last executing test programs:

17m42.09902653s ago: executing program 32 (id=173):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x8, 0x6a, 0x8001})
socketpair(0x8000000000001e, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
dup(r3)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = gettid()
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000200)=0x4d)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept(r0, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000480)=0x81, 0x4)
recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/60, 0x14, 0x0, 0x0, 0xffffffe0)

16m46.602068542s ago: executing program 33 (id=308):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$comedi(0xffffffffffffff9c, 0x0, 0x101080, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

15m47.623823425s ago: executing program 34 (id=452):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setrlimit(0x5, &(0x7f00000000c0)={0x7, 0x2})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
accept4(r4, 0x0, 0x0, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$EVIOCRMFF(r8, 0x550c, &(0x7f0000000000)=0x8)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

15m46.577660988s ago: executing program 35 (id=457):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x2, &(0x7f0000000000)={0x11, "14a6c63df19ca6e4482707dab7299602aed83463604d70b41d4008e300"}})

15m44.959855058s ago: executing program 36 (id=464):
socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x20040010)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x40ab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="0500000000000000000002000000", @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000"], 0x80}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x70, 0x7, 0x6, 0xff, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)

11m45.752561979s ago: executing program 37 (id=1063):
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x2000081)

11m38.228441352s ago: executing program 38 (id=1076):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0)
capset(0x0, 0x0)

8m4.134948626s ago: executing program 5 (id=1532):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0x4000f, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x1000, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x6, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x3, 0x5, 0xd091, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x32, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e1, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x10000006, 0x0, 0xd14, 0x5, 0x2f, 0xa, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42], [0x3, 0x3ff, 0x0, 0x805, 0x1, 0x1100, 0x3, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000004, 0x5, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x409, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x1, 0xa2ed, 0x2, 0x25], [0x9, 0x5, 0x7, 0xb, 0x5, 0x10001, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x4006, 0x6, 0x8, 0x579, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x8001, 0x20002, 0x4b0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0x6, 0xffff, 0x2, 0x7ff, 0xffff, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x1007f, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0xa, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8m0.948751643s ago: executing program 5 (id=1539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000540))

7m59.744199792s ago: executing program 5 (id=1544):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, <r8=>r6, 0x2})
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8})
ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f00000001c0))
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, 0x0, 0x48000)

7m57.715053744s ago: executing program 39 (id=1515):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

7m56.110339453s ago: executing program 5 (id=1548):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
socket$inet6(0xa, 0x2, 0xfffffffc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48)
r4 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)

7m53.413139197s ago: executing program 5 (id=1549):
syz_open_dev$loop(0x0, 0x75f, 0xa382)
syz_open_dev$vim2m(0x0, 0x10002, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)

7m51.227578827s ago: executing program 5 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$inet_buf(r2, 0x118, 0x4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000005c0)=""/157, 0x9d}], 0x3}, 0x1}], 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)

7m35.165227675s ago: executing program 40 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$inet_buf(r2, 0x118, 0x4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000005c0)=""/157, 0x9d}], 0x3}, 0x1}], 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)

7m13.465689919s ago: executing program 6 (id=1619):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e}, 0x28)

7m13.209152448s ago: executing program 6 (id=1621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0))

7m12.143966339s ago: executing program 6 (id=1623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

