [ 930.436661][T18024] do_fast_syscall_32+0x34/0x80 [ 930.436694][T18024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 930.436722][T18024] RIP: 0023:0xf7f41579 [ 930.436741][T18024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 930.436759][T18024] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 930.436786][T18024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 930.436801][T18024] RDX: 0000000000000000 RSI: 000000000000023b RDI: 0000000000000000 [ 930.436815][T18024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.436829][T18024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 930.436843][T18024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.436870][T18024] [ 930.482148][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 930.942799][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 930.962735][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 930.979962][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input116 [ 931.004591][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.032185][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.062157][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.072881][T16535] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 931.082282][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.102186][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.122208][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.152941][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.249737][T16535] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 931.312079][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.358254][T16535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.399099][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.452198][T16535] usb 4-1: Product: syz [ 931.459462][T16535] usb 4-1: Manufacturer: syz [ 931.476862][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.494325][T16535] usb 4-1: SerialNumber: syz [ 931.544389][ T976] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 931.554314][T16535] usb 4-1: config 0 descriptor?? [ 931.560691][ T976] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 931.564227][T16535] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 931.596018][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.602733][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.915351][ T5839] usb 2-1: USB disconnect, device number 40 [ 931.998828][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3567'. [ 932.017082][T16535] usb 4-1: USB disconnect, device number 48 [ 932.190253][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 932.196622][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 932.206923][ T48] usb 5-1: USB disconnect, device number 68 [ 933.478506][T16535] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 933.662043][T16535] usb 2-1: Using ep0 maxpacket: 32 [ 933.673372][T16535] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 933.685432][T16535] usb 2-1: config 0 has no interface number 0 [ 933.701253][T16535] usb 2-1: config 0 interface 12 has no altsetting 0 [ 933.717566][T16535] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 933.734027][T16535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.754096][T16535] usb 2-1: Product: syz [ 933.769694][T16535] usb 2-1: Manufacturer: syz [ 933.780192][T16535] usb 2-1: SerialNumber: syz [ 933.800387][T16535] usb 2-1: config 0 descriptor?? [ 934.063583][T18058] FAULT_INJECTION: forcing a failure. [ 934.063583][T18058] name failslab, interval 1, probability 0, space 0, times 0 [ 934.107518][T18058] CPU: 0 UID: 0 PID: 18058 Comm: syz.4.3577 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 934.107555][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 934.107569][T18058] Call Trace: [ 934.107577][T18058] [ 934.107586][T18058] dump_stack_lvl+0x241/0x360 [ 934.107621][T18058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.107647][T18058] ? __pfx__printk+0x10/0x10 [ 934.107675][T18058] ? __pfx___might_resched+0x10/0x10 [ 934.107699][T18058] should_fail_ex+0x424/0x570 [ 934.107728][T18058] should_failslab+0xac/0x100 [ 934.107756][T18058] __kvmalloc_node_noprof+0x170/0x5a0 [ 934.107785][T18058] ? alloc_netdev_mqs+0x92d/0x1210 [ 934.107812][T18058] alloc_netdev_mqs+0x92d/0x1210 [ 934.107839][T18058] ieee80211_if_add+0x44d/0x1780 [ 934.107868][T18058] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 934.107902][T18058] ? __build_skb_around+0x247/0x3d0 [ 934.107937][T18058] ieee80211_add_iface+0xef/0x690 [ 934.107962][T18058] ? __pfx_nl80211_parse_mon_options+0x10/0x10 [ 934.107990][T18058] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 934.108021][T18058] nl80211_new_interface+0x947/0x1390 [ 934.108063][T18058] ? __pfx_nl80211_new_interface+0x10/0x10 [ 934.108114][T18058] genl_rcv_msg+0xb38/0xf00 [ 934.108150][T18058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.108177][T18058] ? __dev_queue_xmit+0x1780/0x3f60 [ 934.108198][T18058] ? kasan_save_track+0x3f/0x80 [ 934.108217][T18058] ? __kasan_slab_alloc+0x66/0x80 [ 934.108245][T18058] ? __do_fast_syscall_32+0xb4/0x110 [ 934.108288][T18058] ? __lock_acquire+0xad5/0xd80 [ 934.108318][T18058] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 934.108340][T18058] ? __pfx_nl80211_new_interface+0x10/0x10 [ 934.108370][T18058] ? __pfx_nl80211_post_doit+0x10/0x10 [ 934.108403][T18058] netlink_rcv_skb+0x208/0x480 [ 934.108427][T18058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.108455][T18058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.108493][T18058] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.108520][T18058] genl_rcv+0x28/0x40 [ 934.108547][T18058] netlink_unicast+0x7f8/0x9a0 [ 934.108573][T18058] ? __pfx_netlink_unicast+0x10/0x10 [ 934.108591][T18058] ? __virt_addr_valid+0x45f/0x530 [ 934.108617][T18058] ? __phys_addr_symbol+0x2f/0x70 [ 934.108640][T18058] ? __check_object_size+0x478/0x720 [ 934.108670][T18058] netlink_sendmsg+0x8e8/0xce0 [ 934.108703][T18058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.108729][T18058] ? __import_iovec+0x585/0x830 [ 934.108751][T18058] ? aa_sock_msg_perm+0x91/0x160 [ 934.108781][T18058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.108804][T18058] __sock_sendmsg+0x221/0x270 [ 934.108834][T18058] ____sys_sendmsg+0x53c/0x870 [ 934.108862][T18058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.108895][T18058] __sys_sendmsg+0x271/0x360 [ 934.108920][T18058] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.108977][T18058] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 934.109008][T18058] ? lockdep_hardirqs_on+0x9d/0x150 [ 934.109039][T18058] __do_fast_syscall_32+0xb4/0x110 [ 934.109071][T18058] ? exc_page_fault+0x599/0x8b0 [ 934.109109][T18058] do_fast_syscall_32+0x34/0x80 [ 934.109141][T18058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.109167][T18058] RIP: 0023:0xf7fe3579 [ 934.109184][T18058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 934.109202][T18058] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 934.109225][T18058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a00 [ 934.109239][T18058] RDX: 00000000000c2010 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.109251][T18058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.109263][T18058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 934.109275][T18058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.109300][T18058] [ 934.672933][T18063] netlink: 39 bytes leftover after parsing attributes in process `syz.5.3579'. [ 935.272157][ T5839] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 935.433047][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 935.448600][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 935.458790][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.489658][ T5839] usb 5-1: Product: syz [ 935.527498][ T5839] usb 5-1: Manufacturer: syz [ 935.574217][ T5839] usb 5-1: SerialNumber: syz [ 935.591090][ T5839] usb 5-1: config 0 descriptor?? [ 935.818661][ T5839] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 936.002176][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 936.219506][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.250273][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 936.276893][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 936.286800][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.303128][ T9] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 936.328023][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.351179][ T9] usb 6-1: Product: syz [ 936.360575][ T9] usb 6-1: Manufacturer: syz [ 936.365329][ T9] usb 6-1: SerialNumber: syz [ 936.378326][ T9] usb 6-1: config 0 descriptor?? [ 936.388016][ T9] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 936.978223][T18081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.988049][T18081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.184381][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.192208][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.199794][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.207745][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.217074][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.224628][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.232223][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.239696][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.247497][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.255267][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.263008][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.270762][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.278330][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.285900][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.293769][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.301270][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.309160][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.316693][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.325233][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.334303][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.341875][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.349534][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.357521][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.365136][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.372724][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.380220][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.388900][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.396737][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.408462][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.416312][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.423954][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.431423][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.439045][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.447529][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.460609][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.468976][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.478371][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.487150][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.494930][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.506569][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.514376][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.521856][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.535772][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.544627][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.558335][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.568576][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.576595][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.585817][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.602054][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.609645][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.617593][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.646853][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.687116][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.721799][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.740141][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.749231][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.759398][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.768325][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.776207][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.787580][ T5839] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 937.802131][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.809601][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.830883][ T5839] usb 5-1: USB disconnect, device number 69 [ 937.840790][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.849948][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.920666][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.935413][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.944383][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.957258][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.964871][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.973170][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.982099][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.989739][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 937.999594][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.032575][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.040400][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.048463][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.056620][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.067430][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.075221][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.082979][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.090577][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.098141][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.115881][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.123653][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.132075][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.152183][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.159659][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.179420][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.187782][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.195583][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.203136][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.210575][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247686][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247752][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247783][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247813][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247842][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247872][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247901][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247930][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247959][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.247988][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.248017][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.248046][ T48] hid-generic 0004:0003:0001.003D: unknown main item tag 0x0 [ 938.273700][ T48] hid-generic 0004:0003:0001.003D: hidraw0: HID v0.03 Device [syz1] on syz0 [ 938.309128][T16535] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 938.309180][T16535] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 938.309201][T16535] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 938.309257][T16535] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 938.343571][T16535] usb 2-1: USB disconnect, device number 