last executing test programs:

18m30.017788247s ago: executing program 0 (id=1992):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34325852}})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x254a3}}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0)

18m27.740777824s ago: executing program 0 (id=1995):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000240000000000119078000000000000000000004e20010000000200000000000000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x270, 0x0, 0x19, 0x0, 0xf8, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x42}, @dev, 0xff000000, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xd8, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff, 0xff000000, 0xff000000], 0x6, 0x0, {0x8}}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x200000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002400)={'ip6tnl0\x00', 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x2b, 0x800, 0x1)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)

18m24.342101048s ago: executing program 0 (id=2005):
fcntl$lock(0xffffffffffffffff, 0xd, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0xffff, 0x0, 0x4, {0x6, @vbi={0x37c6, 0x8, 0x9, 0x30314247, [0x2, 0xfffffff4], [0xacd, 0x6], 0x2}}, 0x3})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x27, r6, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10)

18m23.11400977s ago: executing program 0 (id=2008):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f00000000c0)='./file0/file0\x00', 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000000000ef9c02"])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1d5081)
socket$kcm(0x21, 0x2, 0x2)
r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r9, 0x80045520, 0x0)

18m18.330537554s ago: executing program 0 (id=2020):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2)
sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007180000000000000029"], 0x30}, 0x0)

18m16.342262437s ago: executing program 0 (id=2029):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prlimit64(0x0, 0xd, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1})
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x5, 0x4e, 0x8, 0x2e1, 0x7, 0x101})
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x140, 0x10, 0x578, 0x3f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0xfffffffc, 0x0, 0x1}, {0xfffffffe, 0x0, 0xffffffff}, 0x0, 0x3f0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000001180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x10001, @local, 0x3}, @in6={0xa, 0x4e20, 0x4, @private1, 0x800}]}, &(0x7f0000000180)=0x10)

18m15.638326388s ago: executing program 32 (id=2029):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prlimit64(0x0, 0xd, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1})
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x5, 0x4e, 0x8, 0x2e1, 0x7, 0x101})
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x140, 0x10, 0x578, 0x3f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0xfffffffc, 0x0, 0x1}, {0xfffffffe, 0x0, 0xffffffff}, 0x0, 0x3f0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000001180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x10001, @local, 0x3}, @in6={0xa, 0x4e20, 0x4, @private1, 0x800}]}, &(0x7f0000000180)=0x10)

14m39.976791543s ago: executing program 2 (id=2744):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
syz_emit_ethernet(0x4e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0xd91d4a42db5b92d1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

14m39.055781465s ago: executing program 2 (id=2745):
fcntl$lock(0xffffffffffffffff, 0xd, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0xffff, 0x0, 0x4, {0x6, @vbi={0x37c6, 0x8, 0x9, 0x30314247, [0x2, 0xfffffff4], [0xacd, 0x6], 0x2}}, 0x3})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x27, r6, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10)

14m37.602009521s ago: executing program 2 (id=2750):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0xa0}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0))
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000580))
r8 = io_uring_setup(0x3905, &(0x7f0000000140)={0x0, 0x2, 0x0, 0xfffff7fc})
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0xff}}, 0x18)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000ff2505a1a440000102030109027900020121600e0904000001020d0000052406000105240003000d240f01f8ffffff1a0705008106241a7f000a05240101000c241bc0effcff03080900050c241b05000400ff051000070905810300020008030904010000020d00000904010102020d000009"], &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x2, 0x3, 0x8, 0x2}, 0xa4, &(0x7f00000003c0)={0x5, 0xf, 0xa4, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1b, 0x0, 0x0, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x98, 0x6, 0x4b, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "9ebbf51c86ab95a0e6b9bf0670f93195"}, @generic={0x76, 0x10, 0x0, "e5e73b7d359d1101a90e8d2bda38903de3f7de4b5060bf5c75f177c73b5b76b0c46cd3327630b91839da57c92aa8f480979ccdda5e4357f66aa807d750b42094adc11bf7d0c41b50b50aebbae1771086ad5e5a3126e9d732a0b5a149d0b01436cfc652991fb693d5336f3d07167b79ccad142b"}, @ptm_cap={0x3}]}, 0x2, [{0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "4c6a9cdda8950ceece789dd1497cb0df9574e656735cbf56a8e4e04c517921bef3a7a381f168656be72b5ee06ebb429d3f2a081cf964d50d14d42d20ebe51a28dc8d425f30bf0dae54f5dc"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c0a}}]})

14m30.469388557s ago: executing program 2 (id=2762):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
syz_emit_ethernet(0x4e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r7, 0xd91d4a42db5b92d1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2)

14m28.34438414s ago: executing program 2 (id=2767):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x40b8, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7040, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4010)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a539dd006000000000000020000000900020073797a32000000000900010073797a300080b0b35e800ff751103a8f08bf1d0000002c0004802800018007000100637400001c000280080001400000001308000240000000000500030001000000140000081100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8044)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r3, 0x0)
syz_io_uring_setup(0xa94, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, 0x0, &(0x7f00000005c0))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x2}}})
io_uring_enter(r0, 0x48e9, 0x3, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14m25.134454104s ago: executing program 2 (id=2771):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x11e}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r0=>0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x4000001)
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10, 0x800)
setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000300)=0xfac, 0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x28020480)
r4 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0)
flock(r4, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000002020104000000000000000000000006240002800c000280040001003a000000140001800800010000000000080002009cc39b50d888a501d39c0d278c643a79ecd02eb5f65234a994db675844c1122122bdadbd7742d18af8834e637c927119346bc7001fa018504163f1bda7465b32327aca7815ac656f708daa0000000000000000000000d9cc63e69ea9707608a3c824eb48ca215306e6f7f022880403791b183eadb984543533dbceb8ee9994e0921cb5e3601500fe368ef92a2768905a4a52f6d16ef52665d1615dae2580", @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4044041}, 0x40000)

14m9.356519532s ago: executing program 33 (id=2771):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x11e}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r0=>0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x4000001)
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10, 0x800)
setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000300)=0xfac, 0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x28020480)
r4 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0)
flock(r4, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000002020104000000000000000000000006240002800c000280040001003a000000140001800800010000000000080002009cc39b50d888a501d39c0d278c643a79ecd02eb5f65234a994db675844c1122122bdadbd7742d18af8834e637c927119346bc7001fa018504163f1bda7465b32327aca7815ac656f708daa0000000000000000000000d9cc63e69ea9707608a3c824eb48ca215306e6f7f022880403791b183eadb984543533dbceb8ee9994e0921cb5e3601500fe368ef92a2768905a4a52f6d16ef52665d1615dae2580", @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4044041}, 0x40000)

7m33.966893427s ago: executing program 1 (id=3895):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000001b00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x80100001, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c200193aa2592ecb25191a7a19ddbbc764dc00030800450000200000000000119078000000000000000000014e20000c907801000000"], 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c003f0026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
listen(r4, 0xcc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0)
listen(r0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000740), 0xfffffd9d)
socket$inet6(0xa, 0x3, 0xff)

7m32.073465653s ago: executing program 1 (id=3904):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xffffffa7, 0x4)

7m30.186006253s ago: executing program 1 (id=3913):
mkdir(&(0x7f0000002880)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x485, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup2(r1, r1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)

7m28.882197988s ago: executing program 1 (id=3916):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001740)='7', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[], 0x140}, 0xf5ff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}}], 0x2, 0x0)

7m28.804873623s ago: executing program 1 (id=3917):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x13a8, 0xffffffff, 0x0, 0x1278, 0x1140, 0xffffffff, 0xffffffff, 0x13a0, 0x13a0, 0x13a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10d8, 0x1118, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00', 0x3, {0x300000}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "233f4eeea0919e7ea3c95ba5ea1d183483c5e5039a621f0029e7d4780a67"}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffff00], 'veth1_virt_wifi\x00', 'pimreg\x00', {0xff}, {0xff}, 0x2f, 0x4, 0x7, 0x60}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x5, 0x5)
semget(0x1, 0x1, 0x302)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0x0, 0x0, 0x2c00], [0xff0000ff, 0x0, 0x0, 0xffffff00], 'ip6_vti0\x00', 'pimreg1\x00', {}, {}, 0x2c, 0x40, 0x1, 0x1}, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tos={{0x28}, {0x4, 0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)

7m27.703622519s ago: executing program 1 (id=3921):
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e40010000000000000004020013000100"/80], 0x50}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000004000000000000a"], 0xb8}}, 0x20004080)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

7m12.593985396s ago: executing program 34 (id=3921):
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e40010000000000000004020013000100"/80], 0x50}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000004000000000000a"], 0xb8}}, 0x20004080)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

2m57.596500486s ago: executing program 3 (id=4703):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000"])

2m56.549628358s ago: executing program 3 (id=4705):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r4 = timerfd_create(0x2, 0x400)
timerfd_settime(r4, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0))
getcwd(&(0x7f0000000080)=""/4096, 0x1000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="2bacda02002abe158c1b000000000000000400"/29, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
io_setup(0x4, &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

2m54.181044945s ago: executing program 3 (id=4710):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
read(0xffffffffffffffff, &(0x7f0000001a00)=""/177, 0xb1)
socket$rds(0x15, 0x5, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x19, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x2, 0x4, 0x3d8, 0x108, 0x108, 0x108, 0x2f0, 0x108, 0x2f0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff, 0x4, 0x0, {@empty, {[0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x5, 0x6, 0xfff9, 0x2, 0x3, 'syzkaller0\x00', 'gre0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x63}}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x31}, 0xff000000, 0xffffffff, 0x7, 0x2, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x4, 0x3, 0x54f, 0x1, 0x3, 0x1ff, 'veth1\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xe, {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428)
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

2m51.095340831s ago: executing program 3 (id=4717):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x4000}, {r0, 0xc0}], 0x2, &(0x7f0000000300), &(0x7f0000000340)={[0xe1]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x1, [{@multicast1, 0x4}, {@remote}, {@broadcast}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @rr={0x7, 0x3}]}}}}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0)
r5 = dup(r3)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})

2m49.974755551s ago: executing program 3 (id=4721):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x4000)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x82000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000380))
unshare(0x2040400)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100fcfffffffdffffff000000000000000000000000000000000000000000000000000000000000000000010000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008000000000000000000000000ed0f476deb822dcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000003000000000000080000000000000000ff030000000000000100000000000000"], 0xb8}}, 0x0)
socket$inet(0x2, 0x1, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, 0x0)

2m46.82594691s ago: executing program 3 (id=4731):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002040)={r1, 0x0, 0x20}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
symlinkat(0x0, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r8=>0x0})
syz_io_uring_setup(0x3fef, &(0x7f00000000c0)={0x0, 0x467f, 0x2000, 0x0, 0x1b8}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x0, &(0x7f00000001c0)=0x7fff, 0x0, 0x4)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0xb}, 0x1c)

2m46.388252856s ago: executing program 35 (id=4731):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002040)={r1, 0x0, 0x20}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
symlinkat(0x0, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r8=>0x0})
syz_io_uring_setup(0x3fef, &(0x7f00000000c0)={0x0, 0x467f, 0x2000, 0x0, 0x1b8}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x0, &(0x7f00000001c0)=0x7fff, 0x0, 0x4)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0xb}, 0x1c)

17.414339749s ago: executing program 8 (id=5184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24008000)

17.344967281s ago: executing program 8 (id=5185):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fcntl$setsig(r2, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100400008004526005c016700005d119078ac1e000100009b6dbd21e1a80bdc131f8900004e234e22004890780300000081000000cf24e32481831aec3d74ad335d981f9cead0ce9ab78a3c6e6346a8d16a6333239ed149bff2dd44dbfe35572fd292dc210000000000000000"], 0x6e)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0x1f, 0x0, &(0x7f0000001140))
r5 = dup(r1)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0)
setrlimit(0x1, &(0x7f0000000240)={0x6, 0x1})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e9ee680b168ec3419d3679a11d00000000000000", @ANYRES32=0x0, @ANYBLOB="0000080040000000000000000000000000ff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf090000000000005509010000000000958e9b0000000000bf00000080000000000200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setrlimit(0xe, &(0x7f0000000200)={0x7, 0x3})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="fd45010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)
socket$kcm(0x2, 0x7, 0x2)

16.083899509s ago: executing program 8 (id=5188):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0)
write$input_event(r1, &(0x7f00000005c0), 0x200005d8)
r2 = io_uring_setup(0x104b, &(0x7f0000000a80)={0x0, 0xfffffffe, 0x400, 0x1})
write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {0x7, 0x8, 0x5, 0x8}, 0x12, [0x7, 0x1ff, 0x623d, 0x5, 0x3, 0x3ff, 0x100, 0x10001, 0x1, 0xa1f6, 0x80, 0x4, 0xb, 0xfffffffc, 0x3, 0x1000, 0x7ff, 0x3ff, 0x2, 0x10000, 0x3, 0x9, 0x80000000, 0x1, 0x7, 0x3, 0xe5e1, 0xe, 0x756, 0x7, 0x8001, 0x2, 0x2, 0x16, 0x0, 0x7, 0x1, 0x917d178, 0x2a89, 0x6, 0x8, 0xfffffffc, 0x8001, 0x7ff, 0x2, 0x9, 0x7, 0x0, 0xe80, 0x7, 0x40, 0x493f, 0x4, 0x7, 0x3, 0x7, 0x9, 0x1, 0xf60, 0x6, 0x5, 0x8f3, 0x6, 0x5], [0xfffff16d, 0x0, 0x5, 0x7, 0xc84, 0x1, 0x3, 0x3, 0x7, 0x0, 0x8, 0x9, 0x6, 0x828, 0x0, 0x9, 0x4, 0x3, 0x9, 0x3, 0xa4a1, 0x1, 0x10, 0x3ff, 0x3, 0x5, 0x1, 0xf, 0x7, 0xf, 0x3, 0x9, 0x0, 0x800, 0x2, 0x3, 0x4, 0xffff, 0xc1ad, 0x8000, 0x57, 0x10000000, 0x9, 0x1, 0xffffffff, 0x61f3, 0x6431, 0x7, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x3776135e, 0x9, 0x3, 0x1, 0x7ed0, 0x3, 0x2, 0x4, 0x0, 0x6], [0x7, 0x0, 0x2, 0x80, 0xfffffffb, 0x4, 0x7, 0x6, 0xfffffffd, 0x5, 0x9, 0x80a1, 0x8, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, 0xec6, 0x6, 0x44, 0x2, 0xffffffc7, 0xd, 0x5, 0x3, 0x7, 0xce, 0xc920, 0x6, 0x23f, 0xa, 0x8001, 0x0, 0x3, 0x4, 0x3d1, 0x1c57216a, 0x3, 0xf961, 0x1, 0x4, 0x5, 0x4, 0xe, 0x5, 0xf, 0x1, 0x3, 0x40, 0x4, 0x5ac805b9, 0xc0a8, 0x0, 0x5, 0x8cd, 0x10, 0x2, 0x8000, 0x5, 0x1, 0x10000, 0xa3], [0x2, 0x0, 0x89, 0x9, 0xf, 0x5, 0x4, 0x5, 0x5, 0x1, 0x3, 0x40, 0x7, 0x0, 0xd, 0x81, 0x100, 0xc, 0x81, 0x37b39140, 0x9, 0x5, 0x2, 0x5c3, 0x5be39b06, 0x8ec, 0x1, 0x9671, 0x8, 0xfffffff9, 0x10000, 0x10, 0x2, 0xa, 0x800, 0x0, 0xe, 0x4, 0x1, 0x3, 0x1, 0x5, 0xffffffff, 0x60000000, 0x2, 0x2, 0x3ff, 0x8, 0x101, 0x0, 0x40000000, 0x2, 0x200020, 0x5, 0x7, 0x217f, 0x5, 0x8001, 0x3, 0x3, 0xfffffff9, 0x7, 0x80000000, 0x1]}, 0x45c)
close(r2)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27)
socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000080)={0x4, 0xbc6, 'h4%', 0xc})

8.431349691s ago: executing program 7 (id=5214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180040001f30153b002000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.226625399s ago: executing program 7 (id=5216):
mkdir(0x0, 0x65)
socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000380)=@ethtool_cmd={0x32, 0x0, 0x8000, 0xfff6, 0xfc, 0x0, 0x1, 0xf, 0x6, 0x9f, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x6]}})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000300)={0x80f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffffff000, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCGETA(r3, 0x80047437, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfff}, r1, 0x4000000}}, 0x48)
r5 = dup2(r0, r0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, r1, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback, 0xd921}}}, 0xa0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000010140)={0x8, 0xc00000, 0x1, 0xfff, 0x95, 0x163f})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
write$ppp(r6, &(0x7f00000001c0)='8\x00/', 0x3)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x181)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x2, &(0x7f0000000080)=@assoc_value, &(0x7f0000000000)=0x8)

7.903763352s ago: executing program 5 (id=5217):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