7m11.595269713s ago: executing program 6 (id=1626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x44010)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/143)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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")
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x814)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x420140, 0x40, 0xc}, 0x18)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='\xff\xff', &(0x7f0000000480)='./file0\x00', r1)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000041)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=<r4=>0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000)
r5 = syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf5cbb8468831b115, &(0x7f0000010840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x19a0}}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x12}}]}}, 0x0, 0x0, &(0x7f00000109c0)="b073155af2cf8a62b1cc3e61543d8ab9a20920471a49fdd02f905a9e03b11dfe4bcd188b3acf0400be8076639d58449cabb430cbcc32bf828422364320edd34c9a8e14e3a11ac448ad1c13204f025e6b909c20b8fe80aecf3cf8c8b72416d94655d7ec116cda0130e895f4d742224983a95d61783e127deaba403dc3389bc556d9a643248a972ccd11fa8bc45893c162c91321f4df96479e09f7d1c519c5bd97bcffaa57ac06c1152a15ec8229829e553ae3697082d69569a7ba26a906")
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000011ac0)=@IORING_OP_RENAMEAT={0x23, 0x68, 0x0, r5, &(0x7f0000010a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000011a80)='./file0/file0\x00', r1, 0x0, 0x1, {0x0, r6}})
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000011b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000011b40)=0x14)
r8 = accept$packet(r7, 0x0, &(0x7f0000011b80))
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000011c80)={&(0x7f0000011bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000011c40)={&(0x7f0000011c00)={0x2c, 0x1, 0x7, 0x201, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x71}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008811}, 0x20000000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000011dc0)={&(0x7f0000011cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000011d80)={&(0x7f0000011d00)={0x50, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xdcf}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
pipe2$9p(&(0x7f0000011e00)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80080)
write$P9_RXATTRWALK(r9, &(0x7f0000011e40)={0xf, 0x1f, 0x1}, 0xf)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000011e80)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000012380)={0x6, &(0x7f00000122c0)=[{0x8000, 0xe1, &(0x7f0000011f00)="0346871eae9854d977483a9cf636a1c89c5ad615156fcd7a72f49b8a08e4fda92c3318e3817170ae9aaaba496ab53fd44ec20194b5240817d8e6132aa5e0b35a60c4d8eda31ac44e5e384b19247cddeb9c27b3145a8017d8ebcca4f001725fa34a22acf0339d64b60598ece727329d5d5429189a962eaf24420d453a481ae569b9d7699e849ca260ed613ff7ca2defa3978e067bf15e38aee5e5a27a24be49f70b52d76a0133e8afd40c67ee46bef2ebc195e56c7257d61edf83e756952142777ce9fe2f6410779f5cc9e939bafdfec5563f71e52834b5c3cf27fafe3d5c8ce4b9", 