41 [ 938.589472][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3593'. [ 938.740293][T16535] usb 6-1: USB disconnect, device number 61 [ 938.817744][T18123] FAULT_INJECTION: forcing a failure. [ 938.817744][T18123] name failslab, interval 1, probability 0, space 0, times 0 [ 938.873398][T18123] CPU: 0 UID: 0 PID: 18123 Comm: syz.3.3595 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 938.873430][T18123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 938.873444][T18123] Call Trace: [ 938.873451][T18123] [ 938.873460][T18123] dump_stack_lvl+0x241/0x360 [ 938.873493][T18123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.873519][T18123] ? __pfx__printk+0x10/0x10 [ 938.873542][T18123] ? __do_fast_syscall_32+0xb4/0x110 [ 938.873575][T18123] ? __pfx___might_resched+0x10/0x10 [ 938.873596][T18123] should_fail_ex+0x424/0x570 [ 938.873631][T18123] should_failslab+0xac/0x100 [ 938.873658][T18123] __kmalloc_cache_noprof+0x73/0x370 [ 938.873683][T18123] ? mpi_alloc+0x52/0x140 [ 938.873714][T18123] mpi_alloc+0x52/0x140 [ 938.873742][T18123] mpi_read_raw_data+0x169/0x970 [ 938.873772][T18123] ? crypto_dh_decode_key+0x108/0x180 [ 938.873798][T18123] dh_set_secret+0x1e4/0x460 [ 938.873824][T18123] ? __pfx_dh_set_secret+0x10/0x10 [ 938.873845][T18123] ? crypto_create_tfm_node+0x200/0x3d0 [ 938.873868][T18123] ? crypto_alloc_tfm_node+0x332/0x360 [ 938.873894][T18123] __keyctl_dh_compute+0x6d1/0xf80 [ 938.873932][T18123] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 938.873965][T18123] ? __lock_acquire+0xad5/0xd80 [ 938.874009][T18123] ? compat_keyctl_dh_compute+0x223/0x340 [ 938.874042][T18123] compat_keyctl_dh_compute+0x238/0x340 [ 938.874073][T18123] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 938.874105][T18123] ? fput+0x9b/0xd0 [ 938.874133][T18123] ? ksys_write+0x275/0x2d0 [ 938.874164][T18123] __do_fast_syscall_32+0xb4/0x110 [ 938.874194][T18123] ? exc_page_fault+0x599/0x8b0 [ 938.874223][T18123] do_fast_syscall_32+0x34/0x80 [ 938.874252][T18123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.874277][T18123] RIP: 0023:0xf7f41579 [ 938.874293][T18123] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 938.874311][T18123] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 938.874333][T18123] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000080 [ 938.874348][T18123] RDX: 0000000080000000 RSI: 0000000000000058 RDI: 00000000800000c0 [ 938.874362][T18123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.874373][T18123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 938.874386][T18123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.874409][T18123] [ 939.433142][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 939.592113][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 939.613567][ T24] usb 4-1: config 89 has an invalid interface number: 228 but max is 1 [ 939.662020][ T24] usb 4-1: config 89 has an invalid interface number: 251 but max is 1 [ 939.687863][ T24] usb 4-1: config 89 has an invalid descriptor of length 0, skipping remainder of the config [ 939.800061][ T24] usb 4-1: config 89 has no interface number 0 [ 939.811479][ T24] usb 4-1: config 89 has no interface number 1 [ 939.830292][ T24] usb 4-1: too many endpoints for config 89 interface 228 altsetting 0: 221, using maximum allowed: 30 [ 939.871341][ T24] usb 4-1: config 89 interface 228 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 939.895499][ T24] usb 4-1: config 89 interface 251 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 939.934239][ T24] usb 4-1: config 89 interface 251 has no altsetting 0 [ 939.965879][ T24] usb 4-1: New USB device found, idVendor=07d1, idProduct=3e01, bcdDevice=2e.9e [ 939.976410][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.995768][T18145] FAULT_INJECTION: forcing a failure. [ 939.995768][T18145] name failslab, interval 1, probability 0, space 0, times 0 [ 940.015426][ T24] usb 4-1: Product: syz [ 940.016236][T18145] CPU: 0 UID: 0 PID: 18145 Comm: syz.7.3603 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 940.016267][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 940.016283][T18145] Call Trace: [ 940.016292][T18145] [ 940.016301][T18145] dump_stack_lvl+0x241/0x360 [ 940.016337][T18145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.016366][T18145] ? __pfx__printk+0x10/0x10 [ 940.016396][T18145] ? __pfx___might_resched+0x10/0x10 [ 940.016422][T18145] should_fail_ex+0x424/0x570 [ 940.016454][T18145] should_failslab+0xac/0x100 [ 940.016489][T18145] __kmalloc_noprof+0xdf/0x4d0 [ 940.016517][T18145] ? fuse_direct_io+0xa52/0x2c00 [ 940.016553][T18145] fuse_direct_io+0xa52/0x2c00 [ 940.016602][T18145] ? __pfx_fuse_direct_io+0x10/0x10 [ 940.016628][T18145] ? __kasan_kmalloc+0x9d/0xb0 [ 940.016655][T18145] ? __raw_spin_lock_init+0x45/0x100 [ 940.016683][T18145] fuse_direct_IO+0x8bd/0x1280 [ 940.016730][T18145] ? __pfx_fuse_direct_IO+0x10/0x10 [ 940.016762][T18145] ? generic_write_checks_count+0x409/0x520 [ 940.016809][T18145] ? __pfx_aa_file_perm+0x10/0x10 [ 940.016846][T18145] fuse_file_write_iter+0x842/0x1180 [ 940.016876][T18145] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 940.016903][T18145] ? __lock_acquire+0xad5/0xd80 [ 940.016948][T18145] ? aio_write+0x501/0x7d0 [ 940.016985][T18145] aio_write+0x56d/0x7d0 [ 940.017022][T18145] ? __pfx_aio_write+0x10/0x10 [ 940.017091][T18145] io_submit_one+0x8a9/0x18b0 [ 940.017131][T18145] ? __lock_acquire+0xad5/0xd80 [ 940.017163][T18145] ? __pfx_io_submit_one+0x10/0x10 [ 940.017207][T18145] ? __might_fault+0xaa/0x120 [ 940.017244][T18145] __se_compat_sys_io_submit+0x17c/0x2f0 [ 940.017276][T18145] ? __pfx___se_compat_sys_io_submit+0x10/0x10 [ 940.017304][T18145] ? ksys_write+0x275/0x2d0 [ 940.017333][T18145] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 940.017366][T18145] ? lockdep_hardirqs_on+0x9d/0x150 [ 940.017400][T18145] __do_fast_syscall_32+0xb4/0x110 [ 940.017433][T18145] ? exc_page_fault+0x599/0x8b0 [ 940.017465][T18145] do_fast_syscall_32+0x34/0x80 [ 940.017499][T18145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.017525][T18145] RIP: 0023:0xf7fd5579 [ 940.017550][T18145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 940.017570][T18145] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 940.017594][T18145] RAX: ffffffffffffffda RBX: 00000000f7467000 RCX: 0000000000000020 [ 940.017610][T18145] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.017625][T18145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.017639][T18145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 940.017652][T18145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.017678][T18145] [ 940.304988][ T24] usb 4-1: Manufacturer: syz [ 940.309781][ T24] usb 4-1: SerialNumber: syz [ 940.534715][ T24] usb 4-1: USB disconnect, device number 49 [ 940.650675][T18162] program syz.4.3609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.702030][T16535] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 940.787249][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 940.897210][T16535] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.907941][T16535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 940.918228][T16535] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 940.928402][T16535] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.943515][T16535] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 940.953180][T16535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.961318][T16535] usb 6-1: Product: syz [ 940.965984][T16535] usb 6-1: Manufacturer: syz [ 940.970630][T16535] usb 6-1: SerialNumber: syz [ 940.980896][T16535] usb 6-1: config 0 descriptor?? [ 940.992183][T16535] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 941.515724][T18177] FAULT_INJECTION: forcing a failure. [ 941.515724][T18177] name failslab, interval 1, probability 0, space 0, times 0 [ 941.554375][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.7.3615 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 941.554406][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 941.554419][T18177] Call Trace: [ 941.554426][T18177] [ 941.554435][T18177] dump_stack_lvl+0x241/0x360 [ 941.554478][T18177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.554505][T18177] ? __pfx__printk+0x10/0x10 [ 941.554533][T18177] ? __pfx___might_resched+0x10/0x10 [ 941.554557][T18177] should_fail_ex+0x424/0x570 [ 941.554587][T18177] should_failslab+0xac/0x100 [ 941.554615][T18177] __kmalloc_noprof+0xdf/0x4d0 [ 941.554642][T18177] ? tomoyo_encode+0x26f/0x540 [ 941.554676][T18177] tomoyo_encode+0x26f/0x540 [ 941.554709][T18177] tomoyo_realpath_from_path+0x59e/0x5e0 [ 941.554746][T18177] tomoyo_path_number_perm+0x245/0x790 [ 941.554771][T18177] ? __lock_acquire+0xad5/0xd80 [ 941.554801][T18177] ? tomoyo_path_number_perm+0x215/0x790 [ 941.554828][T18177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 941.554878][T18177] ? __fget_files+0x2a/0x420 [ 941.554907][T18177] ? __fget_files+0x2a/0x420 [ 941.554938][T18177] ? __fget_files+0x2a/0x420 [ 941.554968][T18177] security_file_ioctl_compat+0xc6/0x2a0 [ 941.554993][T18177] __se_compat_sys_ioctl+0xd8/0xc30 [ 941.555015][T18177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.555047][T18177] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 941.555070][T18177] ? __fget_files+0x2a/0x420 [ 941.555101][T18177] ? fput+0x9b/0xd0 [ 941.555128][T18177] ? ksys_write+0x275/0x2d0 [ 941.555153][T18177] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 941.555182][T18177] ? lockdep_hardirqs_on+0x9d/0x150 [ 941.555213][T18177] __do_fast_syscall_32+0xb4/0x110 [ 941.555244][T18177] ? exc_page_fault+0x599/0x8b0 [ 941.555274][T18177] do_fast_syscall_32+0x34/0x80 [ 941.555305][T18177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.555327][T18177] RIP: 0023:0xf7fd5579 [ 941.555344][T18177] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 941.555360][T18177] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 941.555381][T18177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 941.555394][T18177] RDX: 0000000080000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 941.555406][T18177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 941.555418][T18177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 941.555431][T18177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 941.555469][T18177] [ 941.555486][T18177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 941.558413][T18180] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3607'. [ 941.585952][T18177] program syz.7.3615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.852202][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 941.908584][T18180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.962454][T18180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.002468][ T24] usb 4-1: device descriptor read/64, error -71 [ 942.184078][T18194] usb usb8: usbfs: process 18194 (syz.7.3619) did not claim interface 0 before use [ 942.202740][T18194] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 942.262368][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 942.412030][ T24] usb 4-1: device descriptor read/64, error -71 [ 942.522237][ T24] usb usb4-port1: attempt power cycle [ 942.882210][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 942.915072][ T24] usb 4-1: device descriptor read/8, error -71 [ 942.956675][T18217] raw_sendmsg: syz.4.3628 forgot to set AF_INET. Fix it! [ 943.151644][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3633'. [ 943.160848][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 943.207753][ T24] usb 4-1: device descriptor read/8, error -71 [ 943.322241][ T24] usb usb4-port1: unable to enumerate USB device [ 943.419869][ T5839] usb 6-1: USB disconnect, device number 62 [ 943.462192][ T5834] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 943.952456][ T24] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 943.973771][ T5834] usb 2-1: config 64 has an invalid interface number: 155 but max is 0 [ 943.992891][ T5834] usb 2-1: config 64 has no interface number 0 [ 943.999260][ T5834] usb 2-1: config 64 interface 155 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 944.028051][ T5834] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=b6.57 [ 944.037708][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.045839][ T5834] usb 2-1: Product: syz [ 944.050357][ T5834] usb 2-1: Manufacturer: syz [ 944.055085][ T5834] usb 2-1: SerialNumber: syz [ 944.071186][ T5834] rndis_host 2-1:64.155: skipping garbage [ 944.077126][ T5834] usb 2-1: bad CDC descriptors [ 944.082741][ T5834] cdc_acm 2-1:64.155: skipping garbage [ 944.109773][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.139175][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.174369][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.192040][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.200091][ T24] usb 5-1: Product: syz [ 944.222030][ T24] usb 5-1: Manufacturer: syz [ 944.226754][ T24] usb 5-1: SerialNumber: syz [ 944.364696][ T5834] usb 2-1: USB disconnect, device number 42 [ 945.397026][ T5917] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 945.580453][T18258] bond0: entered promiscuous mode [ 945.589260][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.612276][T18258] gretap1: entered promiscuous mode [ 945.635475][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.650646][T18258] bond0: left promiscuous mode [ 945.659657][T18258] gretap1: left promiscuous mode [ 945.702565][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.797983][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.861110][ T5917] usb 4-1: Product: syz [ 945.869063][ T5917] usb 4-1: Manufacturer: syz [ 945.877102][ T5917] usb 4-1: SerialNumber: syz [ 946.402057][T16535] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 946.477410][ T24] usb 5-1: 0:2 : does not exist [ 946.515896][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 946.542049][T16535] usb 6-1: device descriptor read/64, error -71 [ 946.619980][ T24] usb 5-1: USB disconnect, device number 70 [ 946.694734][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3646'. [ 946.903235][T16535] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 947.032147][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 947.152593][T16535] usb 6-1: device descriptor read/64, error -71 [ 947.252942][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.282038][T16535] usb usb6-port1: attempt power cycle [ 947.290367][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 947.349958][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 947.385233][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.461137][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 947.482836][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.519624][ T9] usb 2-1: Product: syz [ 947.531415][ T9] usb 2-1: Manufacturer: syz [ 947.588992][ T9] usb 2-1: SerialNumber: syz [ 947.608774][ T9] usb 2-1: config 0 descriptor?? [ 947.626022][ T9] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 947.633976][T16535] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 947.732750][T16535] usb 6-1: device descriptor read/8, error -71 [ 947.997421][T16535] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 948.033537][T16535] usb 6-1: device descriptor read/8, error -71 [ 948.117403][ T5917] usb 4-1: 0:2 : does not exist [ 948.139481][ T5917] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 948.163760][T16535] usb usb6-port1: unable to enumerate USB device [ 948.197747][ T5917] usb 4-1: USB disconnect, device number 54 [ 948.241441][T18278] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.3647'. [ 948.353751][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.378507][T18281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.389228][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.409258][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.426485][T18281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.443383][ T13] bond0 (unregistering): Released all slaves [ 948.456245][T16708] udevd[16708]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 948.480938][ T13] bond1 (unregistering): Released all slaves [ 948.539890][ T13] bond2 (unregistering): Released all slaves [ 948.580787][ T13] bond3 (unregistering): Released all slaves [ 948.596708][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 948.661091][ T13] tipc: Disabling bearer [ 948.686252][ T13] tipc: Left network mode [ 948.752104][ T5917] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 948.838851][T18294] usb usb8: usbfs: process 18294 (syz.4.3652) did not claim interface 0 before use [ 948.842356][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3662'. [ 948.851302][T18294] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 948.924006][ T5917] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 948.953654][ T5917] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 948.967601][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 948.988185][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 949.006069][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 949.025086][ T5917] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 949.034563][T10838] Bluetooth: hci1: command 0x0406 tx timeout [ 949.038831][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 949.061705][ T5917] usb 4-1: Product: syz [ 949.066055][ T5917] usb 4-1: Manufacturer: syz [ 949.078895][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 949.084356][ T13] hsr_slave_0: left promiscuous mode [ 949.084575][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 949.098346][ T5917] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 949.100879][ T13] hsr_slave_1: left promiscuous mode [ 949.105501][ T5917] cdc_wdm 4-1:1.0: Unknown control protocol [ 949.125488][ T13] veth1_macvtap: left promiscuous mode [ 949.139775][ T13] veth0_macvtap: left promiscuous mode [ 949.146367][T16535] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 949.157945][ T13] veth1_vlan: left promiscuous mode [ 949.164014][ T13] veth0_vlan: left promiscuous mode [ 949.326480][T16535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.340636][T16535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.350984][T16535] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 949.360410][T16535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 949.369546][T16535] usb 5-1: SerialNumber: syz [ 949.589847][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.630674][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.824491][ T24] usb 2-1: USB disconnect, device number 43 [ 951.507741][ T24] usb 4-1: USB disconnect, device number 55 [ 951.524527][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3657'. [ 951.666462][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3660'. [ 951.692370][T18319] syzkaller1: entered promiscuous mode [ 951.714303][T18319] syzkaller1: entered allmulticast mode [ 951.734596][T18319] FAULT_INJECTION: forcing a failure. [ 951.734596][T18319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.742616][ T13] IPVS: stop unused estimator thread 0... [ 951.766623][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.7.3660 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 951.766658][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 951.766673][T18319] Call Trace: [ 951.766681][T18319] [ 951.766695][T18319] dump_stack_lvl+0x241/0x360 [ 951.766732][T18319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.766759][T18319] ? __pfx__printk+0x10/0x10 [ 951.766792][T18319] should_fail_ex+0x424/0x570 [ 951.766821][T18319] _copy_from_iter+0x211/0x1c70 [ 951.766841][T18319] ? _copy_from_iter+0x288/0x1c70 [ 951.766869][T18319] ? __pfx__copy_from_iter+0x10/0x10 [ 951.766888][T18319] ? __pfx__copy_from_iter+0x10/0x10 [ 951.766907][T18319] ? __virt_addr_valid+0x183/0x530 [ 951.766936][T18319] ? page_copy_sane+0x154/0x260 [ 951.766958][T18319] copy_page_from_iter+0x7a/0x100 [ 951.766981][T18319] skb_copy_datagram_from_iter+0x2ed/0x6c0 [ 951.767014][T18319] tun_get_user+0x194a/0x48d0 [ 951.767045][T18319] ? aa_file_perm+0x139/0xf60 [ 951.767075][T18319] ? aa_file_perm+0x139/0xf60 [ 951.767103][T18319] ? aa_file_perm+0x3f1/0xf60 [ 951.767130][T18319] ? __pfx_tun_get_user+0x10/0x10 [ 951.767154][T18319] ? __lock_acquire+0xad5/0xd80 [ 951.767186][T18319] ? ref_tracker_alloc+0x316/0x4c0 [ 951.767215][T18319] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 951.767255][T18319] ? tun_get+0x1e/0x2f0 [ 951.767274][T18319] ? tun_get+0x1e/0x2f0 [ 951.767291][T18319] ? tun_get+0x27d/0x2f0 [ 951.767312][T18319] tun_chr_write_iter+0x10d/0x1f0 [ 951.767334][T18319] vfs_write+0x70f/0xd10 [ 951.767361][T18319] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 951.767390][T18319] ? __pfx_vfs_write+0x10/0x10 [ 951.767413][T18319] ? __fget_files+0x2a/0x420 [ 951.767444][T18319] ? __fget_files+0x2a/0x420 [ 951.767479][T18319] ksys_write+0x19d/0x2d0 [ 951.767502][T18319] ? __pfx_ksys_write+0x10/0x10 [ 951.767525][T18319] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 951.767557][T18319] ? lockdep_hardirqs_on+0x9d/0x150 [ 951.767588][T18319] __do_fast_syscall_32+0xb4/0x110 [ 951.767620][T18319] ? exc_page_fault+0x599/0x8b0 [ 951.767651][T18319] do_fast_syscall_32+0x34/0x80 [ 951.767682][T18319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.767707][T18319] RIP: 0023:0xf7fd5579 [ 951.767724][T18319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 951.767743][T18319] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 951.767767][T18319] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 951.767782][T18319] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 951.767795][T18319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.767808][T18319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 951.767821][T18319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.767845][T18319] [ 952.095053][T16535] usb 5-1: 0:2 : does not exist [ 952.100026][T16535] usb 5-1: unit 5: unexpected type 0x0a [ 952.119701][T16535] usb 5-1: USB disconnect, device number 71 [ 952.472132][T16535] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 952.636047][T16535] usb 5-1: Using ep0 maxpacket: 8 [ 952.645781][T16535] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 952.658582][T16535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.667892][ T976] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 952.679221][T16535] usb 5-1: Product: syz [ 952.684986][T16535] usb 5-1: Manufacturer: syz [ 952.690406][T16535] usb 5-1: SerialNumber: syz [ 952.701613][T16535] usb 5-1: config 0 descriptor?? [ 952.842998][ T976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.921247][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.933115][T16535] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 952.942770][ T976] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 952.976209][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.003927][ T976] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 953.016420][T16535] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 953.037229][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.053822][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.070874][T16535] usb 5-1: USB disconnect, device number 72 [ 953.080316][ T976] usb 6-1: Product: syz [ 953.111838][ T976] usb 6-1: Manufacturer: syz [ 953.119901][ T976] usb 6-1: SerialNumber: syz [ 953.148557][ T976] usb 6-1: config 0 descriptor?? [ 953.205076][ T976] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 953.845427][T18363] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3667'. [ 953.950593][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.966425][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.172086][T18370] usb usb8: usbfs: process 18370 (syz.7.3676) did not claim interface 0 before use [ 954.242927][T18370] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 954.966989][T18376] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3678'. [ 955.385861][ T976] usb 6-1: USB disconnect, device number 67 [ 955.812172][ T5917] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 956.015412][ T5917] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 956.030411][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.060658][ T5917] usb 6-1: config 0 descriptor?? [ 956.072287][ T5917] cp210x 6-1:0.0: cp210x converter detected [ 956.495128][ T5917] usb 6-1: cp210x converter now attached to ttyUSB0 [ 956.706112][ T24] usb 6-1: USB disconnect, device number 68 [ 956.717530][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 956.748275][ T24] cp210x 6-1:0.0: device disconnected [ 957.542164][ T24] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 957.739468][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.752421][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.838786][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.853542][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.868363][ T24] usb 5-1: Product: syz [ 957.873069][ T24] usb 5-1: Manufacturer: syz [ 957.877675][ T24] usb 5-1: SerialNumber: syz [ 959.622672][T18425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3691'. [ 960.109670][ T24] usb 5-1: 0:2 : does not exist [ 960.121581][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 960.153578][ T24] usb 5-1: USB disconnect, device number 73 [ 960.204140][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3693'. [ 961.376071][T18458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3705'. [ 961.792045][ T5839] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 962.038282][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.067647][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.235578][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.257658][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.279361][ T5839] usb 5-1: Product: syz [ 962.361850][ T5839] usb 5-1: Manufacturer: syz [ 962.397971][ T5839] usb 5-1: SerialNumber: syz [ 963.416921][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 963.817262][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3712'. [ 964.753357][ T5839] usb 5-1: 0:2 : does not exist [ 964.775756][ T5839] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 964.895884][ T5839] usb 5-1: USB disconnect, device number 74 [ 965.123107][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.422025][T16535] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 965.576660][T16535] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 965.589143][T16535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.602206][T16535] usb 6-1: Product: syz [ 965.632831][T16535] usb 6-1: Manufacturer: syz [ 965.656000][T16535] usb 6-1: SerialNumber: syz [ 965.685174][T16535] usb 6-1: config 0 descriptor?? [ 965.709129][T16535] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 965.934199][T16535] sonixb 6-1:0.0: Error reading register 00: -71 [ 965.955004][T16535] usb 6-1: USB disconnect, device number 69 [ 966.182167][ T976] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 966.333462][ T976] usb 5-1: device descriptor read/64, error -71 [ 966.485413][T18515] FAULT_INJECTION: forcing a failure. [ 966.485413][T18515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 966.520125][T18515] CPU: 0 UID: 0 PID: 18515 Comm: syz.7.3724 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 966.520157][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 966.520171][T18515] Call Trace: [ 966.520179][T18515] [ 966.520189][T18515] dump_stack_lvl+0x241/0x360 [ 966.520224][T18515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.520251][T18515] ? __pfx__printk+0x10/0x10 [ 966.520284][T18515] should_fail_ex+0x424/0x570 [ 966.520313][T18515] prepare_alloc_pages+0x1dd/0x5c0 [ 966.520341][T18515] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 966.520365][T18515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 966.520402][T18515] alloc_pages_mpol+0x339/0x690 [ 966.520433][T18515] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 966.520458][T18515] ? percpu_ref_get_many+0x19/0x140 [ 966.520496][T18515] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 966.520522][T18515] alloc_pages_noprof+0x121/0x190 [ 966.520550][T18515] pgd_alloc+0x38/0x260 [ 966.520574][T18515] mm_init+0x5c0/0xe30 [ 966.520602][T18515] ? __asan_memset+0x23/0x50 [ 966.520625][T18515] alloc_bprm+0x397/0xbe0 [ 966.520646][T18515] ? __virt_addr_valid+0x45f/0x530 [ 966.520671][T18515] ? __phys_addr_symbol+0x2f/0x70 [ 966.520695][T18515] ? __check_object_size+0x478/0x720 [ 966.520726][T18515] do_execveat_common+0x1ae/0x710 [ 966.520758][T18515] __ia32_compat_sys_execve+0x99/0xb0 [ 966.520785][T18515] __do_fast_syscall_32+0xb4/0x110 [ 966.520818][T18515] ? exc_page_fault+0x599/0x8b0 [ 966.520849][T18515] do_fast_syscall_32+0x34/0x80 [ 966.520880][T18515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.520906][T18515] RIP: 0023:0xf7fd5579 [ 966.520923][T18515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 966.520941][T18515] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 966.520963][T18515] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 966.520978][T18515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.520990][T18515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.521002][T18515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 966.521015][T18515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.521038][T18515] [ 966.756881][ T976] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 966.923855][ T976] usb 5-1: device descriptor read/64, error -71 [ 967.032791][ T976] usb usb5-port1: attempt power cycle [ 967.033054][T18523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3727'. [ 967.433834][ T976] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 967.535210][ T976] usb 5-1: device descriptor read/8, error -71 [ 967.802054][ T976] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 967.862663][ T976] usb 5-1: device descriptor read/8, error -71 [ 967.994667][ T976] usb usb5-port1: unable to enumerate USB device [ 968.151080][T18531] futex_wake_op: syz.5.3729 tries to shift op by -33; fix this program [ 968.177336][T18531] netdevsim netdevsim5: Direct firmware load for . [ 968.177336][T18531] failed with error -2 [ 968.190064][T18531] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 968.190064][T18531] [ 968.409916][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 969.152476][ T5834] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 969.345231][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.357604][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 969.367972][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 969.378372][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.399833][ T5834] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 969.412299][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.420484][ T5834] usb 6-1: Product: syz [ 969.435079][ T5834] usb 6-1: Manufacturer: syz [ 969.446530][ T5834] usb 6-1: SerialNumber: syz [ 969.459739][ T5834] usb 6-1: config 0 descriptor?? [ 969.469462][ T5834] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 969.672001][T16535] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 969.854638][T16535] usb 4-1: device descriptor read/64, error -71 [ 970.041248][T18549] netlink: 'syz.5.3731': attribute type 72 has an invalid length. [ 970.071162][T18549] netlink: 1016 bytes leftover after parsing attributes in process `syz.5.3731'. [ 970.120773][T18495] Set syz1 is full, maxelem 65536 reached [ 970.143726][T18549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.152035][T16535] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 