7.854125508s ago: executing program 4 (id=5218):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff}, 0x20)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c880, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
lseek(r5, 0x8, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c0000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.691262694s ago: executing program 7 (id=5220):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000860000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="d9e2012e6e305fbe11966b8ff2ea5031752217fca52598e54872b61b8397168d6af7944b4d6178713490c45989e93d4b82de42fa0b09063644046f0df202aadbbac48b0415ace70a0000000025e32badcd639fff9bc7c378297cdd5160483f06eac22d9ff121847a3a1163219baaea015d291929d49ac11c784902707d39f20500f4cc3578f487a465d9a5dd63aa8723fa77ab529c31d9f212b04ebd1e424fff", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)
sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)

7.260226017s ago: executing program 5 (id=5221):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
ftruncate(r0, 0x7fffffffffffffff)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000021c0), 0x400302, 0x0)
r2 = syz_io_uring_setup(0x5512, &(0x7f00000020c0)={0x0, 0x7f57, 0x1000, 0x1, 0x349, 0x0, r1}, &(0x7f0000002140), &(0x7f0000002180))
r3 = syz_io_uring_setup(0x468a, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0xc6, r9}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r10, r8, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r11=>0x0})
r12 = userfaultfd(0x801)
ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r12, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r13 = socket(0x10, 0x2, 0x0)
write(r13, &(0x7f0000000000)="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", 0xfc)
r14 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)

5.997639081s ago: executing program 5 (id=5223):
getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1, 0x0, 0x300}}], 0x8, 0x34000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

5.832822101s ago: executing program 4 (id=5224):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x2}, 0x18)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
fcntl$setsig(r1, 0xa, 0x21)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
r3 = creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040)
syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x83, 0x34b, 0x0, r3}, &(0x7f0000000500), &(0x7f0000000600))

5.797147007s ago: executing program 7 (id=5225):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000880)="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"})

4.589001752s ago: executing program 6 (id=5228):
ioperm(0x0, 0x1, 0x1bf4)
chroot(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c0017000500d8"], 0x38}}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f00000001c0)=0x3)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002a000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000001540)={0x0, 0xfffffdef, 0x0}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r6, 0x4b35, 0x3c7)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'})

4.280795663s ago: executing program 6 (id=5229):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80010000, 0x0, @void, @value, @void, @value}, 0x48)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)

4.23027791s ago: executing program 7 (id=5230):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r4, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1, r7, &(0x7f0000000100)="02", 0xffffff43}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x0, r6, 0x0, 0x0, 0x2085, 0x0, 0x2}])
r8 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}})
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x200600, 0x0)
kcmp(r2, r8, 0x5, r10, r1)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240), 0xf)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0)
r13 = fsmount(r12, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r11, r13, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18)
socket(0x2000000015, 0x80005, 0x0)

4.229761104s ago: executing program 8 (id=5231):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

4.159210734s ago: executing program 6 (id=5232):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1839000002000000000000000000000018400000fdffffff000000000000000042aa2000f0ffffff18000000e60800000000fe916331c463"], &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000380))
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)="aeda"})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004c00078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="6480", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0xb)
r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETSF(r8, 0x80004506, 0x0)

3.982278402s ago: executing program 4 (id=5233):
r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000201400020070696d367265673000000000000000000900010073"], 0x40}, 0x1, 0xf00}, 0x0)

3.691212193s ago: executing program 4 (id=5234):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@deltclass={0xbc, 0x29, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0x3}, {0xd, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x25}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0xfffffffd, 0xa0}}, @TCA_HFSC_USC={0x10, 0x3, {0xb0d8, 0x4, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xffff8f62, 0x575a}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xe, 0xfffffff2}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x9, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffff0, 0x9}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x44095)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44e200, 0xd0)
mknodat(r2, &(0x7f0000000000)='./file1\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x46)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x20, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r8 = dup2(r7, r7)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESETUP(r8, 0x1276, 0x0)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r9, 0x0, 0xb, &(0x7f0000000480)='nodecompose'}, 0xffffff8a)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="ebff7f00001000000c000000c8000000b8e888370b9fb79c71ca1ef4ba40a047e1fd8689bcb568ebdd61090406b87bdf5a70c15cf90d325a84e8bb2ac45003c7509c588279a8c0598e389ff613044d03749fbea42e245200c606783bcc4721b3e9ac1bc24c3d88bf1ad6cbd730f8b140aa9c3536f2a533a8616744faf9d2f0bb7e8018983974e3ea03dcd06e4a6e721a4edca75d29d561cce772e244caa4b4a1ac882dfb04b6a354443ea67580b9aa", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x84, r10}, 0x38)

2.91492412s ago: executing program 8 (id=5235):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x78, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0xc054)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xaa55, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

2.722301305s ago: executing program 4 (id=5236):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x40b8, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7040, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r2, 0x0)
syz_io_uring_setup(0xa94, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, 0x0, &(0x7f00000005c0))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x2}}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}]}, 0x24}}, 0x0)
io_uring_enter(r0, 0x48e9, 0x3, 0x0, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

2.411820371s ago: executing program 8 (id=5237):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rtc(0xffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

2.285722544s ago: executing program 6 (id=5238):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0)

1.009953183s ago: executing program 6 (id=5239):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x44)
read$dsp(r1, &(0x7f0000001300)=""/4096, 0x1000)
write$dsp(r0, &(0x7f0000000140)="a5", 0x1) (fail_nth: 3)

786.211809ms ago: executing program 5 (id=5240):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119388f76a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x8e, &(0x7f0000000140)}, 0x9)

445.922526ms ago: executing program 5 (id=5241):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400000000000000, &(0x7f0000000580)={[], [{@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@obj_role={'obj_role', 0x3d, '},::)/%\xf5!'}}]})

354.63087ms ago: executing program 4 (id=5242):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x4})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x8100000)

166.156522ms ago: executing program 5 (id=5243):
r0 = socket(0x1e, 0x4, 0x0) (async)
r1 = socket(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000080)=""/38, 0x26}], 0x2, 0x26, 0x3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x59, 0xffff9cf9, {0x8, 0xfffd, 0x5, 0x1000, 0xa, 0x166, 0x0, 0xff, 0xba, 0x1, 0x200, 0x2, 0x8000, 0x9, "0fb212b00ee4d654775c28bb3d276d330a5b6de68fcc0137e68b050553e46ed9"}})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x9, 0x7, 0x4, 0xb}, 0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100), 0x0) (async)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async)
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)

134.324083ms ago: executing program 6 (id=5244):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f13, 0x12)
get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x80, &(0x7f0000ffb000/0x2000)=nil, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f0001030000000000000000010100800c0006"], 0x114}], 0x1, 0x0, 0x0, 0x400d4}, 0x0)

0s ago: executing program 7 (id=5245):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

kernel console output (not intermixed with test programs):