0x1}, {0x7, 0x45, &(0x7f0000012000)="a0c16c6a34c370676a568e596018f9de4c1f3908ab72e653b87553982b1d8edc019b7dbf1979ccbcb1e236bfc3f0beb48b7160f29d74f4110661c1b56c6455fd647207e126"}, {0x1, 0xaf, &(0x7f0000012080)="423fecb22b64108c7dd671e5868ca4e6dfcbc6cd27a5f2f800490f167a97f42512a461b0d671236bef5fd17b30f3d4196023b7980cb1aa5c8950cb2f941cac7d2028e45ef44cc652a108ec955d055fbf1926ddc78bb7835d69252df69ead68d7c38d513c9ab1d03c9372317f928fab739ecfa38cc479114f08fab6bb8c1e1a9631dc5aa7a0e1313be52535d6bb90d66e03b4034d1afb0055c694826ad7f29a887fcc22c8a13085fab07868346577ed"}, {0x3, 0x8b, &(0x7f0000012140)="5d2ed7ace8cda4bb83f5dc4164d103df3aa1ba1e65d0e7ae4a0e0952e27db8b46270b94f3aaefb208a2b055b03956db25c73dca733f8156e1503420b7519a85f09cb82f0f6382cf0fb631290aa711d0c3f3789005aeaf9ded6981e8eb8742b0eab527f34a43e156142e82fa212ab7051ac0a94e01fd4a571fc2b50ec09fdae49d6568ad0d15242c6fa1511", 0x1, 0x1}, {0x0, 0x6c, &(0x7f0000012200)="3355624c5a35f203dadd743b00d7d1a8da4610ca1e52c2c258da653c083ea2d2aef3167ba23e80de110385a924b1603981a5580be5a5b9b0c5e0019cb5e61b7a55cb8eeead242e5b0aa515f0af59f3cb83b6381af9de6e8be7b77a07ad43aaaab9fa6f73863ce1eeb96133bb", 0x1, 0x1}, {0x400, 0x31, &(0x7f0000012280)="bec29ad0e8050c071739bc2a998aa56e130ad6f51fc7889240bc8783585b9a7a91b8a76be4ad64b45016db14ca3e8ef357"}]})
sendmsg$sock(r8, &(0x7f0000012bc0)={&(0x7f00000123c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x2}}, 0x80, &(0x7f0000012a80)=[{&(0x7f0000012440)="a6e96e6fb62bfc1f3cc06e6e99f8015be9b2447a5c45f3a18ddb6b215594f442a43ae9d9fe1bd2cea0ab9ce1f2cfd2f2e95d8a611278d467b98b3cae2caa91327f6e476e7658e001c89b925acf0eea894dd5ec289122dad9a93ff5e97c38bd824160ecf40de44881e86da0a833b65df0b1acd7c861b6321938f315b87e803e1dea7a010332b080be5ceef834db853fb4", 0x90}, {&(0x7f0000012500)="1f4e3528ace0566ca882c6f73e4cf4747191701153b57fd8bd9b25ae9a8f72ee2b56b21856c736b43a5cf0d03ff0c6a5337509d1df803860011ae1f6f5a4530aa13843a2eb76c0fb1c13b0269de0dd71d6cbf9cf0a10403ac2aa5c8054982b226d7218861407faed77aa782761dc83c450794420f2b28206944b6a697405bf92ce7881aeed1675ed5f6afc0a91065ad051ba93cef4fc78d54af8eeb382fb1965f784519a0773dec1fd24dafe740494cedb0e1c0db4868e31adab57fa7e3c7c1d", 0xc0}, {&(0x7f00000125c0)="e2b1d31bdd5954e520b3ae68c682d9f3c302196684fd60e86b12e58ebb21e710be25f6246e7779db90a3017bcb2a8a240e0d7f75fc545b502e3133651c408410c183430612a9951407e50cf7a465d9fefa09ad7d0b52c4fd1bc2cd3aa2999fec7ab768a62f31b167a864d2aa6bcd9ae299d0d1cee4f8e406aacaaf644de21564c233133b029639d415fb2aa588a99808ca50b73e11872e2cc74555c19773e56bab01c8d2da0baaaf69886bd2e74c07fcbdf42811d0e2967200b9a2990b47a8d4de9b836a2a7178f9ce1ec51c", 