970.162123][T18549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.323523][T16535] usb 4-1: device descriptor read/64, error -71 [ 970.362082][ T5834] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 970.435067][T16535] usb usb4-port1: attempt power cycle [ 970.467999][T18562] usb usb8: usbfs: process 18562 (syz.1.3738) did not claim interface 0 before use [ 970.477855][T18562] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 970.534356][ T5834] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 970.543646][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.553411][ T5834] usb 5-1: config 0 descriptor?? [ 970.560831][ T5834] cp210x 5-1:0.0: cp210x converter detected [ 970.646687][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3740'. [ 970.806601][T16535] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 970.824822][T16535] usb 4-1: device descriptor read/8, error -71 [ 971.004526][ T5834] usb 5-1: cp210x converter now attached to ttyUSB0 [ 971.072179][T16535] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 971.092624][T16535] usb 4-1: device descriptor read/8, error -71 [ 971.213054][T16535] usb usb4-port1: unable to enumerate USB device [ 971.214550][ T5917] usb 5-1: USB disconnect, device number 79 [ 971.245512][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 971.285605][ T5917] cp210x 5-1:0.0: device disconnected [ 971.659996][T18575] futex_wake_op: syz.1.3742 tries to shift op by -33; fix this program [ 971.681142][T18575] netdevsim netdevsim1: Direct firmware load for . [ 971.681142][T18575] failed with error -2 [ 971.692400][T18575] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 971.692400][T18575] [ 971.885282][T16535] usb 6-1: USB disconnect, device number 70 [ 972.158962][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3744'. [ 972.525720][T18590] usb usb8: usbfs: process 18590 (syz.7.3745) did not claim interface 0 before use [ 972.557000][T18590] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 972.982278][T16535] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 973.178054][T16535] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.178582][T16535] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.201034][T16535] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.201073][T16535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.201095][T16535] usb 2-1: Product: syz [ 973.201111][T16535] usb 2-1: Manufacturer: syz [ 973.201128][T16535] usb 2-1: SerialNumber: syz [ 974.573831][T18630] tipc: Started in network mode [ 974.583831][T18630] tipc: Node identity _1844674, cluster identity 4711 [ 974.811662][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'. [ 975.413003][ T5839] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 975.599163][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.609449][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.638413][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.648362][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.693159][ T5839] usb 5-1: Product: syz [ 975.711046][ T5839] usb 5-1: Manufacturer: syz [ 975.740503][ T5839] usb 5-1: SerialNumber: syz [ 976.294386][T16535] usb 2-1: 0:2 : does not exist [ 976.307993][T16535] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 976.454946][T16535] usb 2-1: USB disconnect, device number 44 [ 977.622013][ T976] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 977.787067][T18676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 977.919554][ T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.933287][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.973855][T18679] FAULT_INJECTION: forcing a failure. [ 977.973855][T18679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 977.988060][T18679] CPU: 1 UID: 0 PID: 18679 Comm: syz.5.3775 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 977.988089][T18679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 977.988102][T18679] Call Trace: [ 977.988111][T18679] [ 977.988120][T18679] dump_stack_lvl+0x241/0x360 [ 977.988156][T18679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.988182][T18679] ? __pfx__printk+0x10/0x10 [ 977.988215][T18679] should_fail_ex+0x424/0x570 [ 977.988244][T18679] prepare_alloc_pages+0x1dd/0x5c0 [ 977.988273][T18679] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 977.988299][T18679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 977.988319][T18679] ? __lock_acquire+0xad5/0xd80 [ 977.988371][T18679] ? __lock_acquire+0xad5/0xd80 [ 977.988402][T18679] alloc_pages_mpol+0x339/0x690 [ 977.988433][T18679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 977.988466][T18679] alloc_pages_noprof+0x121/0x190 [ 977.988494][T18679] pte_alloc_one+0x1e/0x160 [ 977.988518][T18679] __pte_alloc+0x7b/0x240 [ 977.988545][T18679] ? __pfx___pte_alloc+0x10/0x10 [ 977.988570][T18679] ? mfill_atomic_zeropage+0xba2/0x1270 [ 977.988604][T18679] mfill_atomic_zeropage+0xd78/0x1270 [ 977.988648][T18679] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 977.988694][T18679] userfaultfd_ioctl+0x3c18/0x6a80 [ 977.988735][T18679] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 977.988753][T18679] ? stack_trace_save+0x11a/0x1d0 [ 977.988774][T18679] ? stack_depot_save_flags+0x3a/0x970 [ 977.988798][T18679] ? kasan_save_track+0x51/0x80 [ 977.988813][T18679] ? kasan_save_track+0x3f/0x80 [ 977.988827][T18679] ? kasan_save_free_info+0x40/0x50 [ 977.988848][T18679] ? __kasan_slab_free+0x59/0x70 [ 977.988863][T18679] ? kfree+0x198/0x430 [ 977.988880][T18679] ? tomoyo_path_number_perm+0x5fd/0x790 [ 977.988897][T18679] ? security_file_ioctl_compat+0xc6/0x2a0 [ 977.988914][T18679] ? __se_compat_sys_ioctl+0xd8/0xc30 [ 977.988932][T18679] ? do_vfs_ioctl+0xef8/0x2750 [ 977.988951][T18679] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 977.988981][T18679] ? kasan_quarantine_put+0xdc/0x230 [ 977.988995][T18679] ? lockdep_hardirqs_on+0x9d/0x150 [ 977.989021][T18679] ? tomoyo_path_number_perm+0x215/0x790 [ 977.989042][T18679] ? tomoyo_path_number_perm+0x684/0x790 [ 977.989058][T18679] ? __lock_acquire+0xad5/0xd80 [ 977.989079][T18679] ? tomoyo_path_number_perm+0x215/0x790 [ 977.989098][T18679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 977.989134][T18679] ? __fget_files+0x2a/0x420 [ 977.989155][T18679] ? __fget_files+0x2a/0x420 [ 977.989177][T18679] ? __fget_files+0x2a/0x420 [ 977.989202][T18679] __se_compat_sys_ioctl+0x50e/0xc30 [ 977.989220][T18679] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 977.989237][T18679] ? __fget_files+0x2a/0x420 [ 977.989261][T18679] ? fput+0x9b/0xd0 [ 977.989282][T18679] ? ksys_write+0x275/0x2d0 [ 977.989301][T18679] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 977.989323][T18679] ? lockdep_hardirqs_on+0x9d/0x150 [ 977.989351][T18679] __do_fast_syscall_32+0xb4/0x110 [ 977.989374][T18679] ? exc_page_fault+0x599/0x8b0 [ 977.989396][T18679] do_fast_syscall_32+0x34/0x80 [ 977.989418][T18679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.989436][T18679] RIP: 0023:0xf7f22579 [ 977.989450][T18679] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 977.989462][T18679] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 977.989480][T18679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c020aa04 [ 977.989491][T18679] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.989500][T18679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.989509][T18679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 977.989518][T18679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.989535][T18679] [ 978.366720][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.835098][ T976] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 978.864113][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.879862][ T976] usb 4-1: Product: syz [ 978.884225][ T976] usb 4-1: Manufacturer: syz [ 978.889514][ T976] usb 4-1: SerialNumber: syz [ 978.967400][ T5839] usb 5-1: 0:2 : does not exist [ 979.020350][ T5839] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 979.081465][ T5839] usb 5-1: USB disconnect, device number 80 [ 979.317217][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.452134][ T5839] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 979.610760][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 979.637829][ T5839] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 979.744242][ T5839] usb 5-1: config 0 has no interface number 0 [ 979.744290][ T5839] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 979.744316][ T5839] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 979.744342][ T5839] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 979.744369][ T5839] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 979.744395][ T5839] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 979.744421][ T5839] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 979.744446][ T5839] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 979.744474][ T5839] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 979.744499][ T5839] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.757725][ T5839] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 979.769755][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.769785][ T5839] usb 5-1: Product: syz [ 979.769803][ T5839] usb 5-1: Manufacturer: syz [ 979.769821][ T5839] usb 5-1: SerialNumber: syz [ 979.788068][ T5839] usb 5-1: config 0 descriptor?? [ 979.979545][T18683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 979.981671][ T5839] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 979.981695][ T5839] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 979.988360][T16708] udevd[16708]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 980.207309][ T5839] usb 5-1: USB disconnect, device number 81 [ 980.662752][T18702] dccp_invalid_packet: P.Data Offset(0) too small [ 980.939870][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 981.009184][ T976] usb 4-1: 0:2 : does not exist [ 981.027220][ T976] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 981.070683][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 981.200316][ T976] usb 4-1: USB disconnect, device number 60 [ 981.425453][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.242116][ T976] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 982.459093][ T976] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 982.467979][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.538909][ T976] usb 4-1: config 0 has no interface number 0 [ 982.560819][ T976] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 982.744203][ T976] usb 4-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 982.790560][ T976] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 982.828183][ T976] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 982.883259][ T976] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 982.892674][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.900845][ T976] usb 4-1: Product: syz [ 982.905883][ T976] usb 4-1: Manufacturer: syz [ 982.910522][ T976] usb 4-1: SerialNumber: syz [ 982.960390][ T976] usb 4-1: config 0 descriptor?? [ 982.978556][ T976] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 983.371687][ T5917] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 983.572141][ T5917] usb 5-1: device descriptor read/64, error -71 [ 983.589386][T18739] FAULT_INJECTION: forcing a failure. [ 983.589386][T18739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.603145][T18739] CPU: 1 UID: 0 PID: 18739 Comm: syz.5.3796 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 983.603169][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 983.603180][T18739] Call Trace: [ 983.603187][T18739] [ 983.603193][T18739] dump_stack_lvl+0x241/0x360 [ 983.603219][T18739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.603239][T18739] ? __pfx__printk+0x10/0x10 [ 983.603268][T18739] should_fail_ex+0x424/0x570 [ 983.603297][T18739] _copy_from_user+0x2d/0xb0 [ 983.603322][T18739] kvm_arch_vcpu_ioctl+0x4e5/0x29d0 [ 983.603352][T18739] ? __lock_acquire+0xad5/0xd80 [ 983.603382][T18739] ? kvm_arch_vcpu_ioctl+0x47d/0x29d0 [ 983.603409][T18739] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 983.603432][T18739] ? __lock_acquire+0xad5/0xd80 [ 983.603458][T18739] ? __lock_acquire+0xad5/0xd80 [ 983.603487][T18739] ? is_bpf_text_address+0x26/0x2a0 [ 983.603512][T18739] ? is_bpf_text_address+0x288/0x2a0 [ 983.603532][T18739] ? is_bpf_text_address+0x26/0x2a0 [ 983.603554][T18739] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 983.603572][T18739] ? kernel_text_address+0xa7/0xe0 [ 983.603593][T18739] ? __kernel_text_address+0xd/0x40 [ 983.603612][T18739] ? unwind_get_return_address+0x4d/0x90 [ 983.603630][T18739] ? arch_stack_walk+0xff/0x150 [ 983.603653][T18739] ? stack_trace_save+0x11a/0x1d0 [ 983.603677][T18739] ? __lock_acquire+0xad5/0xd80 [ 983.603699][T18739] ? __mutex_trylock_common+0x184/0x2e0 [ 983.603718][T18739] ? __pfx___mutex_trylock_common+0x10/0x10 [ 983.603735][T18739] ? rcu_is_watching+0x15/0xb0 [ 983.603749][T18739] ? trace_contention_end+0x3c/0x120 [ 983.603765][T18739] ? __mutex_lock+0x39b/0x1000 [ 983.603793][T18739] ? kvm_vcpu_ioctl+0x257/0x1030 [ 983.603811][T18739] ? __pfx___mutex_lock+0x10/0x10 [ 983.603843][T18739] kvm_vcpu_ioctl+0x84b/0x1030 [ 983.603863][T18739] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 983.603880][T18739] ? tomoyo_path_number_perm+0x215/0x790 [ 983.603907][T18739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 983.603943][T18739] kvm_vcpu_compat_ioctl+0x241/0x450 [ 983.603961][T18739] ? __fget_files+0x2a/0x420 [ 983.603983][T18739] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 983.604002][T18739] ? __fget_files+0x2a/0x420 [ 983.604027][T18739] __se_compat_sys_ioctl+0x50e/0xc30 [ 983.604045][T18739] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 983.604063][T18739] ? __fget_files+0x2a/0x420 [ 983.604086][T18739] ? fput+0x9b/0xd0 [ 983.604107][T18739] ? ksys_write+0x275/0x2d0 [ 983.604126][T18739] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 983.604149][T18739] ? lockdep_hardirqs_on+0x9d/0x150 [ 983.604172][T18739] __do_fast_syscall_32+0xb4/0x110 [ 983.604196][T18739] ? exc_page_fault+0x599/0x8b0 [ 983.604217][T18739] do_fast_syscall_32+0x34/0x80 [ 983.604240][T18739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.604258][T18739] RIP: 0023:0xf7f22579 [ 983.604271][T18739] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 983.604283][T18739] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 983.604300][T18739] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 983.604310][T18739] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.604320][T18739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.604329][T18739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.604338][T18739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.604355][T18739] [ 983.956780][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.094834][ T5917] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 984.242209][ T5917] usb 5-1: device descriptor read/64, error -71 [ 984.359628][T18757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3798'. [ 984.629067][ T5917] usb usb5-port1: attempt power cycle [ 984.751357][ T5834] usb 4-1: USB disconnect, device number 61 [ 985.102064][ T5917] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 985.151046][ T5917] usb 5-1: device descriptor read/8, error -71 [ 985.168005][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3804'. [ 985.408732][ T5917] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 985.462667][ T5917] usb 5-1: device descriptor read/8, error -71 [ 985.572369][ T5917] usb usb5-port1: unable to enumerate USB device [ 985.817927][T18778] netlink: 'syz.3.3808': attribute type 1 has an invalid length. [ 985.903955][T18778] bond1: entered promiscuous mode [ 985.925604][T18778] bond1: entered allmulticast mode [ 