:6789 connect error
[ 1606.971368][T22218] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4579'.
[ 1607.028382][T22205] ceph: No mds server is up or the cluster is laggy
[ 1610.189610][T22241] pim6reg: entered allmulticast mode
[ 1611.004913][   T25] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1611.423527][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'.
[ 1612.123821][   T25] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1612.132108][   T25] usb 7-1: can't read configurations, error -61
[ 1613.621548][   T25] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1615.321325][    T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1615.361465][T22278] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1615.711867][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1615.723708][    T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1615.734780][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.792059][    T9] usb 5-1: Product: syz
[ 1616.605907][    T9] usb 5-1: Manufacturer: syz
[ 1616.611371][    T9] usb 5-1: SerialNumber: syz
[ 1616.626427][    T9] usb 5-1: config 0 descriptor??
[ 1616.676730][    T9] usb 5-1: can't set config #0, error -71
[ 1616.703262][    T9] usb 5-1: USB disconnect, device number 64
[ 1617.079665][ T9728] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1619.386222][ T9728] usb 4-1: Using ep0 maxpacket: 16
[ 1619.398402][ T9728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1620.137189][ T9728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1620.148224][ T9728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1620.158153][ T9728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1620.168000][ T9728] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1620.570986][ T9728] usb 4-1: string descriptor 0 read error: -71
[ 1620.577382][ T9728] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1620.590957][ T9728] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1620.986930][ T9728] usb 4-1: config 0 descriptor??
[ 1621.013222][ T9728] usb 4-1: can't set config #0, error -71
[ 1621.749126][ T9728] usb 4-1: USB disconnect, device number 96
[ 1623.581703][T22329] kAFS: unparsable volume name
[ 1624.603488][T22335] fuse: Invalid rootmode
[ 1624.845358][ T9728] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1624.899667][T22337] netlink: 356 bytes leftover after parsing attributes in process `syz.5.4613'.
[ 1624.987347][T22339] FAULT_INJECTION: forcing a failure.
[ 1624.987347][T22339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1625.020647][T22339] CPU: 0 UID: 0 PID: 22339 Comm: syz.3.4612 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1625.031493][T22339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1625.041610][T22339] Call Trace:
[ 1625.044944][T22339]  <TASK>
[ 1625.047911][T22339]  dump_stack_lvl+0x241/0x360
[ 1625.052643][T22339]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1625.057892][T22339]  ? __pfx__printk+0x10/0x10
[ 1625.062535][T22339]  ? snprintf+0xda/0x120
[ 1625.066838][T22339]  should_fail_ex+0x3b0/0x4e0
[ 1625.071561][T22339]  _copy_to_user+0x31/0xb0
[ 1625.076004][T22339]  simple_read_from_buffer+0xca/0x150
[ 1625.081404][T22339]  proc_fail_nth_read+0x1e9/0x250
[ 1625.086454][T22339]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1625.092028][T22339]  ? rw_verify_area+0x55e/0x6f0
[ 1625.096893][T22339]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1625.102457][T22339]  vfs_read+0x1fc/0xb70
[ 1625.106637][T22339]  ? __pfx___mutex_lock+0x10/0x10
[ 1625.111687][T22339]  ? __pfx_vfs_read+0x10/0x10
[ 1625.116386][T22339]  ? __fget_files+0x2a/0x410
[ 1625.121002][T22339]  ? __fget_files+0x395/0x410
[ 1625.125692][T22339]  ? __fget_files+0x2a/0x410
[ 1625.130302][T22339]  ksys_read+0x18f/0x2b0
[ 1625.134567][T22339]  ? __pfx_ksys_read+0x10/0x10
[ 1625.139348][T22339]  ? do_syscall_64+0x100/0x230
[ 1625.144133][T22339]  ? do_syscall_64+0xb6/0x230
[ 1625.148833][T22339]  do_syscall_64+0xf3/0x230
[ 1625.153444][T22339]  ? clear_bhb_loop+0x35/0x90
[ 1625.158147][T22339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1625.164064][T22339] RIP: 0033:0x7f43bb58473c
[ 1625.169006][T22339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1625.188626][T22339] RSP: 002b:00007f43bc3c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1625.197146][T22339] RAX: ffffffffffffffda RBX: 00007f43bb775fa0 RCX: 00007f43bb58473c
[ 1625.205146][T22339] RDX: 000000000000000f RSI: 00007f43bc3c20a0 RDI: 0000000000000005
[ 1625.213142][T22339] RBP: 00007f43bc3c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1625.221142][T22339] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001
[ 1625.229336][T22339] R13: 0000000000000000 R14: 00007f43bb775fa0 R15: 00007ffc6ad653a8
[ 1625.237336][T22339]  </TASK>
[ 1625.259998][ T9728] usb 7-1: Using ep0 maxpacket: 8
[ 1625.286393][ T9728] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[ 1625.309677][ T9728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.343838][   T29] audit: type=1326 audit(1736283417.219:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.4.4606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95af385d29 code=0x0
[ 1625.392904][ T9728] usb 7-1: Product: syz
[ 1625.422584][ T9728] usb 7-1: Manufacturer: syz
[ 1625.441319][ T9728] usb 7-1: SerialNumber: syz
[ 1625.481205][ T9728] usb 7-1: config 0 descriptor??
[ 1625.491699][ T9728] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1625.499316][ T9728] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1625.508781][ T9728] gspca_main: jeilinj-2.14.0 probing 0979:0270
[ 1626.166963][   T25] usb 7-1: USB disconnect, device number 34
[ 1626.280169][  T973] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[ 1626.424831][  T973] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1626.433286][  T973] usb 5-1: config 0 has no interface number 0
[ 1626.439447][  T973] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[ 1626.458809][  T973] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1626.470040][    T9] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[ 1626.487088][  T973] usb 5-1: config 0 interface 51 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[ 1626.499807][  T973] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x83 has invalid maxpacket 35863, setting to 64
[ 1626.510959][  T973] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1626.520935][  T973] usb 5-1: config 0 interface 51 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1626.536342][  T973] usb 5-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice= 3.0b
[ 1626.545589][  T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.553797][  T973] usb 5-1: Product: syz
[ 1626.558242][  T973] usb 5-1: Manufacturer: syz
[ 1626.562875][  T973] usb 5-1: SerialNumber: syz
[ 1626.571869][  T973] usb 5-1: config 0 descriptor??
[ 1626.578041][T22346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1626.585507][T22346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1626.645069][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1626.657191][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00
[ 1626.667764][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.678139][    T9] usb 4-1: config 0 descriptor??
[ 1626.684247][T22354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1626.885676][    T9] usbhid 4-1:0.0: can't add hid device: -71
[ 1627.055956][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1627.670539][    T9] usb 4-1: USB disconnect, device number 97
[ 1627.877783][  T973] iowarrior 5-1:0.51: no interrupt-in endpoint found
[ 1627.894464][  T973] usb 5-1: USB disconnect, device number 65
[ 1632.858735][T22396] sctp: [Deprecated]: syz.6.4629 (pid 22396) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1632.858735][T22396] Use struct sctp_sack_info instead
[ 1632.947644][T22396] input: syz1 as /devices/virtual/input/input41
[ 1633.162448][T22406] [U] 
[ 1633.165991][T22406] [U] K{�
[ 1633.169278][T22406] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[ 1633.199411][T22406] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[ 1633.260813][T22406] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[ 1633.362692][T22406] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�	�ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[ 1633.398740][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1633.547422][T22406] [U] 	+�W�G?]��'A:	��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[ 1634.444577][T22406] [U] �T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$	�.�7Yӱ�2�
[ 1634.716846][T22406] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[ 1634.735860][T22406] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[ 1634.959571][T22406] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`�
[ 1635.456048][T22432] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4638'.
[ 1638.763790][    T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1646.662859][ T5909] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1646.927435][T22541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1646.952935][T22541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1646.985610][T22541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1647.031252][T22541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1647.065335][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1647.074368][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1647.081993][ T5909] usb 5-1: can't read configurations, error -71
[ 1647.320713][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1647.453823][    T9] usb 7-1: device descriptor read/64, error -71
[ 1647.682779][    T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1647.815807][    T9] usb 7-1: device descriptor read/64, error -71
[ 1647.923774][    T9] usb usb7-port1: attempt power cycle
[ 1649.359604][    T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1649.452531][T22568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'.
[ 1649.462075][T22568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'.
[ 1649.474423][    T9] usb 7-1: device descriptor read/8, error -71
[ 1649.728052][    T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1649.751764][    T9] usb 7-1: device descriptor read/8, error -71
[ 1649.861038][T22568] macvlan1: entered promiscuous mode
[ 1649.880202][    T9] usb usb7-port1: unable to enumerate USB device
[ 1650.142329][T22568] macvlan1: left promiscuous mode
[ 1650.930862][T22590] /dev/nullb0: Can't open blockdev
[ 1652.592125][T22606] FAULT_INJECTION: forcing a failure.
[ 1652.592125][T22606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1652.900129][T22606] CPU: 1 UID: 0 PID: 22606 Comm: syz.7.4691 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1652.910968][T22606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1652.921067][T22606] Call Trace:
[ 1652.924382][T22606]  <TASK>
[ 1652.927361][T22606]  dump_stack_lvl+0x241/0x360
[ 1652.932102][T22606]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1652.937347][T22606]  ? __pfx__printk+0x10/0x10
[ 1652.941960][T22606]  ? __pfx_lock_release+0x10/0x10
[ 1652.947032][T22606]  should_fail_ex+0x3b0/0x4e0
[ 1652.951740][T22606]  _copy_from_iter+0x1e9/0x1c20
[ 1652.956645][T22606]  ? __virt_addr_valid+0x183/0x530
[ 1652.961807][T22606]  ? __alloc_skb+0x28f/0x440
[ 1652.966510][T22606]  ? __pfx__copy_from_iter+0x10/0x10
[ 1652.971819][T22606]  ? __virt_addr_valid+0x183/0x530
[ 1652.976986][T22606]  ? __virt_addr_valid+0x183/0x530
[ 1652.982128][T22606]  ? __virt_addr_valid+0x45f/0x530
[ 1652.987256][T22606]  ? __phys_addr_symbol+0x2f/0x70
[ 1652.992332][T22606]  ? __check_object_size+0x47a/0x730
[ 1652.997643][T22606]  netlink_sendmsg+0x73d/0xcb0
[ 1653.002432][T22606]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1653.007743][T22606]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1653.013052][T22606]  __sock_sendmsg+0x221/0x270
[ 1653.017767][T22606]  ____sys_sendmsg+0x52a/0x7e0
[ 1653.022560][T22606]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1653.027862][T22606]  ? __fget_files+0x2a/0x410
[ 1653.032560][T22606]  ? __fget_files+0x2a/0x410
[ 1653.037170][T22606]  __sys_sendmsg+0x269/0x350
[ 1653.041775][T22606]  ? __pfx_lock_release+0x10/0x10
[ 1653.046820][T22606]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1653.051957][T22606]  ? __pfx_vfs_write+0x10/0x10
[ 1653.056765][T22606]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1653.063108][T22606]  ? do_syscall_64+0x100/0x230
[ 1653.067896][T22606]  ? do_syscall_64+0xb6/0x230
[ 1653.072595][T22606]  do_syscall_64+0xf3/0x230
[ 1653.077122][T22606]  ? clear_bhb_loop+0x35/0x90
[ 1653.081839][T22606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.087755][T22606] RIP: 0033:0x7ffa8bb85d29
[ 1653.092181][T22606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1653.111811][T22606] RSP: 002b:00007ffa8ca84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1653.120285][T22606] RAX: ffffffffffffffda RBX: 00007ffa8bd76080 RCX: 00007ffa8bb85d29
[ 1653.128278][T22606] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004
[ 1653.136262][T22606] RBP: 00007ffa8ca84090 R08: 0000000000000000 R09: 0000000000000000
[ 1653.144244][T22606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1653.152574][T22606] R13: 0000000000000000 R14: 00007ffa8bd76080 R15: 00007ffd1bfd5ea8
[ 1653.160574][T22606]  </TASK>
[ 1653.163694][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1653.240094][T10569] libceph: connect (1)[c::]:6789 error -101
[ 1653.246163][T10569] libceph: mon0 (1)[c::]:6789 connect error
[ 1653.367291][T22619] FAULT_INJECTION: forcing a failure.
[ 1653.367291][T22619] name failslab, interval 1, probability 0, space 0, times 0
[ 1653.380423][T22619] CPU: 0 UID: 0 PID: 22619 Comm: syz.7.4694 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1653.391244][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1653.401331][T22619] Call Trace:
[ 1653.404618][T22619]  <TASK>
[ 1653.407643][T22619]  dump_stack_lvl+0x241/0x360
[ 1653.412352][T22619]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1653.417559][T22619]  ? __pfx__printk+0x10/0x10
[ 1653.422159][T22619]  ? __kmalloc_cache_noprof+0x48/0x390
[ 1653.427622][T22619]  ? __pfx___might_resched+0x10/0x10
[ 1653.432946][T22619]  should_fail_ex+0x3b0/0x4e0
[ 1653.437646][T22619]  should_failslab+0xac/0x100
[ 1653.442351][T22619]  __kmalloc_cache_noprof+0x70/0x390
[ 1653.447648][T22619]  ? __se_sys_mount+0x15a/0x3c0
[ 1653.452559][T22619]  ? memdup_user+0x9f/0xc0
[ 1653.456992][T22619]  __se_sys_mount+0x15a/0x3c0
[ 1653.461685][T22619]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1653.467686][T22619]  ? __pfx___se_sys_mount+0x10/0x10
[ 1653.472893][T22619]  ? do_syscall_64+0x100/0x230
[ 1653.477687][T22619]  ? __x64_sys_mount+0x20/0xc0
[ 1653.482465][T22619]  do_syscall_64+0xf3/0x230
[ 1653.486987][T22619]  ? clear_bhb_loop+0x35/0x90
[ 1653.491683][T22619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.497601][T22619] RIP: 0033:0x7ffa8bb85d29
[ 1653.502031][T22619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1653.521669][T22619] RSP: 002b:00007ffa8ca84038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1653.530108][T22619] RAX: ffffffffffffffda RBX: 00007ffa8bd76080 RCX: 00007ffa8bb85d29
[ 1653.538099][T22619] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000
[ 1653.546098][T22619] RBP: 00007ffa8ca84090 R08: 0000000020000080 R09: 0000000000000000
[ 1653.554171][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1653.562152][T22619] R13: 0000000000000000 R14: 00007ffa8bd76080 R15: 00007ffd1bfd5ea8
[ 1653.570154][T22619]  </TASK>
[ 1654.058162][T10569] libceph: connect (1)[c::]:6789 error -101
[ 1654.069570][T10569] libceph: mon0 (1)[c::]:6789 connect error
[ 1654.245293][T22611] ceph: No mds server is up or the cluster is laggy
[ 1658.022323][T22352] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1658.270142][T22352] usb 7-1: Using ep0 maxpacket: 16
[ 1658.277933][T22352] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.372614][T22352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1658.423952][T22352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1658.484978][T22352] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1658.561257][T22352] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1658.689781][T22352] usb 7-1: string descriptor 0 read error: -71
[ 1658.697096][T22352] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1658.763295][T22352] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1659.147989][T22352] usb 7-1: config 0 descriptor??
[ 1659.472570][T22352] usb 7-1: can't set config #0, error -71
[ 1659.481428][T22352] usb 7-1: USB disconnect, device number 39
[ 1660.544789][T22352] libceph: connect (1)[c::]:6789 error -101
[ 1660.730583][T22670] hub 6-0:1.0: USB hub found
[ 1660.737348][T22670] hub 6-0:1.0: 1 port detected
[ 1661.036284][T22670] /dev/sg0: Can't lookup blockdev
[ 1661.320330][T22352] libceph: mon0 (1)[c::]:6789 connect error
[ 1661.534561][T22669] binder: 22667:22669 ioctl c0306201 20000040 returned -14
[ 1661.586433][T22352] libceph: connect (1)[c::]:6789 error -101
[ 1661.592589][T22352] libceph: mon0 (1)[c::]:6789 connect error
[ 1662.262054][T22660] ceph: No mds server is up or the cluster is laggy
[ 1662.281738][T22352] libceph: connect (1)[c::]:6789 error -101
[ 1662.288651][T22352] libceph: mon0 (1)[c::]:6789 connect error
[ 1663.747850][T22689] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4711'.
[ 1663.908736][T22687] bond0: entered allmulticast mode
[ 1663.914883][T22687] rose0: entered allmulticast mode
[ 1664.909529][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4718'.
[ 1667.583202][T22732] pim6reg: entered allmulticast mode
[ 1667.771942][T22741] netlink: 352 bytes leftover after parsing attributes in process `syz.6.4725'.
[ 1668.984945][T22764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1669.070861][T22739] ceph: No mds server is up or the cluster is laggy
[ 1670.899239][T22798] overlay: Unknown parameter '/'
[ 1671.958526][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1672.029163][T22819] ebtables: ebtables: counters copy to user failed while replacing table
[ 1672.085322][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1672.125644][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1672.141251][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1672.149785][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1672.157344][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1672.369431][T22811] gre0 speed is unknown, defaulting to 1000
[ 1673.769629][ T9728] libceph: connect (1)[c::]:6789 error -101
[ 1673.778650][ T5840] Bluetooth: hci5: sending frame failed (-49)
[ 1673.787521][T21308] Bluetooth: hci5: Opcode 0x1003 failed: -49
[ 1673.795331][ T9728] libceph: mon0 (1)[c::]:6789 connect error
[ 1673.963726][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'.
[ 1674.008980][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4748'.
[ 1674.059955][ T9728] libceph: connect (1)[c::]:6789 error -101
[ 1674.067371][ T9728] libceph: mon0 (1)[c::]:6789 connect error
[ 1674.126148][T21308] Bluetooth: hci0: command tx timeout
[ 1674.274479][T22811] chnl_net:caif_netlink_parms(): no params data found
[ 1674.482611][T22834] ceph: No mds server is up or the cluster is laggy
[ 1674.518765][T22811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1674.526031][T22811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1674.676976][  T973] libceph: connect (1)[c::]:6789 error -101
[ 1674.679356][T22811] bridge_slave_0: entered allmulticast mode
[ 1674.683196][  T973] libceph: mon0 (1)[c::]:6789 connect error
[ 1674.691178][T22811] bridge_slave_0: entered promiscuous mode
[ 1674.704299][T22811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1674.723711][T22811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1675.572156][T22811] bridge_slave_1: entered allmulticast mode
[ 1675.579770][T22811] bridge_slave_1: entered promiscuous mode