0xcc}, {&(0x7f00000126c0)="b710a1447804a8a9c67816fffeec2766a53e3d4710d823c1faa461ecb5290ec5491de6f8c9fe0d1f2ab3eccaa2b19f1f589a97a5acc497d414e7a068aaebd3bc41ec1e72418a775156410966f2e222c7cd9551de8588da92542b104dcf67b93dbadf5ed1920660474bcd79018cdcdda25e8bc899bb2428feed82aea07bd4939865128a1ed660e1b8809d55baf91f3687b3d8a449a366878b", 0x98}, {&(0x7f0000012780)="23b92faf7de76e6325094e62e80e585a11a972cd83ccfbd2c3e787627822239545b0687f9295221f210c70dd1c788801bbeac4d6dfc1b5aaa623e7944e256b1339ca3229e3f6be6081a09075305949f9fa5afe3eff2053852bdc4b2dd3", 0x5d}, {&(0x7f0000012800)="8047cd805079b45fd3e46c44526eee7371cfbdd3eb3aa3876140941859d06358f371d5b82036b04e7e82d28280424e3d8c0f239b274c5d24e1e540a985468c906f8ef22be3404a4c19ab4010013e89ed60fa7864556b2f03945fa1f4735ce7486436439db695c191c9b4cf80c945d72729b3c6ec0ad8c1523c92902a3b45bfd10ecf68ebf9b0121157ca68cf80f96bbe2bbd0c19607b16e5a6fc2fb5c6d8344bbd817bf92a4bb6f10bcda1c770f79465ebdedb16c03b0d65879381c73e78b259d5dcd4fcf192da7a48c03be3b2a75457fb62f1ec8f5418662533b606f2235e95f85f509dd5dacb6328b276ab9169e839", 0xf0}, {&(0x7f0000012900)="d1155eae2706b0d241dcd9be1ca36627982099f024530fd530337e316155cd29e2e512adc89bd67aa519686a1918f97856dcb58a5ac673c8c3452015b9198be5ba23cc387821588d7d31eacab90f735c2b97e4408536b1c8d61c85002e297ad69b00c2", 0x63}, {&(0x7f0000012980)="431db909d05c4e09fba1111c660c737b99084bbbeb72e746505eaa42f5d309a1a2d7917b6da6c4dc52c18c3528beba1b3b9fb054ef318a74c06e87439447b7be1b613de4689ad4691791c95a4d9a89273073810b08e19a3e9fa342c6bf9d947694a8331b9b07e234539818d09f9adef78df3c8120cf2b3e5b2ba775a7d5a73356ce83ad03555f5d2cff58a52a2de363c85156e868f78198e1896d850ad7e14068f3a012d11c60cf37d8be0b983c1d3305413ba503433cf", 0xb7}, {&(0x7f0000012a40)="ab651c6cb40cdb714d5357137612bd4cbc770731ced40cb3961ea26a2504ddd058189260317ead0716e8b1344f834cb4c9b1e12c", 0x34}], 0x9, &(0x7f0000012b40)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xfd}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x78}, 0x4000)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000012c00), 0x200802, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000012d00)={0x28, 0x1, 0x0, 0x0, <r11=>0x0, 0x0, 0x0, 0xa3, &(0x7f0000012c40)="f092f1d67088b82f0dd2de00834e9db3276d8eb13d9e3b69333cf481b3dfe85505698784336b3bdc46bbdb369a0a12c123069f8ae2a856aaf8c277b2ebce934b1cc7e84966b11c5132028e08ac9a12253d3f97b47447be24f4a8ae0fd803aadc10906d56028a12a5ba7d376384547aa532e4f588e3f559987fd1ea822be61ec9275f083369eaf3ab979497872b3ca6d2f53d0fbd7b37b1121a6e2fcb4e9fd9e039c27d"})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r10, 0x3ba0, &(0x7f0000012e40)={0x48, 0x3, r11, 0x0, 0xe, 0xc8, &(0x7f0000012d40)="971eac42d61bb4e17cd3f78231d85ef13ed72c4b196b65aa19f156429d83bba6302b85cd19198351693301aaf80fa91bee01ec15a45c98a481b83534d9bc60f670f3994c40fdccc7f114e0d250da97972f2b7f4fac91f30920d790de1fb69f84578775ccaf4c0d120f390d1e3e5c52c1f1d6e1486f254dcd9fdc1fd2cd105d9844a843a29ff2afb4a6ed46e4285519d63e4dd980c09b161e8adc724600a4ab0583e763ebb6a5e0d75a7a2e5e24b674bb66116da398b3cc205d818e5a4a9d81dece8efc7eeec7aadc"})