986.013249][T18782] veth3: entered allmulticast mode [ 986.094531][T18782] bond1: (slave veth3): Enslaving as an active interface with a down link [ 986.334838][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3811'. [ 986.528154][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3811'. [ 987.242623][ T5917] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 987.400880][ T5917] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 987.400914][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.400937][ T5917] usb 6-1: config 0 has no interface number 0 [ 987.400957][ T5917] usb 6-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 987.400980][ T5917] usb 6-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 987.401000][ T5917] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 987.401016][ T5917] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 987.405219][ T5917] usb 6-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 987.405244][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.405260][ T5917] usb 6-1: Product: syz [ 987.405272][ T5917] usb 6-1: Manufacturer: syz [ 987.405284][ T5917] usb 6-1: SerialNumber: syz [ 987.406718][ T5917] usb 6-1: config 0 descriptor?? [ 987.409405][ T5917] HFC-S_USB 6-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 988.660992][T18831] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 989.015558][T18844] dccp_invalid_packet: P.Data Offset(0) too small [ 989.346782][T18850] netlink: 'syz.3.3826': attribute type 10 has an invalid length. [ 989.349279][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.349702][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.403569][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.403650][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.403901][T18850] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.403986][T18850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.445463][T18850] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 989.790163][T18854] FAULT_INJECTION: forcing a failure. [ 989.790163][T18854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.822038][T18854] CPU: 0 UID: 0 PID: 18854 Comm: syz.1.3828 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 989.822063][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 989.822073][T18854] Call Trace: [ 989.822079][T18854] [ 989.822086][T18854] dump_stack_lvl+0x241/0x360 [ 989.822112][T18854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.822131][T18854] ? __pfx__printk+0x10/0x10 [ 989.822155][T18854] should_fail_ex+0x424/0x570 [ 989.822177][T18854] _copy_from_user+0x2d/0xb0 [ 989.822195][T18854] __sys_bpf+0x1cb/0x850 [ 989.822216][T18854] ? __pfx___sys_bpf+0x10/0x10 [ 989.822241][T18854] ? ksys_write+0x275/0x2d0 [ 989.822262][T18854] __ia32_sys_bpf+0x7c/0x90 [ 989.822280][T18854] __do_fast_syscall_32+0xb4/0x110 [ 989.822305][T18854] ? exc_page_fault+0x599/0x8b0 [ 989.822327][T18854] do_fast_syscall_32+0x34/0x80 [ 989.822350][T18854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 989.822369][T18854] RIP: 0023:0xf73bd579 [ 989.822381][T18854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 989.822393][T18854] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 989.822410][T18854] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001280 [ 989.822421][T18854] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.822438][T18854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.822447][T18854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.822458][T18854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.822475][T18854] [ 989.997516][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.004339][ T5917] usb 6-1: USB disconnect, device number 71 [ 991.289183][T18874] netlink: 'syz.1.3835': attribute type 1 has an invalid length. [ 991.432876][T18874] bond1: entered promiscuous mode [ 991.453782][T18874] bond1: entered allmulticast mode [ 991.499530][T18877] veth3: entered allmulticast mode [ 992.062194][ T976] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 992.235448][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 992.250662][ T976] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 992.271594][ T976] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 992.295193][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.308294][ T976] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 992.319731][ T976] usb 2-1: config 0 has no interface number 0 [ 992.330478][ T976] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.330517][ T976] usb 2-1: config 0 interface 150 has no altsetting 0 [ 992.425128][ T976] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 992.425163][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.428249][ T976] usb 2-1: config 0 descriptor?? [ 992.902312][ T5917] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 993.038212][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.038266][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.043072][ T5917] usb 6-1: device descriptor read/64, error -71 [ 993.160868][ T976] usb 2-1: USB disconnect, device number 45 [ 993.332495][ T5917] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 993.463822][ T5917] usb 6-1: device descriptor read/64, error -71 [ 993.483414][T18909] kAFS: unable to lookup cell '' [ 993.583033][ T5917] usb usb6-port1: attempt power cycle [ 993.657424][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3847'. [ 993.668900][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3847'. [ 993.691313][T18914] netlink: 'syz.7.3847': attribute type 14 has an invalid length. [ 993.699817][T18914] netlink: 'syz.7.3847': attribute type 12 has an invalid length. [ 993.824586][T18914] fuse: Bad value for 'fd' [ 993.863710][T18918] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.932093][ T5917] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 993.964021][ T5917] usb 6-1: device descriptor read/8, error -71 [ 994.116591][T18920] tipc: Started in network mode [ 994.121745][T18920] tipc: Node identity _1844674, cluster identity 4711 [ 994.222289][ T5917] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 994.253986][ T5917] usb 6-1: device descriptor read/8, error -71 [ 994.422392][ T5917] usb usb6-port1: unable to enumerate USB device [ 994.719305][T18932] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 994.944849][T18940] netlink: 'syz.4.3858': attribute type 10 has an invalid length. [ 994.956289][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.963886][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.984784][T18940] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.992065][T18940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.999539][T18940] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.006755][T18940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.028640][T18940] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 995.182085][ T976] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 995.352131][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 995.363397][ T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.375010][ T976] usb 4-1: config 1 has no interfaces? [ 995.380594][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 995.393696][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.626940][ T976] usb 4-1: string descriptor 0 read error: -71 [ 995.645936][ T976] usb 4-1: USB disconnect, device number 62 [ 996.669223][T18983] xt_CT: No such helper "netbios-ns" [ 996.861343][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 997.213623][ T48] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 997.358350][T19003] FAULT_INJECTION: forcing a failure. [ 997.358350][T19003] name failslab, interval 1, probability 0, space 0, times 0 [ 997.374008][T19003] CPU: 0 UID: 0 PID: 19003 Comm: syz.7.3882 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 997.374032][T19003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 997.374042][T19003] Call Trace: [ 997.374049][T19003] [ 997.374056][T19003] dump_stack_lvl+0x241/0x360 [ 997.374083][T19003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 997.374103][T19003] ? __pfx__printk+0x10/0x10 [ 997.374122][T19003] ? __pfx___might_resched+0x10/0x10 [ 997.374139][T19003] should_fail_ex+0x424/0x570 [ 997.374160][T19003] should_failslab+0xac/0x100 [ 997.374180][T19003] __kmalloc_cache_noprof+0x73/0x370 [ 997.374199][T19003] ? alloc_netdev_mqs+0xc81/0x1210 [ 997.374218][T19003] alloc_netdev_mqs+0xc81/0x1210 [ 997.374238][T19003] rtnl_create_link+0x2f9/0xc90 [ 997.374257][T19003] rtnl_newlink_create+0x212/0xa50 [ 997.374280][T19003] ? __pfx___mutex_lock+0x10/0x10 [ 997.374303][T19003] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 997.374326][T19003] ? ns_capable+0x8a/0xf0 [ 997.374349][T19003] rtnl_newlink+0x1a0a/0x1f60 [ 997.374373][T19003] ? kasan_save_free_info+0x40/0x50 [ 997.374396][T19003] ? __pfx_rtnl_newlink+0x10/0x10 [ 997.374412][T19003] ? __netlink_deliver_tap+0x561/0x7f0 [ 997.374429][T19003] ? netlink_deliver_tap+0x19d/0x1b0 [ 997.374444][T19003] ? netlink_unicast+0x7c6/0x9a0 [ 997.374456][T19003] ? netlink_sendmsg+0x8e8/0xce0 [ 997.374472][T19003] ? __sock_sendmsg+0x221/0x270 [ 997.374489][T19003] ? ____sys_sendmsg+0x53c/0x870 [ 997.374502][T19003] ? __sys_sendmsg+0x271/0x360 [ 997.374515][T19003] ? __do_fast_syscall_32+0xb4/0x110 [ 997.374537][T19003] ? do_fast_syscall_32+0x34/0x80 [ 997.374558][T19003] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 997.374593][T19003] ? kasan_quarantine_put+0xdc/0x230 [ 997.374607][T19003] ? lockdep_hardirqs_on+0x9d/0x150 [ 997.374629][T19003] ? nlmon_xmit+0xaf/0x100 [ 997.374646][T19003] ? __local_bh_enable_ip+0x168/0x200 [ 997.374666][T19003] ? lockdep_hardirqs_on+0x9d/0x150 [ 997.374690][T19003] ? aa_get_newest_label+0x101/0x6f0 [ 997.374713][T19003] ? __lock_acquire+0xad5/0xd80 [ 997.374743][T19003] ? __pfx_rtnl_newlink+0x10/0x10 [ 997.374762][T19003] rtnetlink_rcv_msg+0x80f/0xd70 [ 997.374779][T19003] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 997.374799][T19003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 997.374828][T19003] ? ref_tracker_free+0x63e/0x7e0 [ 997.374852][T19003] netlink_rcv_skb+0x208/0x480 [ 997.374870][T19003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 997.374890][T19003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 997.374925][T19003] ? netlink_deliver_tap+0x2e/0x1b0 [ 997.374951][T19003] ? netlink_deliver_tap+0x2e/0x1b0 [ 997.374977][T19003] netlink_unicast+0x7f8/0x9a0 [ 997.375009][T19003] ? __pfx_netlink_unicast+0x10/0x10 [ 997.375023][T19003] ? __virt_addr_valid+0x45f/0x530 [ 997.375041][T19003] ? __phys_addr_symbol+0x2f/0x70 [ 997.375058][T19003] ? __check_object_size+0x478/0x720 [ 997.375082][T19003] netlink_sendmsg+0x8e8/0xce0 [ 997.375106][T19003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.375125][T19003] ? __import_iovec+0x585/0x830 [ 997.375141][T19003] ? aa_sock_msg_perm+0x91/0x160 [ 997.375164][T19003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.375180][T19003] __sock_sendmsg+0x221/0x270 [ 997.375200][T19003] ____sys_sendmsg+0x53c/0x870 [ 997.375220][T19003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 997.375243][T19003] __sys_sendmsg+0x271/0x360 [ 997.375260][T19003] ? __pfx___sys_sendmsg+0x10/0x10 [ 997.375299][T19003] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 997.375321][T19003] ? lockdep_hardirqs_on+0x9d/0x150 [ 997.375344][T19003] __do_fast_syscall_32+0xb4/0x110 [ 997.375367][T19003] ? exc_page_fault+0x599/0x8b0 [ 997.375389][T19003] do_fast_syscall_32+0x34/0x80 [ 997.375412][T19003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 997.375430][T19003] RIP: 0023:0xf7fd5579 [ 997.375443][T19003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 997.375457][T19003] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 997.375473][T19003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 997.375484][T19003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.375493][T19003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 997.375502][T19003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 997.375511][T19003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 997.375528][T19003] [ 997.394128][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.403782][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.867294][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.877445][ T48] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.914518][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.005511][ T48] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 998.015138][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.025220][ T48] usb 4-1: Product: syz [ 998.029613][ T48] usb 4-1: Manufacturer: syz [ 998.034512][ T48] usb 4-1: SerialNumber: syz [ 998.052900][ T48] usb 4-1: config 0 descriptor?? [ 998.072324][ T48] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 998.645214][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 998.840115][T19031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.841539][T19031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.051233][T19041] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 999.151428][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 999.666088][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 1000.069457][ T48] usb 4-1: USB disconnect, device number 63 [ 1000.254522][ T5839] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1000.432990][ T5839] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1000.483575][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.491777][ T5839] usb 2-1: Product: syz [ 1000.607260][ T5839] usb 2-1: Manufacturer: syz [ 1000.623734][ T5839] usb 2-1: SerialNumber: syz [ 1000.636275][ T5839] usb 2-1: config 0 descriptor?? [ 1000.655546][ T5839] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1001.554091][ T5839] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1001.599241][ T5839] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1001.640206][ T5839] usb 2-1: USB disconnect, device number 46 [ 1001.924269][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3907'. [ 1002.782201][ T5839] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1002.832271][ T5917] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1002.999265][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.011146][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1003.031783][ T5839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.084396][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.102179][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1003.237846][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.276941][ T5839] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1003.336772][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.361965][ T5917] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1003.384418][ T5839] usb 2-1: Product: syz [ 1003.466278][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.478348][ T5839] usb 2-1: Manufacturer: syz [ 1003.497032][ T5839] usb 2-1: SerialNumber: syz [ 1003.509419][ T5917] usb 6-1: Product: syz [ 1003.520065][ T5917] usb 6-1: Manufacturer: syz [ 1003.549886][ T5917] usb 6-1: SerialNumber: syz [ 1003.604426][ T5917] usb 6-1: config 0 descriptor?? [ 1003.666193][ T5917] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 1003.751340][T19100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3910'. [ 1004.237391][T19110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.271850][T19110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.669546][ T5839] usb 2-1: 0:2 : does not exist [ 1005.712428][ T5839] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1005.789529][ T5839] usb 2-1: USB disconnect, device number 47 [ 1005.852202][T19123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3917'. [ 