[ 1675.885091][T22811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1675.897972][T22811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1676.080326][T22811] team0: Port device team_slave_0 added
[ 1676.118093][T21308] Bluetooth: hci0: command tx timeout
[ 1676.932421][T22811] team0: Port device team_slave_1 added
[ 1677.450380][T22811] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1677.470170][T22811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1677.539440][T22811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1677.553936][T22811] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1677.564090][T22811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1677.634066][T22891] nbd: nbd0 already in use
[ 1677.657525][T22811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1678.663467][T21308] Bluetooth: hci0: command tx timeout
[ 1678.745556][T22811] hsr_slave_0: entered promiscuous mode
[ 1678.757594][T22811] hsr_slave_1: entered promiscuous mode
[ 1678.789638][T22811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1678.797846][   T29] audit: type=1326 audit(1736283473.320:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1678.834217][T22811] Cannot create hsr debugfs directory
[ 1678.837571][   T29] audit: type=1326 audit(1736283473.320:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1678.865047][   T29] audit: type=1326 audit(1736283473.320:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.494059][   T29] audit: type=1326 audit(1736283473.320:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.583812][   T29] audit: type=1326 audit(1736283473.330:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.623141][   T29] audit: type=1326 audit(1736283473.330:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.757331][   T29] audit: type=1326 audit(1736283473.330:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.848027][   T29] audit: type=1326 audit(1736283473.330:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.870598][   T29] audit: type=1326 audit(1736283473.330:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1679.903202][   T29] audit: type=1326 audit(1736283473.330:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22905 comm="syz.6.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1680.165200][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4765'.
[ 1680.530656][ T9728] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1680.606872][T21308] Bluetooth: hci0: command tx timeout
[ 1680.711195][ T9728] usb 7-1: Using ep0 maxpacket: 8
[ 1680.741201][ T9728] usb 7-1: config 36 has an invalid interface descriptor of length 2, skipping
[ 1680.776798][ T9728] usb 7-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 1680.816096][ T9728] usb 7-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea
[ 1680.848860][ T9728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.882609][ T9728] usb 7-1: Product: syz
[ 1680.896057][T22811] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1680.911334][ T9728] usb 7-1: Manufacturer: syz
[ 1680.916508][ T9728] usb 7-1: SerialNumber: syz
[ 1680.936878][T22811] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1681.143600][ T9728] usb 7-1: USB disconnect, device number 40
[ 1682.322380][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c669400: rx timeout, send abort
[ 1682.331490][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c66a400: rx timeout, send abort
[ 1682.340252][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c669400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1682.355455][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c66a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1682.869743][T22811] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1682.889850][T22811] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1683.020319][T22922] atomic_op ffff88807af53198 conn xmit_atomic 0000000000000000
[ 1683.244982][T22811] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1683.276760][T22811] 8021q: adding VLAN 0 to HW filter on device team0
[ 1683.289606][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1683.296757][ T9297] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1683.328735][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1683.335884][ T9297] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1683.373377][T22811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1685.660850][T22944] nbd: nbd0 already in use
[ 1685.776245][T22811] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1686.133444][T22953] sit2: entered promiscuous mode
[ 1686.152438][T22953] sit2: entered allmulticast mode
[ 1686.586446][T22964] bridge0: port 3(erspan0) entered blocking state
[ 1686.593492][T22964] bridge0: port 3(erspan0) entered disabled state
[ 1686.600386][T22964] erspan0: entered allmulticast mode
[ 1686.608723][T22964] erspan0: entered promiscuous mode
[ 1686.615677][T22964] bridge0: port 3(erspan0) entered blocking state
[ 1686.622393][T22964] bridge0: port 3(erspan0) entered forwarding state
[ 1686.649722][T22964] Bluetooth: MGMT ver 1.23
[ 1686.656451][T22964] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4777'.
[ 1688.177073][T22811] veth0_vlan: entered promiscuous mode
[ 1688.698923][T22811] veth1_vlan: entered promiscuous mode
[ 1688.752223][T22988] nbd: nbd0 already in use
[ 1688.759533][T22811] veth0_macvtap: entered promiscuous mode
[ 1688.789769][T22811] veth1_macvtap: entered promiscuous mode
[ 1688.823638][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1688.841469][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1688.866604][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1688.879047][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1688.908859][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1688.925945][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1688.959488][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1688.988978][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.017916][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1689.039659][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.050093][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1689.060694][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.070832][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1689.081731][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.096307][T22811] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1689.768716][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1689.792614][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.811501][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1689.838434][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.875817][T16189] IPVS: starting estimator thread 0...
[ 1689.887038][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1690.110762][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1690.174494][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1690.197613][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1690.234894][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1690.383413][T23006] hub 6-0:1.0: USB hub found
[ 1690.391032][T23006] hub 6-0:1.0: 1 port detected
[ 1690.955581][T22997] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1690.987665][T23005] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0
[ 1691.015227][T23005] binder: 23004:23005 ioctl 4018620d 20000040 returned -1
[ 1691.034686][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1691.122951][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1691.155151][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1691.177271][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1691.188739][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1691.198793][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1691.209795][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1691.221222][T22811] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1691.301053][T22811] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.307882][T23012] fuse: Invalid rootmode
[ 1691.314580][T22811] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.324174][T22811] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.342582][T22811] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.498117][T22352] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1691.628285][T15665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1691.669430][T22352] usb 7-1: Using ep0 maxpacket: 32
[ 1691.689077][T15665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1691.770210][T15675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1691.778152][T15675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.114264][T22352] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=e2.de
[ 1692.127202][T22352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.135933][T22352] usb 7-1: Product: syz
[ 1692.141421][T22352] usb 7-1: Manufacturer: syz
[ 1692.146842][T22352] usb 7-1: SerialNumber: syz
[ 1692.157288][T22352] usb 7-1: config 0 descriptor??
[ 1692.171182][T22352] CoreChips 7-1:0.0: probe with driver CoreChips failed with error -22
[ 1692.525144][T23030] xt_socket: unknown flags 0xc
[ 1694.530454][   T25] usb 7-1: USB disconnect, device number 41
[ 1695.395237][T23056] hub 6-0:1.0: USB hub found
[ 1695.400596][T23056] hub 6-0:1.0: 1 port detected
[ 1700.016780][T23092] FAULT_INJECTION: forcing a failure.
[ 1700.016780][T23092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1700.016817][T23092] CPU: 0 UID: 0 PID: 23092 Comm: syz.8.4816 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1700.016845][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1700.016859][T23092] Call Trace:
[ 1700.016873][T23092]  <TASK>
[ 1700.016884][T23092]  dump_stack_lvl+0x241/0x360
[ 1700.016924][T23092]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1700.016955][T23092]  ? __pfx__printk+0x10/0x10
[ 1700.016985][T23092]  ? __pfx_lock_release+0x10/0x10
[ 1700.017020][T23092]  should_fail_ex+0x3b0/0x4e0
[ 1700.017050][T23092]  _copy_from_user+0x2f/0xc0
[ 1700.017085][T23092]  input_event_from_user+0x1e2/0x4a0
[ 1700.017114][T23092]  ? __pfx_input_event_from_user+0x10/0x10
[ 1700.017142][T23092]  ? input_inject_event+0xd6/0x340
[ 1700.017177][T23092]  evdev_write+0x470/0x790
[ 1700.017221][T23092]  ? __pfx_evdev_write+0x10/0x10
[ 1700.017259][T23092]  ? bpf_lsm_file_permission+0x9/0x10
[ 1700.017291][T23092]  ? security_file_permission+0x74/0x280
[ 1700.017320][T23092]  ? rw_verify_area+0x1c3/0x6f0
[ 1700.017348][T23092]  ? __pfx_evdev_write+0x10/0x10
[ 1700.017394][T23092]  vfs_write+0x2a3/0xd30
[ 1700.017432][T23092]  ? __pfx_vfs_write+0x10/0x10
[ 1700.017466][T23092]  ? __fget_files+0x2a/0x410
[ 1700.017491][T23092]  ? __fget_files+0x395/0x410
[ 1700.017514][T23092]  ? __fget_files+0x2a/0x410
[ 1700.017548][T23092]  ksys_write+0x18f/0x2b0
[ 1700.017579][T23092]  ? __pfx_ksys_write+0x10/0x10
[ 1700.017609][T23092]  ? do_syscall_64+0x100/0x230
[ 1700.017648][T23092]  ? do_syscall_64+0xb6/0x230
[ 1700.017686][T23092]  do_syscall_64+0xf3/0x230
[ 1700.017720][T23092]  ? clear_bhb_loop+0x35/0x90
[ 1700.017747][T23092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1700.017781][T23092] RIP: 0033:0x7ff04d385d29
[ 1700.017803][T23092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1700.017824][T23092] RSP: 002b:00007ff04b1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1700.017853][T23092] RAX: ffffffffffffffda RBX: 00007ff04d575fa0 RCX: 00007ff04d385d29
[ 1700.017871][T23092] RDX: 00000000000012d8 RSI: 0000000020000040 RDI: 0000000000000003
[ 1700.017887][T23092] RBP: 00007ff04b1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1700.017905][T23092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1700.017920][T23092] R13: 0000000000000000 R14: 00007ff04d575fa0 R15: 00007ffddb0db058
[ 1700.017955][T23092]  </TASK>
[ 1701.413097][ T5877] kworker/0:4 (5877) used greatest stack depth: 18328 bytes left
[ 1701.501246][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1703.392753][T23116] nbd: nbd0 already in use
[ 1703.397961][T23118] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4825'.
[ 1704.964767][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1704.992181][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1705.019975][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1705.069768][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1705.078782][T10497] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1705.098827][T10497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1705.200989][T23138] hub 6-0:1.0: USB hub found
[ 1705.280619][T23138] hub 6-0:1.0: 1 port detected
[ 1705.306358][T23132] gre0 speed is unknown, defaulting to 1000
[ 1705.312077][ T9728] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1706.241922][ T9728] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1706.259879][ T9728] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1706.270323][ T9728] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1706.279457][ T9728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1706.300041][ T9728] usb 7-1: config 0 descriptor??
[ 1706.347235][T23146] FAULT_INJECTION: forcing a failure.
[ 1706.347235][T23146] name failslab, interval 1, probability 0, space 0, times 0
[ 1706.409106][T23146] CPU: 0 UID: 0 PID: 23146 Comm: syz.7.4835 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1706.420036][T23146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1706.430236][T23146] Call Trace:
[ 1706.433531][T23146]  <TASK>
[ 1706.436474][T23146]  dump_stack_lvl+0x241/0x360
[ 1706.441182][T23146]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1706.446402][T23146]  ? __pfx__printk+0x10/0x10
[ 1706.451019][T23146]  ? fs_reclaim_acquire+0x93/0x130
[ 1706.456153][T23146]  ? __pfx___might_resched+0x10/0x10
[ 1706.461466][T23146]  should_fail_ex+0x3b0/0x4e0
[ 1706.466159][T23146]  should_failslab+0xac/0x100
[ 1706.470864][T23146]  __kmalloc_noprof+0xdd/0x4c0
[ 1706.475643][T23146]  ? kstrtouint_from_user+0x128/0x190
[ 1706.481034][T23146]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1706.486784][T23146]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1706.492372][T23146]  tomoyo_path_number_perm+0x236/0x860
[ 1706.497850][T23146]  ? rcu_read_lock_any_held+0xb7/0x160
[ 1706.503348][T23146]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1706.509272][T23146]  ? tomoyo_path_number_perm+0x206/0x860
[ 1706.514923][T23146]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1706.520586][T23146]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1706.526593][T23146]  ? sb_end_write+0xe9/0x1c0
[ 1706.531297][T23146]  ? vfs_write+0x730/0xd30
[ 1706.535770][T23146]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1706.541791][T23146]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1706.548137][T23146]  security_file_ioctl+0xc6/0x2a0
[ 1706.553300][T23146]  __se_sys_ioctl+0x46/0x170
[ 1706.557958][T23146]  do_syscall_64+0xf3/0x230
[ 1706.562679][T23146]  ? clear_bhb_loop+0x35/0x90
[ 1706.567386][T23146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.573311][T23146] RIP: 0033:0x7ffa8bb85d29
[ 1706.577744][T23146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1706.597479][T23146] RSP: 002b:00007ffa8caa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1706.605925][T23146] RAX: ffffffffffffffda RBX: 00007ffa8bd75fa0 RCX: 00007ffa8bb85d29
[ 1706.613910][T23146] RDX: 0000000020000d80 RSI: 0000000000004c0a RDI: 0000000000000003
[ 1706.621926][T23146] RBP: 00007ffa8caa5090 R08: 0000000000000000 R09: 0000000000000000
[ 1706.629924][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1706.637921][T23146] R13: 0000000000000000 R14: 00007ffa8bd75fa0 R15: 00007ffd1bfd5ea8
[ 1706.645943][T23146]  </TASK>
[ 1706.679580][T23146] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1706.813700][ T9728] usbhid 7-1:0.0: can't add hid device: -71
[ 1706.819790][ T9728] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1706.856337][ T9728] usb 7-1: USB disconnect, device number 42
[ 1707.189151][T21308] Bluetooth: hci4: command tx timeout
[ 1707.613471][ T9728] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1708.134499][ T9728] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1708.622028][ T9728] usb 7-1: can't read configurations, error -61
[ 1708.665010][T23132] chnl_net:caif_netlink_parms(): no params data found
[ 1708.765459][ T9728] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1709.761778][T21308] Bluetooth: hci4: command tx timeout
[ 1710.067802][ T9728] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1710.082481][ T9728] usb 7-1: can't read configurations, error -71
[ 1710.101783][ T9728] usb usb7-port1: attempt power cycle
[ 1710.322000][T23132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1710.360253][T23132] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1711.080514][T23132] bridge_slave_0: entered allmulticast mode
[ 1711.088030][T23132] bridge_slave_0: entered promiscuous mode
[ 1711.106746][T23132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1711.145596][T23132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1711.173752][T23132] bridge_slave_1: entered allmulticast mode
[ 1711.197820][T23132] bridge_slave_1: entered promiscuous mode
[ 1711.236095][T23195] netlink: 'syz.6.4847': attribute type 4 has an invalid length.
[ 1711.255337][T23132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1711.330948][T23132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1711.518701][T23132] team0: Port device team_slave_0 added
[ 1711.539404][T23132] team0: Port device team_slave_1 added
[ 1711.619479][T23132] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1711.627546][T23132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1711.729943][T21308] Bluetooth: hci4: command tx timeout
[ 1711.761050][T23132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1711.813437][T23201] gre0 speed is unknown, defaulting to 1000
[ 1711.823148][T23132] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1711.858605][T23132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1712.028190][T23132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1712.854835][T23132] hsr_slave_0: entered promiscuous mode
[ 1712.865969][T23132] hsr_slave_1: entered promiscuous mode
[ 1712.891799][T23132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1712.899435][T23132] Cannot create hsr debugfs directory
[ 1713.467834][T23132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1713.692210][T21308] Bluetooth: hci4: command tx timeout
[ 1714.484059][T23132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.837446][T23132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.791482][T23132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1716.659195][T23132] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1716.685282][T23132] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1716.703063][T23132] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1716.712634][ T5909] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[ 1716.731429][T16189] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1716.740281][T23132] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1716.998512][ T5909] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[ 1717.008775][T16189] usb 7-1: Using ep0 maxpacket: 16
[ 1717.018251][T16189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1717.020412][ T5909] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1717.040289][T16189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1717.139185][ T5909] usb 5-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config
[ 1717.210228][ T5909] usb 5-1: config 8 has no interface number 0
[ 1717.252157][ T5909] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[ 1717.372443][ T5909] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1718.053107][T16189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1719.152819][T16189] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1719.162137][T16189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1719.183628][T16189] usb 7-1: config 0 descriptor??
[ 1719.393957][T23132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1719.460677][T16189] usbhid 7-1:0.0: can't add hid device: -71