7m11.232036169s ago: executing program 6 (id=1627):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x4, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

7m8.867412239s ago: executing program 6 (id=1629):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_secret(0x80000)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
readahead(r1, 0x7, 0x4000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6m52.145125735s ago: executing program 41 (id=1629):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_secret(0x80000)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
readahead(r1, 0x7, 0x4000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m46.721053877s ago: executing program 9 (id=2061):
r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0)
epoll_create1(0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020400)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

3m45.925430133s ago: executing program 9 (id=2062):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='5\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000000c0), 0x1001)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

3m44.922497979s ago: executing program 9 (id=2065):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write$dsp(r3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0)

3m40.856216011s ago: executing program 9 (id=2083):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r8, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}]}, 0x38}}, 0x0)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

3m37.470317692s ago: executing program 9 (id=2090):
socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x20040010)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x40ab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="0500000000000000000002000000", @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000"], 0x80}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x70, 0x7, 0x6, 0xff, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r5, 0x0)
setpgid(0x0, r5)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)

3m31.157125799s ago: executing program 7 (id=2106):
syz_open_procfs(0x0, &(0x7f0000002540)='net/l2cap\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x1a8, 0x0)
ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0})
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000000c0)={<r7=>0x0, 0x2df}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2c, 0x42cd, 0x7f3, 0x3, 0xb6a, 0xf, 0x0, {r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x7, 0x4, 0x9, 0x6}}, &(0x7f0000000240)=0xb0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(r6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000400)={r9, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84)
syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

3m27.166540316s ago: executing program 9 (id=2113):
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

3m26.446122709s ago: executing program 7 (id=2116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0))
close_range(0xffffffffffffffff, r3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb0000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x802, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="9259a0ebebcd"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x800, 0xe20, 0x9, 0xa8}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x28, 0x2a, [@mesh_chsw={0x76, 0x6, {0x90, 0x3, 0x32, 0x8}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0xfffffffffffffffb, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x3, 0x9}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@dellink={0x20, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x18130, 0x412}}, 0x20}}, 0x4)
close_range(r3, 0xffffffffffffffff, 0x0)

3m23.098003453s ago: executing program 7 (id=2121):
r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0)
epoll_create1(0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020400)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

3m21.356944401s ago: executing program 7 (id=2125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x71894000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r3 = syz_open_procfs(r0, &(0x7f0000000040)='auxv\x00')
ftruncate(r3, 0x2ac1dffb)

3m19.130246179s ago: executing program 7 (id=2128):
syz_open_procfs(0x0, &(0x7f0000002540)='net/l2cap\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x1a8, 0x0)
ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0})
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000000c0)={<r7=>0x0, 0x2df}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2c, 0x42cd, 0x7f3, 0x3, 0xb6a, 0xf, 0x0, {r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x7, 0x4, 0x9, 0x6}}, &(0x7f0000000240)=0xb0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(r6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000400)={r9, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84)
syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

3m14.55583464s ago: executing program 7 (id=2139):
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x9, 0x4, 0x1c, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x7, 0xfffffffa}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x3, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x7, 0x7c, [@multicast2]}]}}}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c850)

3m11.527129308s ago: executing program 42 (id=2113):
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

2m58.900043836s ago: executing program 43 (id=2139):
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x9, 0x4, 0x1c, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x7, 0xfffffffa}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x3, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x7, 0x7c, [@multicast2]}]}}}}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c850)

2m18.815581378s ago: executing program 2 (id=2231):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)

2m17.684806013s ago: executing program 2 (id=2232):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @local, 0x2}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xffffffff)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2)
r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
mlock(&(0x7f000069f000/0x2000)=nil, 0x2000)
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000019540)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x9, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x421)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)

2m12.138460228s ago: executing program 2 (id=2242):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)

2m10.942143277s ago: executing program 2 (id=2245):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, <r8=>r6, 0x2})
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8})
ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f00000001c0))
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, 0x0, 0x48000)

2m3.599077624s ago: executing program 2 (id=2261):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fd}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x60, 0x0)

2m3.13137154s ago: executing program 2 (id=2262):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = gettid()
ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f00000000c0), 0x1001)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019400)=ANY=[@ANYRES32, @ANYBLOB], 0x50)

1m58.416458143s ago: executing program 3 (id=2268):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

1m46.974819654s ago: executing program 44 (id=2262):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = gettid()
ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f00000000c0), 0x1001)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019400)=ANY=[@ANYRES32, @ANYBLOB], 0x50)

1m45.727760317s ago: executing program 3 (id=2292):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @local, 0x2}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xffffffff)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2)
r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
mlock(&(0x7f000069f000/0x2000)=nil, 0x2000)
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000019540)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x9, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x421)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)