1005.877828][T19123] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3917'. [ 1006.043028][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.048690][T19128] kAFS: unable to lookup cell '' [ 1006.252046][ T48] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1006.356624][T19139] FAULT_INJECTION: forcing a failure. [ 1006.356624][T19139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.369888][T19139] CPU: 1 UID: 0 PID: 19139 Comm: syz.1.3921 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1006.369913][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1006.369924][T19139] Call Trace: [ 1006.369933][T19139] [ 1006.369944][T19139] dump_stack_lvl+0x241/0x360 [ 1006.369979][T19139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.370006][T19139] ? __pfx__printk+0x10/0x10 [ 1006.370039][T19139] should_fail_ex+0x424/0x570 [ 1006.370070][T19139] _copy_to_user+0x31/0xb0 [ 1006.370093][T19139] simple_read_from_buffer+0xdc/0x170 [ 1006.370121][T19139] proc_fail_nth_read+0x1ef/0x260 [ 1006.370146][T19139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.370171][T19139] ? rw_verify_area+0x246/0x630 [ 1006.370192][T19139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.370225][T19139] vfs_read+0x21f/0xb90 [ 1006.370250][T19139] ? __pfx___mutex_lock+0x10/0x10 [ 1006.370281][T19139] ? __pfx_vfs_read+0x10/0x10 [ 1006.370303][T19139] ? __fget_files+0x2a/0x420 [ 1006.370329][T19139] ? __fget_files+0x39d/0x420 [ 1006.370349][T19139] ? __fget_files+0x2a/0x420 [ 1006.370375][T19139] ksys_read+0x19d/0x2d0 [ 1006.370391][T19139] ? __pfx_ksys_read+0x10/0x10 [ 1006.370408][T19139] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1006.370430][T19139] ? lockdep_hardirqs_on+0x9d/0x150 [ 1006.370452][T19139] __do_fast_syscall_32+0xb4/0x110 [ 1006.370475][T19139] ? exc_page_fault+0x599/0x8b0 [ 1006.370497][T19139] do_fast_syscall_32+0x34/0x80 [ 1006.370519][T19139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.370538][T19139] RIP: 0023:0xf73bd579 [ 1006.370551][T19139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1006.370563][T19139] RSP: 002b:00000000f5046590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1006.370581][T19139] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5046620 [ 1006.370591][T19139] RDX: 000000000000000f RSI: 00000000f73acff4 RDI: 0000000000000000 [ 1006.370601][T19139] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1006.370610][T19139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1006.370619][T19139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1006.370636][T19139] [ 1006.606196][ T976] usb 6-1: USB disconnect, device number 76 [ 1006.612043][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1006.618741][ T48] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 1006.627026][ T48] usb 5-1: config 0 has no interface number 0 [ 1006.633236][ T48] usb 5-1: too many endpoints for config 0 interface 145 altsetting 86: 247, using maximum allowed: 30 [ 1006.644350][ T48] usb 5-1: config 0 interface 145 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1006.657922][ T48] usb 5-1: config 0 interface 145 has no altsetting 0 [ 1006.672537][ T48] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 1006.681641][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.689745][ T48] usb 5-1: Product: syz [ 1006.693995][ T48] usb 5-1: Manufacturer: syz [ 1006.698627][ T48] usb 5-1: SerialNumber: syz [ 1006.712857][ T48] usb 5-1: config 0 descriptor?? [ 1006.791316][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1006.937608][ T48] ftdi_sio 5-1:0.145: FTDI USB Serial Device converter detected [ 1006.946077][ T48] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 1006.959509][ T48] usb 5-1: USB disconnect, device number 86 [ 1007.031035][ T48] ftdi_sio 5-1:0.145: device disconnected [ 1007.123601][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1007.277728][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1007.782046][T16535] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1007.972403][T16535] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.013431][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3930'. [ 1008.061997][T16535] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.085016][T19176] geneve2: entered promiscuous mode [ 1008.090299][T19176] geneve2: entered allmulticast mode [ 1008.215848][T16535] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.256007][T16535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.297358][T16535] usb 2-1: Product: syz [ 1008.330944][T16535] usb 2-1: Manufacturer: syz [ 1008.351119][T16535] usb 2-1: SerialNumber: syz [ 1008.512391][ T5917] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1008.643030][T19172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3927'. [ 1008.728783][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.742024][ T5839] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1008.794362][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1008.828279][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1008.859423][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1008.897267][ T5917] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1008.917252][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.953813][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.968982][ T5917] usb 4-1: Product: syz [ 1008.984873][ T5917] usb 4-1: Manufacturer: syz [ 1008.995860][ T5839] usb 6-1: config 0 has no interfaces? [ 1009.005163][ T5917] usb 4-1: SerialNumber: syz [ 1009.021351][ T5839] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1009.053133][ T5917] usb 4-1: config 0 descriptor?? [ 1009.077730][ T5917] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 1009.097462][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.135795][ T5839] usb 6-1: config 0 descriptor?? [ 1009.793420][T19198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.807445][T19198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.646763][T19203] kAFS: unable to lookup cell '' [ 1011.255987][ T9] usb 4-1: USB disconnect, device number 64 [ 1011.273772][T16535] usb 2-1: 0:2 : does not exist [ 1011.313811][T16535] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1011.341449][T16535] usb 2-1: USB disconnect, device number 48 [ 1011.512685][T19220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3944'. [ 1011.522019][ T9] usb 6-1: USB disconnect, device number 77 [ 1011.545007][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'. [ 1011.577380][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.172011][ T5917] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1013.327610][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.327648][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.327674][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1013.327714][ T5917] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1013.327740][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.329215][ T5917] usb 4-1: config 0 descriptor?? [ 1013.745292][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 1013.755773][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1013.786187][ T5917] usb 4-1: USB disconnect, device number 65 [ 1014.141983][ T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1014.312108][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1014.329427][ T9] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 1014.351976][ T9] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1014.376938][ T9] usb 6-1: config 0 has no interface number 0 [ 1014.395911][ T9] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1014.414949][ T9] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1014.445819][ T9] usb 6-1: config 0 interface 48 has no altsetting 0 [ 1014.459530][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1014.479490][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.499692][ T9] usb 6-1: config 0 descriptor?? [ 1014.622173][ T5917] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1014.723732][T19259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.769509][T19259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.794972][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.833547][ T5917] usb 4-1: config 0 has no interfaces? [ 1014.847347][ T5917] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1014.881452][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.916915][ T9] usb 6-1: string descriptor 0 read error: -71 [ 1014.918828][ T5917] usb 4-1: config 0 descriptor?? [ 1014.952926][ T9] usb 6-1: USB disconnect, device number 78 [ 1015.352111][T16535] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1015.530116][T16535] usb 2-1: config 0 has no interfaces? [ 1015.538941][T16535] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1015.549212][T16535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.558559][T16535] usb 2-1: Product: syz [ 1015.563319][T16535] usb 2-1: Manufacturer: syz [ 1015.568097][T16535] usb 2-1: SerialNumber: syz [ 1015.575891][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3961'. [ 1015.585826][T16535] usb 2-1: config 0 descriptor?? [ 1015.800348][T19264] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1015.826485][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1015.836810][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/u9:6 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1015.836833][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1015.836845][ T5841] Workqueue: hci2 hci_rx_work [ 1015.836869][ T5841] Call Trace: [ 1015.836876][ T5841] [ 1015.836884][ T5841] dump_stack_lvl+0x241/0x360 [ 1015.836908][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.836928][ T5841] ? __pfx__printk+0x10/0x10 [ 1015.836948][ T5841] ? __kmalloc_cache_noprof+0x236/0x370 [ 1015.836969][ T5841] ? sysfs_create_dir_ns+0x2b9/0x3f0 [ 1015.836999][ T5841] sysfs_create_dir_ns+0x2fd/0x3f0 [ 1015.837032][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1015.837069][ T5841] kobject_add_internal+0x435/0x8d0 [ 1015.837097][ T5841] kobject_add+0x15b/0x230 [ 1015.837121][ T5841] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1015.837140][ T5841] ? device_add+0x3e7/0xbf0 [ 1015.837162][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 1015.837185][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 1015.837207][ T5841] ? get_device_parent+0x165/0x410 [ 1015.837240][ T5841] device_add+0x4e5/0xbf0 [ 1015.837275][ T5841] hci_conn_add_sysfs+0xe8/0x200 [ 1015.837300][ T5841] le_conn_complete_evt+0xc6e/0x12a0 [ 1015.837338][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1015.837362][ T5841] ? irqentry_exit+0x63/0x90 [ 1015.837384][ T5841] ? lockdep_hardirqs_on+0x9d/0x150 [ 1015.837411][ T5841] hci_le_enh_conn_complete_evt+0x185/0x420 [ 1015.837436][ T5841] hci_event_packet+0xa5c/0x1550 [ 1015.837455][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1015.837477][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 1015.837496][ T5841] ? kcov_remote_start+0x460/0x7d0 [ 1015.837516][ T5841] ? lockdep_hardirqs_on+0x9d/0x150 [ 1015.837539][ T5841] ? hci_send_to_monitor+0xdc/0x530 [ 1015.837563][ T5841] hci_rx_work+0x3f3/0xdb0 [ 1015.837584][ T5841] ? process_scheduled_works+0x9cb/0x18e0 [ 1015.837608][ T5841] process_scheduled_works+0xac3/0x18e0 [ 1015.837654][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 1015.837683][ T5841] ? assign_work+0x367/0x3d0 [ 1015.837709][ T5841] worker_thread+0x870/0xd30 [ 1015.837731][ T5841] ? __kthread_parkme+0x169/0x1d0 [ 1015.837749][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 1015.837764][ T5841] kthread+0x7a9/0x920 [ 1015.837783][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 1015.837798][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837815][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837832][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837849][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837866][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 1015.837884][ T5841] ? lockdep_hardirqs_on+0x9d/0x150 [ 1015.837906][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837924][ T5841] ret_from_fork+0x4b/0x80 [ 1015.837937][ T5841] ? __pfx_kthread+0x10/0x10 [ 1015.837955][ T5841] ret_from_fork_asm+0x1a/0x30 [ 1015.837984][ T5841] [ 1015.838015][ T5841] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1016.124378][ T5841] Bluetooth: hci2: failed to register connection device [ 1017.230021][T19296] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1017.232241][ T976] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1017.406992][ T24] usb 4-1: USB disconnect, device number 66 [ 1017.419741][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.437271][ T976] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1017.448638][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.460004][ T976] usb 6-1: config 0 descriptor?? [ 1017.574129][T19302] dccp_v6_rcv: dropped packet with invalid checksum [ 1017.732550][T19306] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3965'. [ 1017.745706][T19306] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3965'. [ 1017.856307][T19308] program syz.3.3972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.969383][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3965'. [ 1017.986424][ T976] cypress 0003:04B4:BCA1.003E: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 1018.047297][ T24] usb 2-1: USB disconnect, device number 49 [ 1018.167196][ T5834] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1018.343695][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.365804][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1018.393018][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1018.413151][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.444161][ T5834] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1018.453587][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.470656][ T5834] usb 4-1: Product: syz [ 1018.486545][ T5834] usb 4-1: Manufacturer: syz [ 1018.503984][ T5834] usb 4-1: SerialNumber: syz [ 1018.563961][ T5834] usb 4-1: config 0 descriptor?? [ 1018.581715][ T5834] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 1018.972063][T19329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1019.001788][T19329] IPv6: syztnl1: Disabled Multicast RS [ 1019.051234][T19330] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1019.514394][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.588820][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.077558][ T976] usb 6-1: USB disconnect, device number 79 [ 1020.796266][T19356] netlink: 'syz.5.3986': attribute type 1 has an invalid length. [ 1020.969513][ T976] usb 4-1: USB disconnect, device number 67 [ 1021.201828][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1021.467785][T19373] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1022.041975][ T5834] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1022.204019][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1022.213966][ T5834] usb 2-1: config 7 has an invalid interface number: 175 but max is 0 [ 1022.230165][ T5834] usb 2-1: config 7 has no interface number 0 [ 1022.244839][ T5834] usb 2-1: config 7 interface 175 has no altsetting 0 [ 1022.263578][ T5834] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=33.dd [ 1022.283658][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.342751][ T5834] usb 2-1: Product: syz [ 1022.365078][ T5834] usb 2-1: Manufacturer: syz [ 1022.391342][ T5834] usb 2-1: SerialNumber: syz [ 1022.702635][ T5834] usbserial_generic 2-1:7.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1022.901991][ T5834] usbserial_generic 2-1:7.