[ 1719.487912][T16189] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1719.498401][T23132] 8021q: adding VLAN 0 to HW filter on device team0
[ 1719.571972][T16189] usb 7-1: USB disconnect, device number 46
[ 1719.585303][T15655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.592490][T15655] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1719.628092][ T5909] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1719.742473][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.997532][ T5909] usb 5-1: can't set config #8, error -71
[ 1720.005077][ T5909] usb 5-1: USB disconnect, device number 69
[ 1720.236912][T15655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1720.244140][T15655] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1720.670565][T23132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1721.975227][ T9728] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1722.255750][T23132] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1722.288695][T23276] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4866'.
[ 1722.317608][ T9728] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1722.319951][T23276] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4866'.
[ 1722.344504][ T9728] usb 7-1: can't read configurations, error -61
[ 1722.382621][    T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1722.472957][ T9728] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1722.860040][T23286] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.4867'.
[ 1722.871282][T23286] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1723.510105][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1723.528333][ T9728] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1723.556790][    T9] usb 5-1: can't read configurations, error -61
[ 1723.564285][ T9728] usb 7-1: can't read configurations, error -61
[ 1723.606041][ T9728] usb usb7-port1: attempt power cycle
[ 1723.707390][    T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1724.907685][ T9728] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1724.957528][ T9728] usb 7-1: device descriptor read/8, error -71
[ 1725.103755][T23132] veth0_vlan: entered promiscuous mode
[ 1725.174564][T23132] veth1_vlan: entered promiscuous mode
[ 1725.307208][T23305] ALSA: mixer_oss: invalid OSS volume ''
[ 1725.405749][T23132] veth0_macvtap: entered promiscuous mode
[ 1725.467189][T23132] veth1_macvtap: entered promiscuous mode
[ 1726.482411][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.585017][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.623042][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.717697][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.744668][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.778025][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.789818][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.803170][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.823529][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.846079][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.865446][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.887750][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.916768][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1726.958526][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1726.992483][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1727.023488][T23321] 9pnet_fd: Insufficient options for proto=fd
[ 1727.032681][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1727.094761][T23132] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1727.294633][T23323] hub 6-0:1.0: USB hub found
[ 1727.301390][T23323] hub 6-0:1.0: 1 port detected
[ 1727.763445][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1727.843002][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1727.861802][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1727.872753][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1727.890562][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1727.922249][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1727.952441][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1727.999895][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.038530][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1728.049531][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.060162][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1728.081038][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.091852][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1728.102583][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.114332][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1728.126555][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.136916][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4880'.
[ 1728.146029][T23132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1728.159501][T23132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1728.171117][T23132] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1728.218210][T23132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1728.233690][T23132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1728.242813][T23132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1728.253233][    T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 1728.286447][T23132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1728.595318][    T9] usb 9-1: config 54 has an invalid interface number: 154 but max is 0
[ 1728.824598][    T9] usb 9-1: config 54 has no interface number 0
[ 1728.882034][    T9] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[ 1728.900826][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.973297][    T9] usb 9-1: Product: syz
[ 1728.983239][    T9] usb 9-1: Manufacturer: syz
[ 1728.993145][    T9] usb 9-1: SerialNumber: syz
[ 1729.656506][T15676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1729.666989][T23326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1729.681674][T15676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1730.401415][T23326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1730.409834][   T29] kauditd_printk_skb: 23 callbacks suppressed
[ 1730.409854][   T29] audit: type=1326 audit(1736283527.469:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.469300][ T9297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1730.480314][    T9] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1730.496214][T15648] usb 9-1: Failed to submit usb control message: -71
[ 1730.503143][   T29] audit: type=1326 audit(1736283527.469:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.513449][ T9297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1730.528050][    T9] usb 9-1: USB disconnect, device number 2
[ 1730.568998][   T29] audit: type=1326 audit(1736283527.490:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.591487][T15648] usb 9-1: unable to send the bmi data to the device: -71
[ 1730.606440][T15648] usb 9-1: unable to get target info from device
[ 1730.612876][T15648] usb 9-1: could not get target info (-71)
[ 1730.644848][T15648] usb 9-1: could not probe fw (-71)
[ 1730.653177][   T29] audit: type=1326 audit(1736283527.490:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.682002][   T29] audit: type=1326 audit(1736283527.490:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.857903][   T29] audit: type=1326 audit(1736283527.521:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.909719][   T29] audit: type=1326 audit(1736283527.521:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1730.933695][   T29] audit: type=1326 audit(1736283527.521:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23338 comm="syz.6.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bfd85d29 code=0x7ffc0000
[ 1731.121799][   T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1731.296951][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1731.319703][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1731.333085][   T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1731.342292][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.354087][   T25] usb 5-1: config 0 descriptor??
[ 1731.367806][T23376] FAULT_INJECTION: forcing a failure.
[ 1731.367806][T23376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1731.385215][T23376] CPU: 1 UID: 0 PID: 23376 Comm: syz.6.4892 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1731.396064][T23376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1731.406162][T23376] Call Trace:
[ 1731.409452][T23376]  <TASK>
[ 1731.412415][T23376]  dump_stack_lvl+0x241/0x360
[ 1731.417130][T23376]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1731.422343][T23376]  ? __pfx__printk+0x10/0x10
[ 1731.427000][T23376]  ? snprintf+0xda/0x120
[ 1731.431266][T23376]  should_fail_ex+0x3b0/0x4e0
[ 1731.435991][T23376]  _copy_to_user+0x31/0xb0
[ 1731.440446][T23376]  simple_read_from_buffer+0xca/0x150
[ 1731.445849][T23376]  proc_fail_nth_read+0x1e9/0x250
[ 1731.450895][T23376]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1731.456475][T23376]  ? rw_verify_area+0x55e/0x6f0
[ 1731.461352][T23376]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1731.466928][T23376]  vfs_read+0x1fc/0xb70
[ 1731.471118][T23376]  ? __pfx___mutex_lock+0x10/0x10
[ 1731.476166][T23376]  ? __pfx_vfs_read+0x10/0x10
[ 1731.480876][T23376]  ? __fget_files+0x2a/0x410
[ 1731.485490][T23376]  ? __fget_files+0x395/0x410
[ 1731.490174][T23376]  ? __fget_files+0x2a/0x410
[ 1731.494782][T23376]  ksys_read+0x18f/0x2b0
[ 1731.499048][T23376]  ? __pfx_ksys_read+0x10/0x10
[ 1731.503828][T23376]  ? do_syscall_64+0x100/0x230
[ 1731.508637][T23376]  ? do_syscall_64+0xb6/0x230
[ 1731.513334][T23376]  do_syscall_64+0xf3/0x230
[ 1731.517854][T23376]  ? clear_bhb_loop+0x35/0x90
[ 1731.522597][T23376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1731.528546][T23376] RIP: 0033:0x7f55bfd8473c
[ 1731.532987][T23376] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1731.552612][T23376] RSP: 002b:00007f55c0bae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1731.561136][T23376] RAX: ffffffffffffffda RBX: 00007f55bff75fa0 RCX: 00007f55bfd8473c
[ 1731.569131][T23376] RDX: 000000000000000f RSI: 00007f55c0bae0a0 RDI: 0000000000000005
[ 1731.577210][T23376] RBP: 00007f55c0bae090 R08: 0000000000000000 R09: 0000000000000000
[ 1731.585204][T23376] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001
[ 1731.593184][T23376] R13: 0000000000000000 R14: 00007f55bff75fa0 R15: 00007ffdc1f15258
[ 1731.601182][T23376]  </TASK>
[ 1731.866481][   T25] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[ 1732.393175][   T25] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1732.512452][   T25] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE
[ 1733.188720][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1733.362018][T23400] nbd: nbd0 already in use
[ 1733.408289][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1733.429362][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1733.511692][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1733.552409][    T9] usb 6-1: can't read configurations, error -61
[ 1733.693475][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1734.036498][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1734.313583][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1734.335094][   T25] cp2112 0003:10C4:EA90.0015: error reading lock byte: -71
[ 1734.368085][   T25] usb 5-1: USB disconnect, device number 72
[ 1734.376007][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1734.398723][    T9] usb 6-1: can't read configurations, error -61
[ 1734.425307][    T9] usb usb6-port1: attempt power cycle
[ 1734.770850][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1735.020088][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1735.046921][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1735.082444][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1735.100243][    T9] usb 6-1: can't read configurations, error -61
[ 1735.401770][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1736.283164][    T9] usb 6-1: device descriptor read/8, error -71
[ 1736.448034][    T9] usb usb6-port1: unable to enumerate USB device
[ 1737.178381][T23426] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1738.358492][T23435] nbd: nbd0 already in use
[ 1738.485056][T23438] netlink: 'syz.8.4912': attribute type 6 has an invalid length.
[ 1738.496401][T23439] binder: 23437:23439 ioctl c0306201 20000180 returned -14
[ 1738.504137][T23438] binder: 23437:23438 ioctl c0306201 20000300 returned -14
[ 1738.812909][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4911'.
[ 1739.583490][T23458] /dev/nullb0: Can't open blockdev
[ 1739.907754][T23298] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1740.100408][T23298] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1740.132817][T23298] usb 7-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[ 1740.174098][T23298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.211910][T23298] usb 7-1: config 0 descriptor??
[ 1740.227662][T23298] pwc: Philips PCA646VC USB webcam detected.
[ 1740.250358][T23464] input: syz1 as /devices/virtual/input/input43
[ 1740.434625][T23298] pwc: send_video_command error -71
[ 1740.451983][T23298] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1740.507440][T23298] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[ 1741.355455][T23298] usb 7-1: USB disconnect, device number 51
[ 1743.076586][T23499] netlink: del zone limit has 4 unknown bytes
[ 1743.182612][T23501] netlink: 'syz.5.4932': attribute type 1 has an invalid length.
[ 1743.197614][T23501] netlink: 'syz.5.4932': attribute type 11 has an invalid length.
[ 1743.208455][T23501] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4932'.
[ 1743.462642][ T5909] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1743.463144][T23510] /dev/nullb0: Can't open blockdev
[ 1743.509714][T23510] netlink: 'syz.7.4934': attribute type 10 has an invalid length.
[ 1743.517703][T23510] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4934'.
[ 1743.535525][T23510] bridge0: port 4(macvlan1) entered blocking state
[ 1743.543227][T23510] bridge0: port 4(macvlan1) entered disabled state
[ 1743.554629][T23510] macvlan1: entered allmulticast mode
[ 1743.560324][T23510] veth1_vlan: entered allmulticast mode
[ 1743.643210][T23510] macvlan1: entered promiscuous mode
[ 1743.708613][T23510] bridge0: port 4(macvlan1) entered blocking state
[ 1743.712210][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 1743.715290][T23510] bridge0: port 4(macvlan1) entered forwarding state
[ 1743.980204][ T5909] usb 6-1: Dual-Role OTG device on HNP port
[ 1743.986698][ T5909] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[ 1743.996697][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1744.005436][ T5909] usb 6-1: Product: syz
[ 1744.009801][ T5909] usb 6-1: Manufacturer: syz
[ 1744.015399][ T5909] usb 6-1: SerialNumber: syz
[ 1744.022254][ T5909] usb 6-1: config 0 descriptor??
[ 1744.084368][ T5909] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 1744.589624][T23527] overlayfs: missing 'workdir'
[ 1746.226151][ T5909] usb 6-1: USB disconnect, device number 20
[ 1746.270253][T23535] openvswitch: netlink: Message has 16 unknown bytes.
[ 1746.418718][T23542] FAULT_INJECTION: forcing a failure.
[ 1746.418718][T23542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1746.442631][T23539] autofs: Bad value for 'fd'
[ 1746.452154][T23542] CPU: 1 UID: 0 PID: 23542 Comm: syz.8.4945 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1746.462996][T23542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1746.473097][T23542] Call Trace:
[ 1746.476414][T23542]  <TASK>
[ 1746.479387][T23542]  dump_stack_lvl+0x241/0x360
[ 1746.484122][T23542]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1746.489372][T23542]  ? __pfx__printk+0x10/0x10
[ 1746.494021][T23542]  ? __pfx_lock_release+0x10/0x10
[ 1746.499102][T23542]  should_fail_ex+0x3b0/0x4e0
[ 1746.503832][T23542]  _copy_to_user+0x31/0xb0
[ 1746.508316][T23542]  copy_to_sockptr+0x65/0xa0
[ 1746.512966][T23542]  do_tcp_getsockopt+0x2266/0x3570
[ 1746.518139][T23542]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[ 1746.523655][T23542]  ? __pfx_validate_chain+0x10/0x10
[ 1746.528894][T23542]  ? __lock_acquire+0x1397/0x2100
[ 1746.533961][T23542]  ? mark_lock+0x9a/0x360
[ 1746.538348][T23542]  ? __pfx___might_resched+0x10/0x10
[ 1746.543656][T23542]  ? __might_fault+0xaa/0x120
[ 1746.548353][T23542]  tcp_getsockopt+0xfb/0x1c0
[ 1746.552963][T23542]  ? __pfx_tcp_getsockopt+0x10/0x10
[ 1746.558182][T23542]  ? __might_fault+0xc6/0x120
[ 1746.562872][T23542]  ? sock_common_getsockopt+0x2e/0xb0
[ 1746.568265][T23542]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1746.574201][T23542]  do_sock_getsockopt+0x3c4/0x7e0
[ 1746.579256][T23542]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1746.584817][T23542]  ? __fget_files+0x2a/0x410
[ 1746.589425][T23542]  ? __fget_files+0x395/0x410
[ 1746.594118][T23542]  ? __fget_files+0x2a/0x410
[ 1746.598736][T23542]  __x64_sys_getsockopt+0x2a1/0x370
[ 1746.603959][T23542]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[ 1746.609694][T23542]  ? do_syscall_64+0x100/0x230
[ 1746.614477][T23542]  ? do_syscall_64+0xb6/0x230
[ 1746.619183][T23542]  do_syscall_64+0xf3/0x230
[ 1746.623705][T23542]  ? clear_bhb_loop+0x35/0x90
[ 1746.628410][T23542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1746.634338][T23542] RIP: 0033:0x7ff04d385d29
[ 1746.638792][T23542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1746.658509][T23542] RSP: 002b:00007ff04b1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1746.666970][T23542] RAX: ffffffffffffffda RBX: 00007ff04d575fa0 RCX: 00007ff04d385d29
[ 1746.674956][T23542] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003
[ 1746.682941][T23542] RBP: 00007ff04b1f6090 R08: 00000000200001c0 R09: 0000000000000000
[ 1746.691208][T23542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1746.699231][T23542] R13: 0000000000000000 R14: 00007ff04d575fa0 R15: 00007ffddb0db058
[ 1746.707247][T23542]  </TASK>
[ 1746.872057][T23548] xt_policy: too many policy elements
[ 1746.944150][T23551] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 1747.874508][T23555] gre0 speed is unknown, defaulting to 1000
[ 1748.054665][T23296] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1748.159392][    T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1748.304864][T23296] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1748.524905][    T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1748.606053][T23296] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1748.658521][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.667256][T23296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.678107][    T9] usb 7-1: config 0 descriptor??
[ 1748.698370][T23556] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1748.709041][    T9] cp210x 7-1:0.0: cp210x converter detected
[ 1748.771361][T23296] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1749.248991][    T9] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1749.258247][    T9] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -32
[ 1749.266357][    T9] cp210x 7-1:0.0: GPIO initialisation failed: -32
[ 1749.273432][T23555] netlink: 'syz.5.4950': attribute type 2 has an invalid length.
[ 1749.301648][    T9] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1749.395403][T22352] usb 7-1: USB disconnect, device number 52
[ 1749.415018][T22352] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1749.441418][T22352] cp210x 7-1:0.0: device disconnected
[ 1750.226286][T23582] netlink: 'syz.8.4957': attribute type 1 has an invalid length.
[ 1750.282564][T23582] netlink: 'syz.8.4957': attribute type 2 has an invalid length.
[ 1750.487518][T23589] FAULT_INJECTION: forcing a failure.
[ 1750.487518][T23589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1750.514680][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.7.4959 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1750.525534][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1750.535641][T23589] Call Trace:
[ 1750.538964][T23589]  <TASK>
[ 1750.541932][T23589]  dump_stack_lvl+0x241/0x360
[ 1750.546676][T23589]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1750.551931][T23589]  ? __pfx__printk+0x10/0x10
[ 1750.556679][T23589]  ? snprintf+0xda/0x120
[ 1750.560977][T23589]  should_fail_ex+0x3b0/0x4e0
[ 1750.565716][T23589]  _copy_to_user+0x31/0xb0
[ 1750.570190][T23589]  simple_read_from_buffer+0xca/0x150
[ 1750.575620][T23589]  proc_fail_nth_read+0x1e9/0x250
[ 1750.580720][T23589]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.586340][T23589]  ? rw_verify_area+0x55e/0x6f0
[ 1750.591242][T23589]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.596851][T23589]  vfs_read+0x1fc/0xb70
[ 1750.601076][T23589]  ? __pfx___mutex_lock+0x10/0x10
[ 1750.606171][T23589]  ? __pfx_vfs_read+0x10/0x10
[ 1750.610906][T23589]  ? __fget_files+0x2a/0x410
[ 1750.615549][T23589]  ? __fget_files+0x395/0x410
[ 1750.620270][T23589]  ? __fget_files+0x2a/0x410
[ 1750.624909][T23589]  ksys_read+0x18f/0x2b0
[ 1750.629202][T23589]  ? __pfx_ksys_read+0x10/0x10
[ 1750.633991][T23589]  ? do_syscall_64+0x100/0x230
[ 1750.638809][T23589]  ? do_syscall_64+0xb6/0x230
[ 1750.643525][T23589]  do_syscall_64+0xf3/0x230
[ 1750.648064][T23589]  ? clear_bhb_loop+0x35/0x90
[ 1750.652771][T23589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1750.658710][T23589] RIP: 0033:0x7ffa8bb8473c
[ 1750.663175][T23589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1750.682909][T23589] RSP: 002b:00007ffa8caa5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1750.691383][T23589] RAX: ffffffffffffffda RBX: 00007ffa8bd75fa0 RCX: 00007ffa8bb8473c
[ 1750.699422][T23589] RDX: 000000000000000f RSI: 00007ffa8caa50a0 RDI: 0000000000000003
[ 1750.707441][T23589] RBP: 00007ffa8caa5090 R08: 0000000000000000 R09: 0000000000000000
[ 1750.715463][T23589] R10: 0000000000000056 R11: 0000000000000246 R12: 0000000000000002
[ 1750.723475][T23589] R13: 0000000000000000 R14: 00007ffa8bd75fa0 R15: 00007ffd1bfd5ea8
[ 1750.731508][T23589]  </TASK>
[ 1750.904934][T22352] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1751.047331][T23594] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4961'.
[ 1751.061270][T23594] netlink: 'syz.6.4961': attribute type 1 has an invalid length.
[ 1751.096792][T23594] input: syz1 as /devices/virtual/input/input44
[ 1751.166854][T22352] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1751.175444][T22352] usb 5-1: can't read configurations, error -61
[ 1751.238115][T23298] usb 6-1: USB disconnect, device number 21
[ 1751.264328][T23599] binder: 23598:23599 ioctl c0306201 20000940 returned -14
[ 1751.304722][T23599] binder: 23598:23599 ioctl 4606 20000380 returned -22
[ 1751.313538][T22352] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1751.483842][T22352] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1751.513976][T22352] usb 5-1: can't read configurations, error -61
[ 1751.523800][T22352] usb usb5-port1: attempt power cycle
[ 1751.647622][T23296] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1751.855190][T23296] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1751.891971][T23296] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1751.922001][T23296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.012307][T23296] usb 7-1: config 0 descriptor??
[ 1752.944285][T23296] pwc: Askey VC010 type 2 USB webcam detected.
[ 1753.136478][T23296] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1753.153131][T22352] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1753.181180][T22352] usb 5-1: device descriptor read/8, error -71
[ 1753.330563][T23296] pwc: recv_control_msg error -32 req 02 val 2700
[ 1753.344330][T23620] netlink: 'syz.4.4970': attribute type 11 has an invalid length.
[ 1753.823500][T23296] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1753.833962][T23633] FAULT_INJECTION: forcing a failure.
[ 1753.833962][T23633] name failslab, interval 1, probability 0, space 0, times 0
[ 1753.857642][T23296] pwc: recv_control_msg error -71 req 04 val 1000
[ 1753.869587][T23296] pwc: recv_control_msg error -71 req 04 val 1300
[ 1753.887585][T23633] CPU: 0 UID: 0 PID: 23633 Comm: syz.8.4971 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1753.898497][T23633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1753.908568][T23633] Call Trace:
[ 1753.911861][T23633]  <TASK>
[ 1753.914814][T23633]  dump_stack_lvl+0x241/0x360
[ 1753.919539][T23633]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1753.924769][T23633]  ? __pfx__printk+0x10/0x10
[ 1753.929380][T23633]  ? fs_reclaim_acquire+0x93/0x130
[ 1753.934514][T23633]  ? __pfx___might_resched+0x10/0x10
[ 1753.939826][T23633]  should_fail_ex+0x3b0/0x4e0
[ 1753.944519][T23633]  should_failslab+0xac/0x100
[ 1753.949216][T23633]  __kmalloc_noprof+0xdd/0x4c0
[ 1753.953992][T23633]  ? kstrtouint_from_user+0x128/0x190
[ 1753.959376][T23633]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1753.965125][T23633]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1753.970698][T23633]  tomoyo_path_number_perm+0x236/0x860
[ 1753.976178][T23633]  ? __lock_acquire+0x1397/0x2100
[ 1753.981218][T23633]  ? tomoyo_path_number_perm+0x206/0x860
[ 1753.986867][T23633]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1753.992919][T23633]  ? __fget_files+0x2a/0x410
[ 1753.997540][T23633]  ? __fget_files+0x2a/0x410
[ 1754.002202][T23633]  security_file_ioctl+0xc6/0x2a0
[ 1754.007241][T23633]  __se_sys_ioctl+0x46/0x170
[ 1754.011861][T23633]  do_syscall_64+0xf3/0x230
[ 1754.016390][T23633]  ? clear_bhb_loop+0x35/0x90
[ 1754.021080][T23633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1754.026989][T23633] RIP: 0033:0x7ff04d385d29
[ 1754.031460][T23633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1754.051081][T23633] RSP: 002b:00007ff04b1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1754.059513][T23633] RAX: ffffffffffffffda RBX: 00007ff04d576160 RCX: 00007ff04d385d29
[ 1754.067509][T23633] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 1754.075491][T23633] RBP: 00007ff04b1b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1754.083472][T23633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1754.091458][T23633] R13: 0000000000000000 R14: 00007ff04d576160 R15: 00007ffddb0db058
[ 1754.099458][T23633]  </TASK>
[ 1754.116042][T23296] pwc: recv_control_msg error -71 req 04 val 1400
[ 1754.181480][T23296] pwc: recv_control_msg error -71 req 02 val 2000
[ 1754.233608][T23633] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1754.240696][T23296] pwc: recv_control_msg error -71 req 02 val 2100
[ 1754.277000][T23296] pwc: recv_control_msg error -71 req 04 val 1500
[ 1755.263324][T23296] pwc: recv_control_msg error -71 req 02 val 2500
[ 1755.301414][T23296] pwc: recv_control_msg error -71 req 02 val 2400
[ 1755.321403][T23296] pwc: recv_control_msg error -71 req 02 val 2600
[ 1755.336327][T23296] pwc: recv_control_msg error -71 req 02 val 2900
[ 1755.361550][T23296] pwc: recv_control_msg error -71 req 02 val 2800
[ 1755.392136][T23296] pwc: recv_control_msg error -71 req 04 val 1100
[ 1755.435646][T23296] pwc: recv_control_msg error -71 req 04 val 1200
[ 1755.478125][T23296] pwc: Registered as video103.
[ 1755.555506][T23296] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input45
[ 1755.622172][T23296] usb 7-1: USB disconnect, device number 53
[ 1756.744753][ T5922] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1756.802241][T23298] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1756.979174][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1757.001818][T23298] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 5
[ 1757.008564][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1757.046327][ T5922] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[ 1757.073006][T23298] usb 7-1: config 0 has no interface number 0
[ 1757.074563][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1757.114251][ T5922] usb 5-1: config 0 descriptor??
[ 1757.145740][T23298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11
[ 1757.205247][T23298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 9993, setting to 1024
[ 1757.290865][T23298] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1757.358898][T23298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1757.387341][T23298] usb 7-1: config 0 descriptor??
[ 1757.409540][T23668] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1757.571125][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: unknown main item tag 0x0
[ 1757.580599][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: unknown main item tag 0x0
[ 1757.589537][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: unknown main item tag 0x0
[ 1757.602430][   T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1757.628548][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: unknown main item tag 0x0
[ 1757.637885][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: unknown main item tag 0x0
[ 1757.676251][ T5922] aquacomputer_d5next 0003:0C70:F00D.0016: hidraw0: USB HID v20.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0
[ 1757.765426][   T25] usb 9-1: Using ep0 maxpacket: 8
[ 1757.795573][ T5922] usb 5-1: USB disconnect, device number 77
[ 1757.812116][   T25] usb 9-1: config 8 has an invalid interface number: 188 but max is 0
[ 1757.834683][   T25] usb 9-1: config 8 has no interface number 0
[ 1757.877162][   T25] usb 9-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 1758.151498][   T25] usb 9-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1758.256444][T23676] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1758.363889][T23298] uclogic 0003:256C:006D.0017: No inputs registered, leaving
[ 1758.418843][T23298] uclogic 0003:256C:006D.0017: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1
[ 1759.129604][   T25] usb 9-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1759.163395][   T25] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[ 1759.738224][T22352] usb 7-1: USB disconnect, device number 54
[ 1759.765052][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.774649][   T25] usb 9-1: Product: syz
[ 1759.780959][   T25] usb 9-1: Manufacturer: syz
[ 1759.786133][   T25] usb 9-1: SerialNumber: syz
[ 1760.331171][T23298] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1760.846623][T23298] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1760.875648][T23298] usb 5-1: config 38 has an invalid interface number: 216 but max is 1
[ 1760.887263][   T25] vmk80xx 9-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[ 1760.908071][T23298] usb 5-1: config 38 has an invalid interface number: 6 but max is 1
[ 1760.926894][   T25] vmk80xx 9-1:8.188: probe with driver vmk80xx failed with error -22
[ 1760.956075][T23298] usb 5-1: config 38 has no interface number 0
[ 1760.966691][   T25] usb 9-1: USB disconnect, device number 3
[ 1760.983938][T23298] usb 5-1: config 38 has no interface number 1
[ 1761.014392][T23298] usb 5-1: config 38 interface 216 altsetting 33 endpoint 0xC has invalid maxpacket 520, setting to 64
[ 1761.040870][T23298] usb 5-1: config 38 interface 216 altsetting 33 bulk endpoint 0x4 has invalid maxpacket 16
[ 1761.059986][T23298] usb 5-1: config 38 interface 216 altsetting 33 endpoint 0x7 has an invalid bInterval 243, changing to 11
[ 1761.104720][T23298] usb 5-1: config 38 interface 216 has no altsetting 0
[ 1761.122559][T23699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1761.149163][T23298] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=ed.59
[ 1761.159278][T23699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1761.176200][T23704] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4994'.
[ 1761.189851][T23298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1761.215766][T23298] usb 5-1: Product: syz
[ 1761.231031][T23298] usb 5-1: Manufacturer: syz
[ 1761.252362][T23298] usb 5-1: SerialNumber: syz
[ 1761.291389][T23681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1761.366431][ T5909] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1761.557114][ T5909] usb 6-1: Using ep0 maxpacket: 32
[ 1761.607198][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1761.753608][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1761.897731][ T5909] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1762.062286][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1762.180728][ T5909] usb 6-1: config 0 descriptor??
[ 1762.694727][ T5909] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[ 1762.709855][ T5909] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[ 1762.717140][ T5909] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[ 1762.741154][ T5909] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[ 1762.757542][ T5909] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[ 1762.786408][ T5909] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[ 1763.246404][T23296] usb 6-1: USB disconnect, device number 22
[ 1763.449179][T23726] nbd: nbd0 already in use
[ 1764.229126][T23730] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 1764.561031][T23298] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1764.588564][T23730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1764.605193][T23298] usb 5-1: invalid MIDI in EP 0
[ 1764.618062][T23298] snd-usb-audio 5-1:38.216: probe with driver snd-usb-audio failed with error -22
[ 1764.685593][T23298] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1765.370720][T23298] snd-usb-audio 5-1:38.6: probe with driver snd-usb-audio failed with error -2
[ 1765.433490][T23298] usb 5-1: USB disconnect, device number 78
[ 1765.525330][T23744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1766.039291][T23754] hub 6-0:1.0: USB hub found
[ 1766.044282][T23754] hub 6-0:1.0: 1 port detected
[ 1766.817116][T23759] FAULT_INJECTION: forcing a failure.
[ 1766.817116][T23759] name failslab, interval 1, probability 0, space 0, times 0
[ 1766.845235][T23759] CPU: 1 UID: 0 PID: 23759 Comm: syz.6.5010 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1766.856084][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1766.866181][T23759] Call Trace:
[ 1766.869468][T23759]  <TASK>
[ 1766.872401][T23759]  dump_stack_lvl+0x241/0x360
[ 1766.877101][T23759]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1766.882309][T23759]  ? __pfx__printk+0x10/0x10
[ 1766.886911][T23759]  ? __kmalloc_noprof+0xb5/0x4c0
[ 1766.891897][T23759]  ? __pfx___might_resched+0x10/0x10
[ 1766.897213][T23759]  should_fail_ex+0x3b0/0x4e0
[ 1766.901903][T23759]  should_failslab+0xac/0x100
[ 1766.907309][T23759]  __kmalloc_noprof+0xdd/0x4c0
[ 1766.912075][T23759]  ? __nla_parse+0x40/0x60
[ 1766.916497][T23759]  ? nft_obj_init+0x1c3/0x2f0
[ 1766.921196][T23759]  nft_obj_init+0x1c3/0x2f0
[ 1766.925734][T23759]  nf_tables_newobj+0xd3f/0x17e0
[ 1766.930692][T23759]  ? __pfx_nf_tables_newobj+0x10/0x10
[ 1766.936078][T23759]  ? __nla_parse+0x40/0x60
[ 1766.940504][T23759]  nfnetlink_rcv+0x14e3/0x2ab0
[ 1766.945313][T23759]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1766.950502][T23759]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1766.955712][T23759]  ? skb_clone+0x240/0x390
[ 1766.960143][T23759]  ? __pfx_lock_release+0x10/0x10
[ 1766.965201][T23759]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1766.970413][T23759]  netlink_unicast+0x7f6/0x990
[ 1766.975382][T23759]  ? __pfx_netlink_unicast+0x10/0x10
[ 1766.980688][T23759]  ? __virt_addr_valid+0x45f/0x530
[ 1766.985910][T23759]  ? __phys_addr_symbol+0x2f/0x70
[ 1766.990970][T23759]  ? __check_object_size+0x47a/0x730
[ 1766.996484][T23759]  netlink_sendmsg+0x8e4/0xcb0
[ 1767.001285][T23759]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1767.006607][T23759]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1767.011915][T23759]  __sock_sendmsg+0x221/0x270
[ 1767.016625][T23759]  ____sys_sendmsg+0x52a/0x7e0
[ 1767.021414][T23759]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1767.026714][T23759]  ? __fget_files+0x2a/0x410
[ 1767.031332][T23759]  ? __fget_files+0x2a/0x410
[ 1767.035939][T23759]  __sys_sendmsg+0x269/0x350
[ 1767.040548][T23759]  ? __pfx_lock_release+0x10/0x10
[ 1767.048381][T23759]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1767.053535][T23759]  ? __pfx_vfs_write+0x10/0x10
[ 1767.058345][T23759]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1767.064695][T23759]  ? do_syscall_64+0x100/0x230
[ 1767.069582][T23759]  ? do_syscall_64+0xb6/0x230
[ 1767.074288][T23759]  do_syscall_64+0xf3/0x230
[ 1767.078892][T23759]  ? clear_bhb_loop+0x35/0x90
[ 1767.083591][T23759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1767.089533][T23759] RIP: 0033:0x7f55bfd85d29
[ 1767.093973][T23759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1767.113605][T23759] RSP: 002b:00007f55c0bae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1767.122037][T23759] RAX: ffffffffffffffda RBX: 00007f55bff75fa0 RCX: 00007f55bfd85d29
[ 1767.130025][T23759] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[ 1767.138004][T23759] RBP: 00007f55c0bae090 R08: 0000000000000000 R09: 0000000000000000
[ 1767.146071][T23759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1767.154057][T23759] R13: 0000000000000000 R14: 00007f55bff75fa0 R15: 00007ffdc1f15258
[ 1767.162060][T23759]  </TASK>
[ 1767.442150][T23769] nbd: nbd0 already in use
[ 1770.599675][T23797] tty tty36: ldisc open failed (-12), clearing slot 35
[ 1770.607381][T23798] tty tty36: ldisc open failed (-12), clearing slot 35
[ 1770.974314][T23805] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[ 1770.980900][T23805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1771.051772][T23810] hub 6-0:1.0: USB hub found
[ 1771.056719][T23810] hub 6-0:1.0: 1 port detected
[ 1771.070579][T23805] vhci_hcd vhci_hcd.0: Device attached
[ 1771.161505][T23815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1771.210833][T23808] vhci_hcd: connection closed
[ 1771.213400][T15665] vhci_hcd: stop threads
[ 1771.249345][T15665] vhci_hcd: release socket
[ 1771.258184][    T9] vhci_hcd: vhci_device speed not set
[ 1771.334053][    T9] usb 47-1: new full-speed USB device number 2 using vhci_hcd
[ 1771.365327][T15665] vhci_hcd: disconnect device
[ 1771.420334][T22352] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1771.582107][T22352] usb 9-1: Using ep0 maxpacket: 8
[ 1772.028472][T22352] usb 9-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[ 1772.083652][T22352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.143948][T22352] usb 9-1: Product: syz
[ 1772.164969][T22352] usb 9-1: Manufacturer: syz
[ 1772.268700][T22352] usb 9-1: SerialNumber: syz
[ 1772.275559][T22352] usb 9-1: config 0 descriptor??
[ 1772.300111][T22352] gspca_main: spca500-2.14.0 probing 046d:0900
[ 1773.427129][T22352] gspca_spca500: reg write: error -110
[ 1773.868935][T22352] gspca_spca500: reg write: error -71
[ 1773.879413][T22352] gspca_spca500: reg write: error -71
[ 1773.901262][T22352] gspca_spca500: reg write: error -71
[ 1773.911980][T22352] gspca_spca500: reg write: error -71
[ 1773.950496][T22352] gspca_spca500: reg write: error -71
[ 1774.081995][T22352] gspca_spca500: reg write: error -71
[ 1774.135935][T22352] gspca_spca500: reg write: error -71
[ 1774.463144][T22352] gspca_spca500: reg write: error -71
[ 1774.499760][T22352] usb 9-1: USB disconnect, device number 4
[ 1775.309904][T23866] random: crng reseeded on system resumption
[ 1775.375663][T23867] gre0 speed is unknown, defaulting to 1000
[ 1776.289825][    T9] vhci_hcd: vhci_device speed not set
[ 1776.398811][T23878] nbd: nbd0 already in use
[ 1776.711392][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5042'.
[ 1780.769420][T23909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1780.797221][T23909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1782.669818][T21308] Bluetooth: hci2: unexpected event for opcode 0x1407
[ 1782.708707][T23941] binder: BINDER_SET_CONTEXT_MGR already set
[ 1782.750329][T23941] binder: 23936:23941 ioctl 4018620d 20000040 returned -16