1m36.094394147s ago: executing program 3 (id=2304):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_DELCHAIN={0xdc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44f45582}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6401c5db}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75e48a04}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e21760c}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x33}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x24040884)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000c40)={[{@gid={'gid', 0x3d, r7}}]})
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getresgid(&(0x7f0000000540)=<r9=>0x0, &(0x7f0000000580), &(0x7f00000005c0))
getgroups(0x7, &(0x7f0000000700)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee01, <r10=>0xee00, 0xee01, 0xee01])
getgroups(0x1, &(0x7f0000000740)=[<r11=>0xee00])
fsetxattr$system_posix_acl(r3, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x5}, [{0x2, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x0, r7}, {}, {0x8, 0x4, r8}, {0x8, 0x3, r9}, {0x8, 0x2, r10}, {0x8, 0x6}, {0x8, 0x0, r11}], {0x10, 0x4}, {0x20, 0x1}}, 0x84, 0x3)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)

1m29.391494266s ago: executing program 3 (id=2309):
syz_open_dev$loop(0x0, 0x75f, 0xa382)
syz_open_dev$vim2m(0x0, 0x10002, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)

1m28.235716508s ago: executing program 3 (id=2312):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1m26.488998439s ago: executing program 3 (id=2315):
syz_io_uring_setup(0x495, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0xfe, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xfffd, 0x88000}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a)

1m10.699440399s ago: executing program 45 (id=2315):
syz_io_uring_setup(0x495, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0xfe, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xfffd, 0x88000}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a)

17.8518983s ago: executing program 1 (id=2437):
socket(0x40000000015, 0x5, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090186dd6000195800103afffc000000000000000000000000000000ff02000000000000000000000000000186009078007f67d918bf110a3f000000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
r2 = syz_create_resource$binfmt(0x0)
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000600), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e)

14.639074921s ago: executing program 1 (id=2439):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount$nfs(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200080c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2f64fc65762f7365f175656e636572002c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000880)={@link_local, @local, @void, {@generic={0x8847, "476a695c82e03185f74e1c47708d9ae326189ae89d6f3420c9dc6421aa4b5578bfa3da54359afd42"}}}, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r5, 0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000900)={0x4, r2})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x6, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x20000, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x6, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x4, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x4000008, 0x1000002, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x40006, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x4b, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8000008, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x7, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x2, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)

13.202788438s ago: executing program 1 (id=2442):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000001040), 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), &(0x7f0000000100)="62f820116cbf3175cda2d445a56c5987621141cf4e6e5fa121ebb92c92fbdaa272d0b8a797e369b9587d4961c45fd5b531472c35f3e6ee6c"}}, &(0x7f0000bbdffc))
r1 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
pread64(r1, &(0x7f0000002380)=""/253, 0xfd, 0x4eb)

13.037149931s ago: executing program 4 (id=2443):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080)
r1 = fanotify_init(0x20, 0x80000)
fanotify_mark(r1, 0x1, 0x4000001a, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

11.508180081s ago: executing program 8 (id=2444):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

11.397455793s ago: executing program 1 (id=2445):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

10.560127157s ago: executing program 4 (id=2446):
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
syz_open_pts(0xffffffffffffffff, 0x88000)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b00)=ANY=[], 0xdc}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
pipe(0x0)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x80800)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), 0x0}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0)

10.505736059s ago: executing program 8 (id=2447):
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)

9.943247599s ago: executing program 0 (id=2448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0xe7f, 0xe400, 0x3, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000100)='F', 0x1)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

9.438694617s ago: executing program 4 (id=2449):
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

9.430957936s ago: executing program 1 (id=2450):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a0677bc45ff810500004277000058000b480400945f64009400050028925a01000000020000008000f07ffeff", 0x3d}], 0x1)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x4aa}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5120007f51012449f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