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1023.113031][ T5834] usbserial_generic 2-1:7.175: device has no bulk endpoints [ 1023.138477][ T5834] usbhid 2-1:7.175: couldn't find an input interrupt endpoint [ 1023.147719][ T5834] usb 2-1: USB disconnect, device number 50 [ 1023.642065][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 1024.104814][T19412] team0 (unregistering): Port device team_slave_0 removed [ 1024.144890][T19412] team0 (unregistering): Port device team_slave_1 removed [ 1024.195101][T19416] pimreg: entered allmulticast mode [ 1024.202404][T19418] pimreg: left allmulticast mode [ 1024.212410][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1024.393786][ T24] usb 5-1: config 0 has no interfaces? [ 1024.638100][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1024.649547][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.659371][ T24] usb 5-1: Product: syz [ 1024.668161][ T24] usb 5-1: Manufacturer: syz [ 1024.684429][ T24] usb 5-1: SerialNumber: syz [ 1024.701422][ T24] usb 5-1: config 0 descriptor?? [ 1024.781996][ T5834] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1025.253186][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1025.264932][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1025.324188][ T5834] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1025.403136][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.457709][ T5834] usb 2-1: config 0 descriptor?? [ 1025.471348][T19430] FAULT_INJECTION: forcing a failure. [ 1025.471348][T19430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1025.497411][T19424] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1025.519525][T19430] CPU: 1 UID: 0 PID: 19430 Comm: syz.7.4011 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1025.519557][T19430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1025.519570][T19430] Call Trace: [ 1025.519578][T19430] [ 1025.519588][T19430] dump_stack_lvl+0x241/0x360 [ 1025.519654][T19430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.519681][T19430] ? __pfx__printk+0x10/0x10 [ 1025.519712][T19430] should_fail_ex+0x424/0x570 [ 1025.519742][T19430] prepare_alloc_pages+0x1dd/0x5c0 [ 1025.519769][T19430] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 1025.519794][T19430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1025.519816][T19430] ? __kernel_text_address+0xd/0x40 [ 1025.519844][T19430] ? unwind_get_return_address+0x4d/0x90 [ 1025.519879][T19430] alloc_pages_mpol+0x339/0x690 [ 1025.519909][T19430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1025.519942][T19430] vma_alloc_folio_noprof+0x12d/0x260 [ 1025.519969][T19430] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1025.520003][T19430] folio_prealloc+0x2e/0x170 [ 1025.520024][T19430] __handle_mm_fault+0x32e8/0x6ef0 [ 1025.520053][T19430] ? __lock_acquire+0xad5/0xd80 [ 1025.520100][T19430] ? __pfx___handle_mm_fault+0x10/0x10 [ 1025.520139][T19430] ? mtree_range_walk+0x700/0x8e0 [ 1025.520173][T19430] ? mt_find+0x28a/0x8f0 [ 1025.520202][T19430] ? mt_find+0x28a/0x8f0 [ 1025.520231][T19430] ? mt_find+0x699/0x8f0 [ 1025.520260][T19430] ? mt_find+0x28a/0x8f0 [ 1025.520291][T19430] ? __pfx_mt_find+0x10/0x10 [ 1025.520335][T19430] ? find_vma+0xfa/0x170 [ 1025.520362][T19430] ? __pfx_find_vma+0x10/0x10 [ 1025.520404][T19430] handle_mm_fault+0x3e5/0x8d0 [ 1025.520446][T19430] exc_page_fault+0x2bb/0x8b0 [ 1025.520480][T19430] asm_exc_page_fault+0x26/0x30 [ 1025.520501][T19430] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1025.520528][T19430] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1025.520546][T19430] RSP: 0018:ffffc90004c07478 EFLAGS: 00050202 [ 1025.520567][T19430] RAX: ffff8880598ca001 RBX: 0000000000000197 RCX: 0000000000000157 [ 1025.520582][T19430] RDX: 0000000000000000 RSI: ffff8880598ca421 RDI: 0000000080001000 [ 1025.520598][T19430] RBP: ffffc90004c075f0 R08: ffff8880598ca577 R09: 1ffff1100b3194ae [ 1025.520621][T19430] R10: dffffc0000000000 R11: ffffed100b3194af R12: 0000000000000000 [ 1025.520636][T19430] R13: ffffc90004c07cb0 R14: ffff8880598ca3e1 R15: 0000000080001157 [ 1025.520665][T19430] _copy_to_iter+0x4d2/0x1c90 [ 1025.520698][T19430] ? __pfx__copy_to_iter+0x10/0x10 [ 1025.520719][T19430] ? __virt_addr_valid+0x183/0x530 [ 1025.520743][T19430] ? __virt_addr_valid+0x183/0x530 [ 1025.520767][T19430] ? __virt_addr_valid+0x45f/0x530 [ 1025.520793][T19430] ? __phys_addr_symbol+0x2f/0x70 [ 1025.520817][T19430] ? __check_object_size+0x478/0x720 [ 1025.520843][T19430] ? skb_recv_datagram+0x26e/0x310 [ 1025.520868][T19430] __skb_datagram_iter+0x111/0x940 [ 1025.520892][T19430] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1025.520921][T19430] skb_copy_datagram_iter+0xd1/0x250 [ 1025.520947][T19430] netlink_recvmsg+0x2d4/0x1180 [ 1025.520975][T19430] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1025.521004][T19430] ? __pfx_aa_sk_perm+0x10/0x10 [ 1025.521028][T19430] ? iovec_from_user+0x87/0x240 [ 1025.521049][T19430] ? copy_compat_iovec_from_user+0x114/0x160 [ 1025.521076][T19430] ? aa_sock_msg_perm+0x91/0x160 [ 1025.521105][T19430] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1025.521128][T19430] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1025.521154][T19430] sock_recvmsg+0x22f/0x280 [ 1025.521184][T19430] ____sys_recvmsg+0x1c8/0x480 [ 1025.521214][T19430] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1025.521236][T19430] ? get_compat_msghdr+0x45e/0x730 [ 1025.521277][T19430] do_recvmmsg+0x53e/0xab0 [ 1025.521307][T19430] ? __pfx_do_recvmmsg+0x10/0x10 [ 1025.521344][T19430] ? __lock_acquire+0xad5/0xd80 [ 1025.521397][T19430] ? get_old_timespec32+0x18d/0x280 [ 1025.521438][T19430] __sys_recvmmsg+0x140/0x280 [ 1025.521462][T19430] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1025.521483][T19430] ? ksys_write+0x275/0x2d0 [ 1025.521512][T19430] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 1025.521544][T19430] __do_fast_syscall_32+0xb4/0x110 [ 1025.521576][T19430] ? exc_page_fault+0x599/0x8b0 [ 1025.521614][T19430] do_fast_syscall_32+0x34/0x80 [ 1025.521646][T19430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1025.521670][T19430] RIP: 0023:0xf7fd5579 [ 1025.521688][T19430] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1025.521705][T19430] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1025.521726][T19430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1025.521742][T19430] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 1025.521755][T19430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.521768][T19430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1025.521781][T19430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1025.521805][T19430] [ 1026.617391][T19424] dccp_invalid_packet: P.Data Offset(0) too small [ 1026.632997][ T5834] greenasia 0003:0E8F:0012.003F: item fetching failed at offset 6/7 [ 1026.647371][ T5834] greenasia 0003:0E8F:0012.003F: parse failed [ 1026.656136][ T5834] greenasia 0003:0E8F:0012.003F: probe with driver greenasia failed with error -22 [ 1027.637055][ T5834] usb 5-1: USB disconnect, device number 87 [ 1027.655825][ T976] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1027.804629][T19452] fuse: Bad value for 'group_id' [ 1027.817185][T19452] fuse: Bad value for 'group_id' [ 1027.860542][ T976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1027.871140][ T976] usb 4-1: config 7 has an invalid interface number: 175 but max is 0 [ 1027.882923][ T976] usb 4-1: config 7 has no interface number 0 [ 1027.896388][ T976] usb 4-1: config 7 interface 175 has no altsetting 0 [ 1027.915216][ T976] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=33.dd [ 1027.927815][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.944791][ T976] usb 4-1: Product: syz [ 1027.957518][ T976] usb 4-1: Manufacturer: syz [ 1027.966815][ T976] usb 4-1: SerialNumber: syz [ 1027.997600][ T5839] usb 2-1: USB disconnect, device number 51 [ 1028.082217][ T5834] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1028.271941][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1028.312339][ T5834] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1028.320510][ T976] usbserial_generic 4-1:7.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1028.332723][ T976] usbserial_generic 4-1:7.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1028.345032][ T5834] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1028.352876][ T5834] usb 5-1: can't read configurations, error -61 [ 1028.362538][ T976] usbserial_generic 4-1:7.175: device has no bulk endpoints [ 1028.376524][ T976] usbhid 4-1:7.175: couldn't find an input interrupt endpoint [ 1028.390625][ T976] usb 4-1: USB disconnect, device number 68 [ 1028.821993][ T5834] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1028.992003][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1028.997906][ T5834] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1029.007316][ T5834] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1029.015026][ T5834] usb 5-1: can't read configurations, error -61 [ 1029.024239][ T5834] usb usb5-port1: attempt power cycle [ 1029.374117][ T5834] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1029.445589][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1029.467828][ T5834] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1029.480174][ T5834] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1029.487979][ T5834] usb 5-1: can't read configurations, error -61 [ 1029.622041][ T5834] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1029.662517][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1029.668260][ T5834] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 1029.691320][ T5834] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1029.702180][ T976] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1030.013744][ T5834] usb 5-1: can't read configurations, error -61 [ 1030.020572][ T5834] usb usb5-port1: unable to enumerate USB device [ 1030.832732][T19476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1030.842613][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1030.853550][T19476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1030.872372][T19475] dccp_v6_rcv: dropped packet with invalid checksum [ 1030.891697][T19476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1031.016772][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1033.292367][T19525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4040'. [ 1033.490225][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1033.517370][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1033.538712][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1033.563194][T19537] gretap0: entered promiscuous mode [ 1033.569428][T19537] macvlan2: entered promiscuous mode [ 1033.575627][T19537] macvlan2: entered allmulticast mode [ 1033.581483][T19537] gretap0: entered allmulticast mode [ 1033.701850][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1033.808254][T19548] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.812459][T19550] FAULT_INJECTION: forcing a failure. [ 1033.812459][T19550] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.817247][T19548] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.835583][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.5.4050 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1033.835622][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1033.835637][T19550] Call Trace: [ 1033.835646][T19550] [ 1033.835656][T19550] dump_stack_lvl+0x241/0x360 [ 1033.835693][T19550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.835723][T19550] ? __pfx__printk+0x10/0x10 [ 1033.835748][T19550] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1033.835781][T19550] ? __pfx___might_resched+0x10/0x10 [ 1033.835806][T19550] should_fail_ex+0x424/0x570 [ 1033.835839][T19550] should_failslab+0xac/0x100 [ 1033.835869][T19550] __kmalloc_noprof+0xdf/0x4d0 [ 1033.835898][T19550] ? rfkill_alloc+0xb0/0x2e0 [ 1033.835938][T19550] rfkill_alloc+0xb0/0x2e0 [ 1033.835970][T19550] wiphy_new_nm+0x1084/0x19a0 [ 1033.836003][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1033.836040][T19550] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 1033.836069][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1033.836108][T19550] mac80211_hwsim_new_radio+0x20c/0x4b40 [ 1033.836146][T19550] ? __pfx_stack_trace_save+0x10/0x10 [ 1033.836174][T19550] ? stack_depot_save_flags+0x3a/0x970 [ 1033.836206][T19550] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1033.836249][T19550] hwsim_new_radio_nl+0xed0/0x2290 [ 1033.836283][T19550] ? __pfx___nla_validate_parse+0x10/0x10 [ 1033.836318][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.836367][T19550] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1033.836409][T19550] genl_rcv_msg+0xb38/0xf00 [ 1033.836447][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.836476][T19550] ? __dev_queue_xmit+0x1780/0x3f60 [ 1033.836499][T19550] ? kasan_save_track+0x3f/0x80 [ 1033.836520][T19550] ? __kasan_slab_alloc+0x66/0x80 [ 1033.836549][T19550] ? __do_fast_syscall_32+0xb4/0x110 [ 1033.836595][T19550] ? __lock_acquire+0xad5/0xd80 [ 1033.836627][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.836663][T19550] netlink_rcv_skb+0x208/0x480 [ 1033.836688][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.836721][T19550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.836762][T19550] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.836792][T19550] genl_rcv+0x28/0x40 [ 1033.836821][T19550] netlink_unicast+0x7f8/0x9a0 [ 1033.836850][T19550] ? __pfx_netlink_unicast+0x10/0x10 [ 1033.836871][T19550] ? __virt_addr_valid+0x45f/0x530 [ 1033.836897][T19550] ? __phys_addr_symbol+0x2f/0x70 [ 1033.836924][T19550] ? __check_object_size+0x478/0x720 [ 1033.836955][T19550] netlink_sendmsg+0x8e8/0xce0 [ 1033.836990][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.837018][T19550] ? __import_iovec+0x585/0x830 [ 1033.837041][T19550] ? aa_sock_msg_perm+0x91/0x160 [ 1033.837076][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.837099][T19550] __sock_sendmsg+0x221/0x270 [ 1033.837129][T19550] ____sys_sendmsg+0x53c/0x870 [ 1033.837159][T19550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.837194][T19550] __sys_sendmsg+0x271/0x360 [ 1033.837230][T19550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.837290][T19550] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1033.837322][T19550] ? lockdep_hardirqs_on+0x9d/0x150 [ 1033.837356][T19550] __do_fast_syscall_32+0xb4/0x110 [ 1033.837389][T19550] ? exc_page_fault+0x599/0x8b0 [ 1033.837422][T19550] do_fast_syscall_32+0x34/0x80 [ 1033.837455][T19550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.837483][T19550] RIP: 0023:0xf7f22579 [ 1033.837501][T19550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.837521][T19550] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1033.837545][T19550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1033.837562][T19550] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.837575][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.837589][T19550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.837602][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.837628][T19550] [ 1033.837800][T19550] INFO: trying to register non-static key. [ 1033.838771][T19548] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.850118][T19550] The code is fine but needs lockdep annotation, or maybe [ 1033.850136][T19550] you didn't initialize this object before use? [ 1033.850144][T19550] turning off the locking correctness validator. [ 1033.850159][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.5.4050 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1033.850184][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1033.850197][T19550] Call Trace: [ 1033.850207][T19550] [ 1033.850217][T19550] dump_stack_lvl+0x241/0x360 [ 1033.850254][T19550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.850279][T19550] ? __pfx__printk+0x10/0x10 [ 1033.850299][T19550] ? preempt_schedule_irq+0x145/0x1c0 [ 1033.850328][T19550] ? is_bpf_text_address+0x26/0x2a0 [ 1033.850356][T19550] ? __is_module_percpu_address+0x213/0x370 [ 1033.850381][T19550] ? __is_kernel_percpu_address+0x116/0x250 [ 1033.850413][T19550] assign_lock_key+0x135/0x150 [ 1033.850437][T19550] register_lock_class+0xd6/0x330 [ 1033.850470][T19550] __lock_acquire+0x80/0xd80 [ 1033.850497][T19550] ? dump_stack_lvl+0x2df/0x360 [ 1033.850522][T19550] ? dump_stack_lvl+0x2fd/0x360 [ 1033.850550][T19550] ? dump_stack_lvl+0x305/0x360 [ 1033.850577][T19550] lock_acquire+0x116/0x2f0 [ 1033.850606][T19550] ? cfg80211_dev_free+0x33/0x2d0 [ 1033.850633][T19550] _raw_spin_lock_irqsave+0xd8/0x130 [ 1033.850659][T19550] ? cfg80211_dev_free+0x33/0x2d0 [ 1033.850680][T19550] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1033.850707][T19550] ? devres_release_all+0x1ed/0x250 [ 1033.850732][T19550] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1033.850756][T19550] cfg80211_dev_free+0x33/0x2d0 [ 1033.850776][T19550] ? device_release+0x66/0x1c0 [ 1033.850798][T19550] ? trace_kmalloc+0x1f/0xd0 [ 1033.850824][T19550] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1033.850848][T19550] device_release+0x99/0x1c0 [ 1033.850871][T19550] kobject_put+0x22f/0x480 [ 1033.850894][T19550] wiphy_new_nm+0x16ea/0x19a0 [ 1033.850943][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1033.850979][T19550] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 1033.851006][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1033.851042][T19550] mac80211_hwsim_new_radio+0x20c/0x4b40 [ 1033.851074][T19550] ? __pfx_stack_trace_save+0x10/0x10 [ 1033.851100][T19550] ? stack_depot_save_flags+0x3a/0x970 [ 1033.851130][T19550] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1033.851159][T19550] hwsim_new_radio_nl+0xed0/0x2290 [ 1033.851189][T19550] ? __pfx___nla_validate_parse+0x10/0x10 [ 1033.851231][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.851268][T19550] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1033.851305][T19550] genl_rcv_msg+0xb38/0xf00 [ 1033.851338][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.851367][T19550] ? __dev_queue_xmit+0x1780/0x3f60 [ 1033.851390][T19550] ? kasan_save_track+0x3f/0x80 [ 1033.851412][T19550] ? __kasan_slab_alloc+0x66/0x80 [ 1033.851437][T19550] ? __do_fast_syscall_32+0xb4/0x110 [ 1033.851476][T19550] ? __lock_acquire+0xad5/0xd80 [ 1033.851507][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.851536][T19550] netlink_rcv_skb+0x208/0x480 [ 1033.851560][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.851591][T19550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.851622][T19550] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.851648][T19550] genl_rcv+0x28/0x40 [ 1033.851676][T19550] netlink_unicast+0x7f8/0x9a0 [ 1033.851700][T19550] ? __pfx_netlink_unicast+0x10/0x10 [ 1033.851720][T19550] ? __virt_addr_valid+0x45f/0x530 [ 1033.851747][T19550] ? __phys_addr_symbol+0x2f/0x70 [ 1033.851771][T19550] ? __check_object_size+0x478/0x720 [ 1033.851801][T19550] netlink_sendmsg+0x8e8/0xce0 [ 1033.851831][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.851860][T19550] ? __import_iovec+0x585/0x830 [ 1033.851883][T19550] ? aa_sock_msg_perm+0x91/0x160 [ 1033.851914][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.851948][T19550] __sock_sendmsg+0x221/0x270 [ 1033.851976][T19550] ____sys_sendmsg+0x53c/0x870 [ 1033.852001][T19550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.852029][T19550] __sys_sendmsg+0x271/0x360 [ 1033.852052][T19550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.852093][T19550] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1033.852126][T19550] ? lockdep_hardirqs_on+0x9d/0x150 [ 1033.852157][T19550] __do_fast_syscall_32+0xb4/0x110 [ 1033.852189][T19550] ? exc_page_fault+0x599/0x8b0 [ 1033.852226][T19550] do_fast_syscall_32+0x34/0x80 [ 1033.852259][T19550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.852286][T19550] RIP: 0023:0xf7f22579 [ 1033.852304][T19550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.852322][T19550] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1033.852347][T19550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1033.852363][T19550] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.852377][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.852389][T19550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.852403][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.852423][T19550] [ 1033.853537][T19550] ------------[ cut here ]------------ [ 1033.860485][T19548] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.863678][T19550] WARNING: CPU: 0 PID: 19550 at net/wireless/core.c:1197 cfg80211_dev_free+0x2ba/0x2d0 [ 1033.863713][T19550] Modules linked in: [ 1033.863733][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.5.4050 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1034.776397][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1034.786476][T19550] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 1034.792221][T19550] Code: cc f6 49 8b be e0 08 00 00 e8 12 9d c0 f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 9c c0 f6 e8 07 16 64 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1034.811836][T19550] RSP: 0018:ffffc9000455ee00 EFLAGS: 00010093 [ 1034.817919][T19550] RAX: ffffffff8b5f6089 RBX: ffff88805a0e86a8 RCX: ffff888054275a00 [ 1034.825890][T19550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000455ece0 [ 1034.833863][T19550] RBP: 1ffffffff194ce98 R08: 0000000000000003 R09: fffff520008abd9c [ 1034.841851][T19550] R10: dffffc0000000000 R11: fffff520008abd9c R12: ffff88805a0e86b8 [ 1034.849842][T19550] R13: dffffc0000000000 R14: ffff88805a0e8000 R15: 0000000000000246 [ 1034.857813][T19550] FS: 0000000000000000(0000) GS:ffff888125224000(0063) knlGS:00000000f5046b40 [ 1034.866741][T19550] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1034.873337][T19550] CR2: 00000000f5045fac CR3: 000000005a45a000 CR4: 00000000003526f0 [ 1034.881324][T19550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009000 [ 1034.889298][T19550] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1034.897271][T19550] Call Trace: [ 1034.900638][T19550] [ 1034.903571][T19550] ? __warn+0x165/0x4d0 [ 1034.907729][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1034.912877][T19550] ? report_bug+0x2b3/0x500 [ 1034.917384][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1034.922496][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1034.927604][T19550] ? cfg80211_dev_free+0x2bc/0x2d0 [ 1034.932714][T19550] ? handle_bug+0x89/0x170 [ 1034.937126][T19550] ? exc_invalid_op+0x1a/0x50 [ 1034.941822][T19550] ? asm_exc_invalid_op+0x1a/0x20 [ 1034.946865][T19550] ? cfg80211_dev_free+0x2b9/0x2d0 [ 1034.951983][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1034.957112][T19550] ? device_release+0x66/0x1c0 [ 1034.961887][T19550] ? trace_kmalloc+0x1f/0xd0 [ 1034.966503][T19550] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1034.971970][T19550] device_release+0x99/0x1c0 [ 1034.976735][T19550] kobject_put+0x22f/0x480 [ 1034.981171][T19550] wiphy_new_nm+0x16ea/0x19a0 [ 1034.985875][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1034.992150][T19550] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 1034.997551][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1035.003820][T19550] mac80211_hwsim_new_radio+0x20c/0x4b40 [ 1035.009459][T19550] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.014851][T19550] ? stack_depot_save_flags+0x3a/0x970 [ 1035.020333][T19550] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1035.026422][T19550] hwsim_new_radio_nl+0xed0/0x2290 [ 1035.031544][T19550] ? __pfx___nla_validate_parse+0x10/0x10 [ 1035.037271][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.042829][T19550] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1035.049164][T19550] genl_rcv_msg+0xb38/0xf00 [ 1035.053674][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.058718][T19550] ? __dev_queue_xmit+0x1780/0x3f60 [ 1035.063932][T19550] ? kasan_save_track+0x3f/0x80 [ 1035.068799][T19550] ? __kasan_slab_alloc+0x66/0x80 [ 1035.073849][T19550] ? __do_fast_syscall_32+0xb4/0x110 [ 1035.079149][T19550] ? __lock_acquire+0xad5/0xd80 [ 1035.084006][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.089558][T19550] netlink_rcv_skb+0x208/0x480 [ 1035.094346][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.099374][T19550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.104669][T19550] ? netlink_deliver_tap+0x2e/0x1b0 [ 1035.109868][T19550] genl_rcv+0x28/0x40 [ 1035.113889][T19550] netlink_unicast+0x7f8/0x9a0 [ 1035.118651][T19550] ? __pfx_netlink_unicast+0x10/0x10 [ 1035.123934][T19550] ? __virt_addr_valid+0x45f/0x530 [ 1035.129048][T19550] ? __phys_addr_symbol+0x2f/0x70 [ 1035.134098][T19550] ? __check_object_size+0x478/0x720 [ 1035.139388][T19550] netlink_sendmsg+0x8e8/0xce0 [ 1035.144180][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.149465][T19550] ? __import_iovec+0x585/0x830 [ 1035.154316][T19550] ? aa_sock_msg_perm+0x91/0x160 [ 1035.159266][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.164554][T19550] __sock_sendmsg+0x221/0x270 [ 1035.169238][T19550] ____sys_sendmsg+0x53c/0x870 [ 1035.174005][T19550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.179294][T19550] __sys_sendmsg+0x271/0x360 [ 1035.183882][T19550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.189004][T19550] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1035.195597][T19550] ? lockdep_hardirqs_on+0x9d/0x150 [ 1035.200826][T19550] __do_fast_syscall_32+0xb4/0x110 [ 1035.205962][T19550] ? exc_page_fault+0x599/0x8b0 [ 1035.210833][T19550] do_fast_syscall_32+0x34/0x80 [ 1035.215710][T19550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.222042][T19550] RIP: 0023:0xf7f22579 [ 1035.226108][T19550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1035.245718][T19550] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1035.254146][T19550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1035.262147][T19550] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.270113][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.278082][T19550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1035.286142][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.294137][T19550] [ 1035.297165][T19550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1035.304445][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.5.4050 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1035.316160][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1035.326219][T19550] Call Trace: [ 1035.329496][T19550] [ 1035.332427][T19550] dump_stack_lvl+0x241/0x360 [ 1035.337113][T19550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1035.342316][T19550] ? __pfx__printk+0x10/0x10 [ 1035.346912][T19550] ? vscnprintf+0x5d/0x90 [ 1035.351268][T19550] panic+0x349/0x880 [ 1035.355168][T19550] ? __warn+0x174/0x4d0 [ 1035.359323][T19550] ? __pfx_panic+0x10/0x10 [ 1035.363751][T19550] __warn+0x344/0x4d0 [ 1035.367734][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1035.372860][T19550] report_bug+0x2b3/0x500 [ 1035.377194][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1035.382303][T19550] ? cfg80211_dev_free+0x2ba/0x2d0 [ 1035.387414][T19550] ? cfg80211_dev_free+0x2bc/0x2d0 [ 1035.392538][T19550] handle_bug+0x89/0x170 [ 1035.396778][T19550] exc_invalid_op+0x1a/0x50 [ 1035.401286][T19550] asm_exc_invalid_op+0x1a/0x20 [ 1035.406141][T19550] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 1035.411859][T19550] Code: cc f6 49 8b be e0 08 00 00 e8 12 9d c0 f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 9c c0 f6 e8 07 16 64 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1035.431494][T19550] RSP: 0018:ffffc9000455ee00 EFLAGS: 00010093 [ 1035.437578][T19550] RAX: ffffffff8b5f6089 RBX: ffff88805a0e86a8 RCX: ffff888054275a00 [ 1035.445561][T19550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000455ece0 [ 1035.453532][T19550] RBP: 1ffffffff194ce98 R08: 0000000000000003 R09: fffff520008abd9c [ 1035.461502][T19550] R10: dffffc0000000000 R11: fffff520008abd9c R12: ffff88805a0e86b8 [ 1035.469474][T19550] R13: dffffc0000000000 R14: ffff88805a0e8000 R15: 0000000000000246 [ 1035.477448][T19550] ? cfg80211_dev_free+0x2b9/0x2d0 [ 1035.482583][T19550] ? device_release+0x66/0x1c0 [ 1035.487367][T19550] ? trace_kmalloc+0x1f/0xd0 [ 1035.491965][T19550] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1035.497431][T19550] device_release+0x99/0x1c0 [ 1035.502022][T19550] kobject_put+0x22f/0x480 [ 1035.506458][T19550] wiphy_new_nm+0x16ea/0x19a0 [ 1035.511142][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1035.517392][T19550] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 1035.522769][T19550] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1035.529045][T19550] mac80211_hwsim_new_radio+0x20c/0x4b40 [ 1035.534684][T19550] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.540074][T19550] ? stack_depot_save_flags+0x3a/0x970 [ 1035.545535][T19550] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1035.551608][T19550] hwsim_new_radio_nl+0xed0/0x2290 [ 1035.556727][T19550] ? __pfx___nla_validate_parse+0x10/0x10 [ 1035.562466][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.568022][T19550] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1035.574358][T19550] genl_rcv_msg+0xb38/0xf00 [ 1035.578870][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.583898][T19550] ? __dev_queue_xmit+0x1780/0x3f60 [ 1035.589111][T19550] ? kasan_save_track+0x3f/0x80 [ 1035.593963][T19550] ? __kasan_slab_alloc+0x66/0x80 [ 1035.599010][T19550] ? __do_fast_syscall_32+0xb4/0x110 [ 1035.604309][T19550] ? __lock_acquire+0xad5/0xd80 [ 1035.609163][T19550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.614715][T19550] netlink_rcv_skb+0x208/0x480 [ 1035.619483][T19550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.624513][T19550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.629807][T19550] ? netlink_deliver_tap+0x2e/0x1b0 [ 1035.635026][T19550] genl_rcv+0x28/0x40 [ 1035.639012][T19550] netlink_unicast+0x7f8/0x9a0 [ 1035.643776][T19550] ? __pfx_netlink_unicast+0x10/0x10 [ 1035.649061][T19550] ? __virt_addr_valid+0x45f/0x530 [ 1035.654173][T19550] ? __phys_addr_symbol+0x2f/0x70 [ 1035.659194][T19550] ? __check_object_size+0x478/0x720 [ 1035.664488][T19550] netlink_sendmsg+0x8e8/0xce0 [ 1035.669341][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.674645][T19550] ? __import_iovec+0x585/0x830 [ 1035.679508][T19550] ? aa_sock_msg_perm+0x91/0x160 [ 1035.684448][T19550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.689738][T19550] __sock_sendmsg+0x221/0x270 [ 1035.694419][T19550] ____sys_sendmsg+0x53c/0x870 [ 1035.699180][T19550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.704465][T19550] __sys_sendmsg+0x271/0x360 [ 1035.709067][T19550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.714205][T19550] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1035.720819][T19550] ? lockdep_hardirqs_on+0x9d/0x150 [ 1035.726030][T19550] __do_fast_syscall_32+0xb4/0x110 [ 1035.731163][T19550] ? exc_page_fault+0x599/0x8b0 [ 1035.736025][T19550] do_fast_syscall_32+0x34/0x80 [ 1035.740878][T19550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.747205][T19550] RIP: 0023:0xf7f22579 [ 1035.751273][T19550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1035.770882][T19550] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1035.779298][T19550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1035.787269][T19550] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.795238][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.803206][T19550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1035.811172][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.819252][T19550] [ 1035.822615][T19550] Kernel Offset: disabled [ 1035.826944][T19550] Rebooting in 86400 seconds..