[ 1782.774062][T23942] nbd: nbd0 already in use
[ 1782.941008][T23296] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1782.948684][  T973] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1783.050882][T23946] trusted_key: encrypted_key: insufficient parameters specified
[ 1783.122091][  T973] usb 6-1: Using ep0 maxpacket: 16
[ 1783.148847][T23296] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1783.168250][  T973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1783.180064][T23296] usb 7-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1783.194816][  T973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1783.204111][T23296] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1783.218416][  T973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1783.236641][  T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131
[ 1783.255112][T23296] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[ 1783.268184][T23296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.276935][  T973] usb 6-1: Product: syz
[ 1783.293566][  T973] usb 6-1: Manufacturer: syz
[ 1783.300999][T23296] usb 7-1: Product: syz
[ 1783.306006][  T973] usb 6-1: SerialNumber: syz
[ 1783.315711][T23296] usb 7-1: Manufacturer: syz
[ 1783.324398][T23296] usb 7-1: SerialNumber: syz
[ 1783.337556][T23296] usb 7-1: config 0 descriptor??
[ 1783.350037][T23296] ir_toy 7-1:0.0: required endpoints not found
[ 1783.526096][  T973] usb 6-1: 0:2 : does not exist
[ 1783.539420][  T973] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1783.554394][T22352] usb 7-1: USB disconnect, device number 55
[ 1783.571057][  T973] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1783.615513][  T973] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1783.668128][  T973] usb 6-1: USB disconnect, device number 23
[ 1784.144807][T23956] hub 6-0:1.0: USB hub found
[ 1784.149741][T23956] hub 6-0:1.0: 1 port detected
[ 1785.617558][T23969] team_slave_0: entered promiscuous mode
[ 1785.624187][T23969] team_slave_1: entered promiscuous mode
[ 1785.666683][T23969] macsec1: entered allmulticast mode
[ 1785.672402][T23969] team0: entered allmulticast mode
[ 1785.701863][T23969] team_slave_0: entered allmulticast mode
[ 1786.074083][T23969] team_slave_1: entered allmulticast mode
[ 1786.085353][T23978] nbd: nbd0 already in use
[ 1786.103338][T23969] team0: left allmulticast mode
[ 1786.110004][T23969] team_slave_0: left allmulticast mode
[ 1786.119915][T23969] team_slave_1: left allmulticast mode
[ 1786.286786][T23969] team_slave_0: left promiscuous mode
[ 1786.292510][T23969] team_slave_1: left promiscuous mode
[ 1786.495444][T21308] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1786.505856][T21308] Bluetooth: hci2: Injecting HCI hardware error event
[ 1786.517455][T10497] Bluetooth: hci2: hardware error 0x00
[ 1786.772221][T23984] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1787.229043][T23298] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1788.313551][T23993] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.5074'.
[ 1788.353869][T23298] usb 6-1: Using ep0 maxpacket: 32
[ 1788.370448][T23298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1788.399973][T23298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1788.435776][T23298] usb 6-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb
[ 1788.466467][T23298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1788.478027][T10497] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1788.486843][T23298] usb 6-1: Product: syz
[ 1788.544342][T23298] usb 6-1: Manufacturer: syz
[ 1788.563015][T23298] usb 6-1: SerialNumber: syz
[ 1788.592165][T23298] usb 6-1: config 0 descriptor??
[ 1788.603751][T23298] safe_serial 6-1:0.0: safe_serial converter detected
[ 1788.630863][T23298] safe_serial 6-1:0.0: probe with driver safe_serial failed with error -22
[ 1789.045753][T24007] usb 6-1: USB disconnect, device number 24
[ 1789.066645][T24007] hub 6-0:1.0: USB hub found
[ 1789.071803][T24007] hub 6-0:1.0: 1 port detected
[ 1789.678233][T23296] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1790.472894][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5082'.
[ 1790.546412][T24022] nbd: nbd0 already in use
[ 1790.612351][T21308] Bluetooth: hci0: command 0x0406 tx timeout
[ 1790.641112][T24024] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5085'.
[ 1792.613578][T16189] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1792.872470][T16189] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[ 1792.896791][T16189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1792.919484][T16189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1792.945341][T16189] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[ 1792.966735][T16189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.989430][T16189] usb 7-1: Product: syz
[ 1793.001109][T16189] usb 7-1: Manufacturer: syz
[ 1793.022450][T16189] usb 7-1: SerialNumber: syz
[ 1793.318406][T24060] pim6reg: entered allmulticast mode
[ 1793.546542][T16189] usb 7-1: config 0 descriptor??
[ 1793.559463][T16189] redrat3 7-1:0.0: Couldn't find all endpoints
[ 1793.772240][T23296] usb 7-1: USB disconnect, device number 56
[ 1793.953313][T24066] IPVS: Error connecting to the multicast addr
[ 1794.057559][T24066] MTD: Couldn't look up '/dev/nbd5': -2
[ 1795.206368][   T29] audit: type=1326 audit(1736283595.449:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.227927][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1795.329223][   T29] audit: type=1326 audit(1736283595.449:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.395408][   T29] audit: type=1326 audit(1736283595.449:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95af387c47 code=0x7ffc0000
[ 1795.470866][   T29] audit: type=1326 audit(1736283595.449:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.581456][T23296] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1795.684378][   T29] audit: type=1326 audit(1736283595.449:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.706033][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1795.749656][   T29] audit: type=1326 audit(1736283595.449:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95af384690 code=0x7ffc0000
[ 1795.756519][T23296] usb 6-1: Using ep0 maxpacket: 32
[ 1795.772797][   T29] audit: type=1326 audit(1736283595.449:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.772854][   T29] audit: type=1326 audit(1736283595.449:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.772897][   T29] audit: type=1326 audit(1736283595.449:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.772937][   T29] audit: type=1326 audit(1736283595.449:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24067 comm="syz.4.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af385d29 code=0x7ffc0000
[ 1795.778195][T24088] random: crng reseeded on system resumption
[ 1795.802484][T23296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1795.959184][T23296] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1795.980575][T23296] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[ 1796.027568][T23296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.091023][T23296] usb 6-1: config 0 descriptor??
[ 1797.057770][T23296] dragonrise 0003:0079:0011.0019: hidraw0: USB HID vff.fe Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0
[ 1797.463191][ T5909] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1797.552772][T24105] usb usb8: usbfs: process 24105 (syz.8.5107) did not claim interface 0 before use
[ 1797.609274][ T5909] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1797.633894][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1797.741793][ T5909] usb 7-1: config 0 descriptor??
[ 1797.748815][ T5909] cp210x 7-1:0.0: cp210x converter detected
[ 1798.454366][T24104] program syz.6.5109 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1798.501670][T24104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1798.534743][T22352] usb 6-1: USB disconnect, device number 26
[ 1798.544999][T24104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1798.733114][ T5909] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1798.741792][T24123] FAULT_INJECTION: forcing a failure.
[ 1798.741792][T24123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1798.768752][ T5909] cp210x 7-1:0.0: GPIO initialisation failed: -71
[ 1798.787797][T24123] CPU: 1 UID: 0 PID: 24123 Comm: syz.5.5114 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1798.787919][ T5909] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1798.798626][T24123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1798.798651][T24123] Call Trace:
[ 1798.798662][T24123]  <TASK>
[ 1798.798675][T24123]  dump_stack_lvl+0x241/0x360
[ 1798.798716][T24123]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1798.798745][T24123]  ? __pfx__printk+0x10/0x10
[ 1798.798776][T24123]  ? __pfx_lock_release+0x10/0x10
[ 1798.798806][T24123]  should_fail_ex+0x3b0/0x4e0
[ 1798.798837][T24123]  _copy_from_user+0x2f/0xc0
[ 1798.798872][T24123]  input_event_from_user+0x1e2/0x4a0
[ 1798.798901][T24123]  ? __pfx_input_event_from_user+0x10/0x10
[ 1798.798931][T24123]  ? input_inject_event+0xd6/0x340
[ 1798.798965][T24123]  evdev_write+0x470/0x790
[ 1798.799008][T24123]  ? __pfx_evdev_write+0x10/0x10
[ 1798.799046][T24123]  ? bpf_lsm_file_permission+0x9/0x10
[ 1798.799077][T24123]  ? security_file_permission+0x74/0x280
[ 1798.799105][T24123]  ? rw_verify_area+0x1c3/0x6f0
[ 1798.799133][T24123]  ? __pfx_evdev_write+0x10/0x10
[ 1798.799169][T24123]  vfs_write+0x2a3/0xd30
[ 1798.799208][T24123]  ? __pfx_vfs_write+0x10/0x10
[ 1798.799249][T24123]  ? __fget_files+0x2a/0x410
[ 1798.799275][T24123]  ? __fget_files+0x395/0x410
[ 1798.799298][T24123]  ? __fget_files+0x2a/0x410
[ 1798.799332][T24123]  ksys_write+0x18f/0x2b0
[ 1798.799363][T24123]  ? __pfx_ksys_write+0x10/0x10
[ 1798.799394][T24123]  ? do_syscall_64+0x100/0x230
[ 1798.799431][T24123]  ? do_syscall_64+0xb6/0x230
[ 1798.799469][T24123]  do_syscall_64+0xf3/0x230
[ 1798.799503][T24123]  ? clear_bhb_loop+0x35/0x90
[ 1798.799530][T24123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1798.799565][T24123] RIP: 0033:0x7f078e385d29
[ 1798.799588][T24123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1798.799609][T24123] RSP: 002b:00007f078f20e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1798.799637][T24123] RAX: ffffffffffffffda RBX: 00007f078e575fa0 RCX: 00007f078e385d29
[ 1798.799656][T24123] RDX: 00000000000012d8 RSI: 0000000020000040 RDI: 0000000000000003
[ 1798.799673][T24123] RBP: 00007f078f20e090 R08: 0000000000000000 R09: 0000000000000000
[ 1798.799690][T24123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1798.799705][T24123] R13: 0000000000000000 R14: 00007f078e575fa0 R15: 00007ffcc8116118
[ 1798.799741][T24123]  </TASK>
[ 1799.078786][ T5909] usb 7-1: USB disconnect, device number 57
[ 1799.088344][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1799.098093][ T5909] cp210x 7-1:0.0: device disconnected
[ 1800.852204][T24140] FAULT_INJECTION: forcing a failure.
[ 1800.852204][T24140] name failslab, interval 1, probability 0, space 0, times 0
[ 1800.886759][T24143] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[ 1800.957120][T24140] CPU: 1 UID: 0 PID: 24140 Comm: syz.4.5118 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1800.967960][T24140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1800.968913][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5123'.
[ 1800.978038][T24140] Call Trace:
[ 1800.978075][T24140]  <TASK>
[ 1800.978088][T24140]  dump_stack_lvl+0x241/0x360
[ 1800.978131][T24140]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1801.003157][T24140]  ? __pfx__printk+0x10/0x10
[ 1801.007799][T24140]  ? fs_reclaim_acquire+0x93/0x130
[ 1801.012958][T24140]  ? __pfx___might_resched+0x10/0x10
[ 1801.018299][T24140]  should_fail_ex+0x3b0/0x4e0
[ 1801.023029][T24140]  should_failslab+0xac/0x100
[ 1801.027762][T24140]  __kmalloc_noprof+0xdd/0x4c0
[ 1801.032605][T24140]  ? kstrtouint_from_user+0x128/0x190
[ 1801.038021][T24140]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1801.043796][T24140]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1801.049664][T24140]  tomoyo_path_number_perm+0x236/0x860
[ 1801.055163][T24140]  ? __lock_acquire+0x1397/0x2100
[ 1801.060229][T24140]  ? tomoyo_path_number_perm+0x206/0x860
[ 1801.065880][T24140]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1801.071905][T24140]  ? __fget_files+0x2a/0x410
[ 1801.076523][T24140]  ? __fget_files+0x2a/0x410
[ 1801.081147][T24140]  security_file_ioctl+0xc6/0x2a0
[ 1801.086199][T24140]  __se_sys_ioctl+0x46/0x170
[ 1801.090892][T24140]  do_syscall_64+0xf3/0x230
[ 1801.095418][T24140]  ? clear_bhb_loop+0x35/0x90
[ 1801.100109][T24140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1801.106021][T24140] RIP: 0033:0x7f95af385d29
[ 1801.110537][T24140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1801.130154][T24140] RSP: 002b:00007f95b024b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1801.138593][T24140] RAX: ffffffffffffffda RBX: 00007f95af575fa0 RCX: 00007f95af385d29
[ 1801.146589][T24140] RDX: 0000000020000040 RSI: 000000004008ae89 RDI: 0000000000000006
[ 1801.154577][T24140] RBP: 00007f95b024b090 R08: 0000000000000000 R09: 0000000000000000
[ 1801.162559][T24140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1801.170551][T24140] R13: 0000000000000000 R14: 00007f95af575fa0 R15: 00007fff0019a438
[ 1801.178550][T24140]  </TASK>
[ 1801.203655][T24140] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1803.006139][T24176] /dev/nullb0: Can't open blockdev
[ 1803.095266][T24178] sctp: [Deprecated]: syz.5.5132 (pid 24178) Use of int in max_burst socket option deprecated.
[ 1803.095266][T24178] Use struct sctp_assoc_value instead
[ 1809.815079][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5146'.
[ 1810.033475][ T5909] libceph: connect (1)[c::]:6789 error -101
[ 1810.083986][ T5909] libceph: mon0 (1)[c::]:6789 connect error
[ 1810.126401][ T5909] libceph: connect (1)[c::]:6789 error -101
[ 1810.169546][ T5909] libceph: mon0 (1)[c::]:6789 connect error
[ 1810.471334][ T5909] libceph: connect (1)[c::]:6789 error -101
[ 1810.482384][ T5909] libceph: mon0 (1)[c::]:6789 connect error
[ 1810.543784][T24245] ceph: No mds server is up or the cluster is laggy
[ 1811.310038][T24271] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5156'.
[ 1813.887889][T24298] FAULT_INJECTION: forcing a failure.
[ 1813.887889][T24298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1813.911923][T24298] CPU: 1 UID: 0 PID: 24298 Comm: syz.8.5167 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1813.922776][T24298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1813.932878][T24298] Call Trace:
[ 1813.936186][T24298]  <TASK>
[ 1813.939165][T24298]  dump_stack_lvl+0x241/0x360
[ 1813.941057][T24300] FAULT_INJECTION: forcing a failure.
[ 1813.941057][T24300] name failslab, interval 1, probability 0, space 0, times 0
[ 1813.943882][T24298]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1813.943921][T24298]  ? __pfx__printk+0x10/0x10
[ 1813.966317][T24298]  ? snprintf+0xda/0x120
[ 1813.970604][T24298]  should_fail_ex+0x3b0/0x4e0
[ 1813.975313][T24298]  _copy_to_user+0x31/0xb0
[ 1813.979766][T24298]  simple_read_from_buffer+0xca/0x150
[ 1813.985173][T24298]  proc_fail_nth_read+0x1e9/0x250
[ 1813.990243][T24298]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1813.995831][T24298]  ? rw_verify_area+0x55e/0x6f0
[ 1814.000727][T24298]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1814.006309][T24298]  vfs_read+0x1fc/0xb70
[ 1814.010498][T24298]  ? __pfx___mutex_lock+0x10/0x10
[ 1814.015560][T24298]  ? __pfx_vfs_read+0x10/0x10
[ 1814.020290][T24298]  ? __fget_files+0x2a/0x410
[ 1814.024926][T24298]  ? __fget_files+0x395/0x410
[ 1814.029643][T24298]  ? __fget_files+0x2a/0x410
[ 1814.034266][T24298]  ksys_read+0x18f/0x2b0
[ 1814.038545][T24298]  ? __pfx_ksys_read+0x10/0x10
[ 1814.043335][T24298]  ? do_syscall_64+0x100/0x230
[ 1814.048136][T24298]  ? do_syscall_64+0xb6/0x230
[ 1814.052855][T24298]  do_syscall_64+0xf3/0x230
[ 1814.057410][T24298]  ? clear_bhb_loop+0x35/0x90
[ 1814.062108][T24298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1814.068041][T24298] RIP: 0033:0x7ff04d38473c
[ 1814.072475][T24298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1814.092112][T24298] RSP: 002b:00007ff04b1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1814.100566][T24298] RAX: ffffffffffffffda RBX: 00007ff04d575fa0 RCX: 00007ff04d38473c
[ 1814.108562][T24298] RDX: 000000000000000f RSI: 00007ff04b1f60a0 RDI: 0000000000000004
[ 1814.116588][T24298] RBP: 00007ff04b1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1814.124594][T24298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1814.132583][T24298] R13: 0000000000000000 R14: 00007ff04d575fa0 R15: 00007ffddb0db058
[ 1814.140594][T24298]  </TASK>
[ 1814.143643][T24300] CPU: 0 UID: 0 PID: 24300 Comm: syz.5.5164 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1814.154445][T24300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1814.164602][T24300] Call Trace:
[ 1814.167891][T24300]  <TASK>
[ 1814.170834][T24300]  dump_stack_lvl+0x241/0x360
[ 1814.175640][T24300]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1814.180874][T24300]  ? __pfx__printk+0x10/0x10
[ 1814.185484][T24300]  ? ref_tracker_alloc+0x332/0x490
[ 1814.190628][T24300]  should_fail_ex+0x3b0/0x4e0
[ 1814.195319][T24300]  should_failslab+0xac/0x100
[ 1814.200039][T24300]  ? skb_clone+0x20c/0x390
[ 1814.204475][T24300]  kmem_cache_alloc_noprof+0x70/0x380
[ 1814.209883][T24300]  skb_clone+0x20c/0x390
[ 1814.214152][T24300]  __netlink_deliver_tap+0x3cc/0x7f0
[ 1814.219480][T24300]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1814.224696][T24300]  netlink_deliver_tap+0x19d/0x1b0
[ 1814.229825][T24300]  netlink_sendskb+0x68/0x140
[ 1814.234553][T24300]  netlink_unicast+0x39d/0x990
[ 1814.239619][T24300]  ? __pfx_netlink_unicast+0x10/0x10
[ 1814.244954][T24300]  netlink_rcv_skb+0x262/0x430
[ 1814.249737][T24300]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1814.255238][T24300]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1814.260607][T24300]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1814.265935][T24300]  netlink_unicast+0x7f6/0x990
[ 1814.270729][T24300]  ? __pfx_netlink_unicast+0x10/0x10
[ 1814.276034][T24300]  ? __virt_addr_valid+0x45f/0x530
[ 1814.281163][T24300]  ? __phys_addr_symbol+0x2f/0x70
[ 1814.286202][T24300]  ? __check_object_size+0x47a/0x730
[ 1814.291516][T24300]  netlink_sendmsg+0x8e4/0xcb0
[ 1814.296306][T24300]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1814.301621][T24300]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1814.306925][T24300]  __sock_sendmsg+0x221/0x270
[ 1814.311625][T24300]  ____sys_sendmsg+0x52a/0x7e0
[ 1814.316421][T24300]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1814.321810][T24300]  ? __fget_files+0x2a/0x410
[ 1814.326421][T24300]  ? __fget_files+0x2a/0x410
[ 1814.331036][T24300]  __sys_sendmsg+0x269/0x350
[ 1814.335648][T24300]  ? __pfx_lock_release+0x10/0x10
[ 1814.340689][T24300]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1814.345854][T24300]  ? __pfx_vfs_write+0x10/0x10
[ 1814.350659][T24300]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1814.357001][T24300]  ? do_syscall_64+0x100/0x230
[ 1814.361787][T24300]  ? do_syscall_64+0xb6/0x230
[ 1814.366494][T24300]  do_syscall_64+0xf3/0x230
[ 1814.371016][T24300]  ? clear_bhb_loop+0x35/0x90
[ 1814.375706][T24300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1814.381618][T24300] RIP: 0033:0x7f078e385d29
[ 1814.386072][T24300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1814.405729][T24300] RSP: 002b:00007f078f20e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1814.414167][T24300] RAX: ffffffffffffffda RBX: 00007f078e575fa0 RCX: 00007f078e385d29
[ 1814.422153][T24300] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000003
[ 1814.430137][T24300] RBP: 00007f078f20e090 R08: 0000000000000000 R09: 0000000000000000
[ 1814.438120][T24300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1814.446129][T24300] R13: 0000000000000000 R14: 00007f078e575fa0 R15: 00007ffcc8116118
[ 1814.454136][T24300]  </TASK>
[ 1814.989457][T24304] hub 6-0:1.0: USB hub found
[ 1814.994380][T24304] hub 6-0:1.0: 1 port detected
[ 1815.139214][T24308] binder: 24307:24308 unknown command 0
[ 1815.155215][T24308] binder: 24307:24308 ioctl c0306201 20004a40 returned -22
[ 1815.174190][T24310] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1815.561968][T24318] sp0: Synchronizing with TNC
[ 1816.576598][T22352] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[ 1816.867766][T22352] usb 6-1: not running at top speed; connect to a high speed hub
[ 1816.994929][T22352] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1817.177951][T22352] usb 6-1: config 1 interface 0 altsetting 247 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1817.398592][T23298] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1817.456305][T22352] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1817.518349][T22352] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1817.615869][T22352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1817.627536][T23298] usb 7-1: Using ep0 maxpacket: 8
[ 1817.627550][T22352] usb 6-1: Product: syz
[ 1817.627572][T22352] usb 6-1: Manufacturer: 䴁꿣쁯姅꩓亂ꏪ©嘕쫉줇⸕崆躈밆撴ແ૶凉猭깉䈢䓦쉫혦腲뱇ᮙ㈒긗ϊ䬬霳끓犷ꔧ韘꣇趚ꨙ耚˦㾖שׂ㴊㻪紤檽咳㿣䀒茏䲂璁겦휆蜯衻듶鼙缌樍·ṡ㩺ᙪ崉꤄⾿⩟陓ۚ᧬⋡㰔
[ 1817.641589][T23298] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1817.673451][T22352] usb 6-1: SerialNumber: syz
[ 1817.690915][T24318] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1817.708811][T24318] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1817.773046][T23298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1817.799577][T24338] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5180'.
[ 1817.818169][T23298] usb 7-1: Product: syz
[ 1817.823596][T23298] usb 7-1: Manufacturer: syz
[ 1817.842227][T23298] usb 7-1: SerialNumber: syz
[ 1817.867108][T23298] usb 7-1: config 0 descriptor??
[ 1817.906183][T23298] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1818.112640][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5182'.
[ 1818.327273][T22352] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 1818.380584][T22352] usb 6-1: USB disconnect, device number 27
[ 1818.407295][T23298] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[ 1818.428775][T23298] sq905 7-1:0.0: probe with driver sq905 failed with error -71
[ 1818.453853][T23298] usb 7-1: USB disconnect, device number 58
[ 1819.158010][T24350] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5185'.
[ 1819.314560][ T5922] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1819.536856][T24358] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1819.544779][ T5922] usb 5-1: Using ep0 maxpacket: 16
[ 1819.565533][ T5922] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=d9.10
[ 1819.599699][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.618106][ T5922] usb 5-1: Product: syz
[ 1819.638375][ T5922] usb 5-1: Manufacturer: syz
[ 1819.643090][ T5922] usb 5-1: SerialNumber: syz
[ 1819.667729][ T5922] usb 5-1: config 0 descriptor??
[ 1819.688693][ T5922] usbsevseg 5-1:0.0: USB 7 Segment device now attached
[ 1819.714996][T24365] input: syz0 as /devices/virtual/input/input47
[ 1822.240952][T23296] usb 5-1: USB disconnect, device number 79
[ 1822.290805][T23296] usbsevseg 5-1:0.0: USB 7 Segment now disconnected
[ 1823.513253][T24398] dvmrp0: entered allmulticast mode
[ 1823.525595][T24399] pimreg: entered allmulticast mode
[ 1823.601874][T23296] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1823.785529][T23296] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1823.806743][T23296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1823.831764][T23296] usb 6-1: config 0 descriptor??
[ 1823.845454][T23296] cp210x 6-1:0.0: cp210x converter detected
[ 1824.250174][T23296] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1824.326203][T23296] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -32
[ 1824.335365][T23296] cp210x 6-1:0.0: GPIO initialisation failed: -32
[ 1824.343364][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5198'.
[ 1824.366030][T23296] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1824.432859][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5198'.
[ 1824.500023][ T5922] usb 6-1: USB disconnect, device number 28
[ 1824.510781][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1824.608277][ T5922] cp210x 6-1:0.0: device disconnected
[ 1824.781767][T10497] Bluetooth: hci4: command 0x0406 tx timeout
[ 1825.253380][T24421] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1826.053510][ T5922] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1826.630010][ T5922] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1826.680936][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1826.824167][ T5922] usb 6-1: Product: syz
[ 1826.828643][ T5922] usb 6-1: Manufacturer: syz
[ 1826.838584][ T5922] usb 6-1: SerialNumber: syz
[ 1826.852362][ T5922] usb 6-1: config 0 descriptor??
[ 1827.098302][T24437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1827.135403][T24437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1827.136082][T24438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1827.182430][T24438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1827.236943][ T5922] usb 6-1: USB disconnect, device number 29
[ 1828.144584][T24448] hub 6-0:1.0: USB hub found
[ 1828.149487][T24448] hub 6-0:1.0: 1 port detected
[ 1829.094644][T24461] ALSA: mixer_oss: invalid OSS volume '0'
[ 1829.108115][T24461] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:'
[ 1829.116400][T24461] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:'
[ 1829.124407][T24461] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:'
[ 1829.492947][T24461] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:'
[ 1829.499976][T24461] ALSA: mixer_oss: invalid OSS volume 'Referenced:'
[ 1829.539633][T24461] ALSA: mixer_oss: invalid OSS volume 'Anonymous:'
[ 1829.623909][T24456] netlink: 'syz.5.5221': attribute type 3 has an invalid length.
[ 1830.226454][T24469] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1830.232608][T24469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1831.130906][T24469] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1831.275607][T24469] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1831.363002][T24469] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1831.477405][T24469] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1831.521311][T24469] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1831.581203][T24491] hub 6-0:1.0: USB hub found
[ 1831.586934][T24491] hub 6-0:1.0: 1 port detected
[ 1831.730430][T24495] nbd: nbd0 already in use
[ 1831.861207][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5233'.
[ 1831.954859][T24496] gre0 speed is unknown, defaulting to 1000
[ 1832.159801][T21308] Bluetooth: hci1: command 0x0406 tx timeout
[ 1832.165992][T10497] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1833.099493][T24506] Invalid logical block size (43605)
[ 1833.227703][T21308] Bluetooth: hci0: command 0x0406 tx timeout
[ 1833.456462][T21308] Bluetooth: hci4: command 0x0406 tx timeout
[ 1834.161148][T21308] Bluetooth: hci1: command 0x0406 tx timeout
[ 1834.642413][T24520] hub 6-0:1.0: USB hub found
[ 1834.669303][T24520] hub 6-0:1.0: 1 port detected
[ 1834.962145][T24522] FAULT_INJECTION: forcing a failure.
[ 1834.962145][T24522] name failslab, interval 1, probability 0, space 0, times 0
[ 1835.047772][T24522] CPU: 1 UID: 0 PID: 24522 Comm: syz.6.5239 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1835.058633][T24522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1835.068741][T24522] Call Trace:
[ 1835.072062][T24522]  <TASK>
[ 1835.075029][T24522]  dump_stack_lvl+0x241/0x360
[ 1835.079762][T24522]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1835.085011][T24522]  ? __pfx__printk+0x10/0x10
[ 1835.089652][T24522]  ? __kmalloc_cache_noprof+0x48/0x390
[ 1835.095155][T24522]  ? __pfx___might_resched+0x10/0x10
[ 1835.100518][T24522]  should_fail_ex+0x3b0/0x4e0
[ 1835.105249][T24522]  should_failslab+0xac/0x100
[ 1835.109984][T24522]  __kmalloc_cache_noprof+0x70/0x390
[ 1835.115303][T24522]  ? snd_pcm_oss_change_params_locked+0x1b6/0x3d60
[ 1835.121850][T24522]  snd_pcm_oss_change_params_locked+0x1b6/0x3d60
[ 1835.128231][T24522]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1835.134177][T24522]  ? rcu_is_watching+0x15/0xb0
[ 1835.138987][T24522]  ? trace_contention_end+0x3c/0x120
[ 1835.144320][T24522]  ? __mutex_lock+0x37f/0xee0
[ 1835.149064][T24522]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1835.155880][T24522]  ? __pfx_lock_acquire+0x10/0x10
[ 1835.160961][T24522]  ? get_pid_task+0x23/0x1f0
[ 1835.165593][T24522]  ? mark_lock+0x9a/0x360
[ 1835.170057][T24522]  snd_pcm_oss_write+0x2cf/0x11f0
[ 1835.175123][T24522]  ? __lock_acquire+0x1397/0x2100
[ 1835.180211][T24522]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1835.185716][T24522]  ? bpf_lsm_file_permission+0x9/0x10
[ 1835.191137][T24522]  ? security_file_permission+0x74/0x280
[ 1835.196833][T24522]  ? rw_verify_area+0x1c3/0x6f0
[ 1835.201821][T24522]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1835.207430][T24522]  vfs_write+0x2a3/0xd30
[ 1835.211733][T24522]  ? __pfx_vfs_write+0x10/0x10
[ 1835.216549][T24522]  ? __fget_files+0x2a/0x410
[ 1835.221179][T24522]  ? __fget_files+0x395/0x410
[ 1835.225893][T24522]  ? __fget_files+0x2a/0x410
[ 1835.230537][T24522]  ksys_write+0x18f/0x2b0
[ 1835.234915][T24522]  ? __pfx_ksys_write+0x10/0x10
[ 1835.239808][T24522]  ? do_syscall_64+0x100/0x230
[ 1835.244617][T24522]  ? do_syscall_64+0xb6/0x230
[ 1835.249343][T24522]  do_syscall_64+0xf3/0x230
[ 1835.253889][T24522]  ? clear_bhb_loop+0x35/0x90
[ 1835.258616][T24522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.264558][T24522] RIP: 0033:0x7f55bfd85d29
[ 1835.269005][T24522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1835.288653][T24522] RSP: 002b:00007f55c0bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1835.297115][T24522] RAX: ffffffffffffffda RBX: 00007f55bff75fa0 RCX: 00007f55bfd85d29
[ 1835.305128][T24522] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003
[ 1835.313140][T24522] RBP: 00007f55c0bae090 R08: 0000000000000000 R09: 0000000000000000
[ 1835.321147][T24522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1835.329160][T24522] R13: 0000000000000000 R14: 00007f55bff75fa0 R15: 00007ffdc1f15258
[ 1835.337192][T24522]  </TASK>
[ 1835.368622][T21308] Bluetooth: hci0: command 0x0406 tx timeout
[ 1835.438511][T21308] Bluetooth: hci4: command 0x0406 tx timeout
[ 1835.645066][T24534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1835.753765][T24534] 
[ 1835.756178][T24534] ======================================================
[ 1835.763229][T24534] WARNING: possible circular locking dependency detected
[ 1835.770278][T24534] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted
[ 1835.777436][T24534] ------------------------------------------------------
[ 1835.784486][T24534] syz.6.5244/24534 is trying to acquire lock:
[ 1835.790587][T24534] ffff888056288168 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x45/0x70
[ 1835.800423][T24534] 
[ 1835.800423][T24534] but task is already holding lock:
[ 1835.807833][T24534] ffff888046441c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500
[ 1835.817247][T24534] 
[ 1835.817247][T24534] which lock already depends on the new lock.
[ 1835.817247][T24534] 
[ 1835.827690][T24534] 
[ 1835.827690][T24534] the existing dependency chain (in reverse order) is:
[ 1835.836748][T24534] 
[ 1835.836748][T24534] -> #3 (&of->mutex){+.+.}-{4:4}:
[ 1835.844034][T24534]        lock_acquire+0x1ed/0x550
[ 1835.849118][T24534]        __mutex_lock+0x1ac/0xee0
[ 1835.854276][T24534]        kernfs_fop_write_iter+0x1ea/0x500
[ 1835.860111][T24534]        iter_file_splice_write+0xbfa/0x1510
[ 1835.866204][T24534]        do_splice+0xd68/0x18e0
[ 1835.871084][T24534]        __se_sys_splice+0x2e0/0x450
[ 1835.876392][T24534]        do_syscall_64+0xf3/0x230
[ 1835.881443][T24534]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.887877][T24534] 
[ 1835.887877][T24534] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[ 1835.895287][T24534]        lock_acquire+0x1ed/0x550
[ 1835.900340][T24534]        __mutex_lock+0x1ac/0xee0
[ 1835.905391][T24534]        iter_file_splice_write+0x330/0x1510
[ 1835.911394][T24534]        do_splice+0xd68/0x18e0
[ 1835.916279][T24534]        __se_sys_splice+0x2e0/0x450
[ 1835.921596][T24534]        do_syscall_64+0xf3/0x230
[ 1835.926640][T24534]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.933081][T24534] 
[ 1835.933081][T24534] -> #1 (sb_writers#5){.+.+}-{0:0}:
[ 1835.940493][T24534]        lock_acquire+0x1ed/0x550
[ 1835.945530][T24534]        sb_start_write+0x4d/0x1c0
[ 1835.950681][T24534]        mnt_want_write+0x3f/0x90
[ 1835.955741][T24534]        ovl_create_object+0x13a/0x3a0
[ 1835.961229][T24534]        path_openat+0x1c03/0x3590
[ 1835.966363][T24534]        do_filp_open+0x27f/0x4e0
[ 1835.971402][T24534]        do_sys_openat2+0x13e/0x1d0
[ 1835.976613][T24534]        __x64_sys_openat+0x247/0x2a0
[ 1835.981995][T24534]        do_syscall_64+0xf3/0x230
[ 1835.987040][T24534]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.993471][T24534] 
[ 1835.993471][T24534] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[ 1836.002180][T24534]        validate_chain+0x18ef/0x5920
[ 1836.007566][T24534]        __lock_acquire+0x1397/0x2100
[ 1836.012958][T24534]        lock_acquire+0x1ed/0x550
[ 1836.017987][T24534]        down_read+0xb1/0xa40
[ 1836.022671][T24534]        lookup_slow+0x45/0x70
[ 1836.027440][T24534]        walk_component+0x2e1/0x410
[ 1836.032644][T24534]        path_lookupat+0x16f/0x450
[ 1836.037764][T24534]        filename_lookup+0x2a3/0x670
[ 1836.043064][T24534]        kern_path+0x35/0x50
[ 1836.047665][T24534]        lookup_bdev+0xc5/0x290
[ 1836.052535][T24534]        resume_store+0x1a0/0x710
[ 1836.057571][T24534]        kernfs_fop_write_iter+0x3a0/0x500
[ 1836.063384][T24534]        vfs_write+0xaeb/0xd30
[ 1836.068164][T24534]        ksys_write+0x18f/0x2b0
[ 1836.073028][T24534]        do_syscall_64+0xf3/0x230
[ 1836.078075][T24534]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1836.084510][T24534] 
[ 1836.084510][T24534] other info that might help us debug this:
[ 1836.084510][T24534] 
[ 1836.094753][T24534] Chain exists of:
[ 1836.094753][T24534]   &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex
[ 1836.094753][T24534] 
[ 1836.108163][T24534]  Possible unsafe locking scenario:
[ 1836.108163][T24534] 
[ 1836.115618][T24534]        CPU0                    CPU1
[ 1836.120984][T24534]        ----                    ----
[ 1836.126372][T24534]   lock(&of->mutex);
[ 1836.130372][T24534]                                lock(&pipe->mutex);
[ 1836.137319][T24534]                                lock(&of->mutex);
[ 1836.143831][T24534]   rlock(&ovl_i_mutex_dir_key[depth]);
[ 1836.149390][T24534] 
[ 1836.149390][T24534]  *** DEADLOCK ***
[ 1836.149390][T24534] 
[ 1836.157535][T24534] 4 locks held by syz.6.5244/24534:
[ 1836.162736][T24534]  #0: ffff88807d9a29b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320
[ 1836.171840][T24534]  #1: ffff888030c60420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30
[ 1836.180749][T24534]  #2: ffff888046441c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500
[ 1836.190521][T24534]  #3: ffff88801e2d40f8 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[ 1836.200570][T24534] 
[ 1836.200570][T24534] stack backtrace:
[ 1836.206460][T24534] CPU: 0 UID: 0 PID: 24534 Comm: syz.6.5244 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[ 1836.217233][T24534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1836.227296][T24534] Call Trace:
[ 1836.230583][T24534]  <TASK>
[ 1836.233520][T24534]  dump_stack_lvl+0x241/0x360
[ 1836.238216][T24534]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1836.243434][T24534]  ? __pfx__printk+0x10/0x10
[ 1836.248038][T24534]  print_circular_bug+0x13a/0x1b0
[ 1836.253083][T24534]  check_noncircular+0x36a/0x4a0
[ 1836.258043][T24534]  ? __pfx_check_noncircular+0x10/0x10
[ 1836.263523][T24534]  validate_chain+0x18ef/0x5920
[ 1836.268397][T24534]  ? __pfx_validate_chain+0x10/0x10
[ 1836.273620][T24534]  ? __pfx_validate_chain+0x10/0x10
[ 1836.278836][T24534]  ? __pfx_validate_chain+0x10/0x10
[ 1836.284048][T24534]  ? __pfx_validate_chain+0x10/0x10
[ 1836.289266][T24534]  ? register_lock_class+0x102/0x980
[ 1836.294562][T24534]  ? __pfx_register_lock_class+0x10/0x10
[ 1836.300209][T24534]  ? mark_lock+0x9a/0x360
[ 1836.304547][T24534]  __lock_acquire+0x1397/0x2100
[ 1836.309413][T24534]  lock_acquire+0x1ed/0x550
[ 1836.313925][T24534]  ? lookup_slow+0x45/0x70
[ 1836.318366][T24534]  ? __pfx_lock_acquire+0x10/0x10
[ 1836.323401][T24534]  ? __pfx___might_resched+0x10/0x10
[ 1836.328704][T24534]  ? __pfx_lock_acquire+0x10/0x10
[ 1836.333735][T24534]  ? __d_lookup+0x64/0x7b0
[ 1836.338166][T24534]  down_read+0xb1/0xa40
[ 1836.342327][T24534]  ? lookup_slow+0x45/0x70
[ 1836.346759][T24534]  ? __pfx_down_read+0x10/0x10
[ 1836.351534][T24534]  ? __d_lookup+0x64/0x7b0
[ 1836.355961][T24534]  ? __d_lookup+0x706/0x7b0
[ 1836.360475][T24534]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1836.365949][T24534]  ? security_inode_permission+0xbc/0x320
[ 1836.371685][T24534]  ? make_vfsuid+0x52/0xa0
[ 1836.376120][T24534]  ? link_path_walk+0xc60/0xea0
[ 1836.381165][T24534]  lookup_slow+0x45/0x70
[ 1836.385439][T24534]  walk_component+0x2e1/0x410
[ 1836.390136][T24534]  path_lookupat+0x16f/0x450
[ 1836.394768][T24534]  filename_lookup+0x2a3/0x670
[ 1836.399555][T24534]  ? __pfx_filename_lookup+0x10/0x10
[ 1836.404952][T24534]  ? rcu_is_watching+0x15/0xb0
[ 1836.409737][T24534]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 1836.415130][T24534]  ? getname_kernel+0x140/0x2f0
[ 1836.419996][T24534]  kern_path+0x35/0x50
[ 1836.424078][T24534]  lookup_bdev+0xc5/0x290
[ 1836.428417][T24534]  ? rcu_is_watching+0x15/0xb0
[ 1836.433194][T24534]  ? __pfx_lookup_bdev+0x10/0x10
[ 1836.438149][T24534]  ? __asan_memcpy+0x40/0x70
[ 1836.442819][T24534]  resume_store+0x1a0/0x710
[ 1836.447352][T24534]  ? kernfs_fop_write_iter+0x1ea/0x500
[ 1836.452848][T24534]  ? __pfx_resume_store+0x10/0x10
[ 1836.457921][T24534]  ? sysfs_kf_write+0x182/0x2a0
[ 1836.462795][T24534]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1836.468022][T24534]  kernfs_fop_write_iter+0x3a0/0x500
[ 1836.473341][T24534]  vfs_write+0xaeb/0xd30
[ 1836.477627][T24534]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1836.483456][T24534]  ? __pfx_vfs_write+0x10/0x10
[ 1836.488252][T24534]  ? __fget_files+0x2a/0x410
[ 1836.492883][T24534]  ? __fget_files+0x2a/0x410
[ 1836.497504][T24534]  ksys_write+0x18f/0x2b0
[ 1836.501878][T24534]  ? __pfx_ksys_write+0x10/0x10
[ 1836.506758][T24534]  ? do_syscall_64+0x100/0x230
[ 1836.511541][T24534]  ? do_syscall_64+0xb6/0x230
[ 1836.516237][T24534]  do_syscall_64+0xf3/0x230
[ 1836.520776][T24534]  ? clear_bhb_loop+0x35/0x90
[ 1836.525466][T24534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1836.531376][T24534] RIP: 0033:0x7f55bfd85d29
[ 1836.535849][T24534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1836.555464][T24534] RSP: 002b:00007f55c0bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1836.563893][T24534] RAX: ffffffffffffffda RBX: 00007f55bff75fa0 RCX: 00007f55bfd85d29
[ 1836.571874][T24534] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003
[ 1836.579938][T24534] RBP: 00007f55bfe01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1836.587917][T24534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1836.595896][T24534] R13: 0000000000000000 R14: 00007f55bff75fa0 R15: 00007ffdc1f15258
[ 1836.603971][T24534]  </TASK>
[ 1836.886708][T24534] PM: Image not found (code -6)
[ 1837.081875][T24545] hub 6-0:1.0: USB hub found
[ 1837.087003][T24545] hub 6-0:1.0: 1 port detected