9.360000262s ago: executing program 8 (id=2451):
openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f00000076c0)={0x2020}, 0x2020)
r2 = getpgrp(0xffffffffffffffff)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r3, 0x0, 0xd1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0xf}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
sendmsg$nl_route(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

7.781611177s ago: executing program 0 (id=2452):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount$nfs(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200080c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2f64fc65762f7365f175656e636572002c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000880)={@link_local, @local, @void, {@generic={0x8847, "476a695c82e03185f74e1c47708d9ae326189ae89d6f3420c9dc6421aa4b5578bfa3da54359afd42"}}}, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r5, 0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000900)={0x4, r2})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x6, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x20000, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x6, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x4, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x4000008, 0x1000002, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x40006, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x4b, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8000008, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x7, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x2, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)

7.510640978s ago: executing program 4 (id=2453):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @local, 0x2}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
mlock(&(0x7f000069f000/0x2000)=nil, 0x2000)
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000019540)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x9, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x421)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)

6.877653424s ago: executing program 8 (id=2454):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='5\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = gettid()
ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f00000000c0), 0x1001)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

5.7021408s ago: executing program 0 (id=2455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080)
r2 = fanotify_init(0x20, 0x80000)
fanotify_mark(r2, 0x1, 0x4000001a, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
io_uring_setup(0x1b7b, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

5.383895692s ago: executing program 8 (id=2456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0xa)
connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x3, 0x4001}, 0xc)
close_range(r4, r5, 0x0)

3.224945857s ago: executing program 8 (id=2457):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

3.223743074s ago: executing program 1 (id=2458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
keyctl$clear(0x7, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

2.797416851s ago: executing program 0 (id=2459):
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
syz_open_pts(0xffffffffffffffff, 0x88000)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b00)=ANY=[], 0xdc}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
pipe(0x0)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x80800)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), 0x0}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0)

1.728529535s ago: executing program 0 (id=2460):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

901.948615ms ago: executing program 4 (id=2461):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000001040), 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), &(0x7f0000000100)="62f820116cbf3175cda2d445a56c5987621141cf4e6e5fa121ebb92c92fbdaa272d0b8a797e369b9587d4961c45fd5b531472c35f3e6ee6c"}}, &(0x7f0000bbdffc))
syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)

56.331494ms ago: executing program 4 (id=2462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0xe7f, 0xe400, 0x3, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000100)='F', 0x1)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

0s ago: executing program 0 (id=2463):
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
sendfile(0xffffffffffffffff, r2, 0x0, 0x2000081)

kernel console output (not intermixed with test programs):

to port 0
[  700.738575][T11849] smc: net device bond0 applied user defined pnetid SYZ0
[  700.747979][T11850] smc: net device bond0 erased user defined pnetid SYZ0
[  700.755530][ T6087] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd
[  700.836216][T11481] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  701.027687][T11845] vhci_hcd: connection closed
[  701.045092][ T6225] vhci_hcd vhci_hcd.6: stop threads
[  701.255416][ T6225] vhci_hcd vhci_hcd.6: release socket
[  701.366534][ T6225] vhci_hcd vhci_hcd.6: disconnect device
[  701.418163][ T5179] bcm5974 10-1:0.0: could not read from device
[  701.609084][T11414] bcm5974 10-1:0.0: could not read from device
[  701.644273][ T6015] usb 10-1: USB disconnect, device number 11
[  702.149958][T11481] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  702.309689][T11481] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  703.075524][T11872] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  703.940124][T11872] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  704.600192][T11481] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.827369][T11481] 8021q: adding VLAN 0 to HW filter on device team0
[  704.870000][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.877181][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.119215][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.126420][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.990998][ T6087] usb 46-1: device descriptor read/8, error -110
[  706.586045][T11481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  706.676252][ T6087] usb usb46-port1: attempt power cycle
[  706.911266][T11481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  708.546710][T11914] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  708.553243][T11914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  708.622211][T11914] vhci_hcd vhci_hcd.0: Device attached
[  708.698907][T11919] smc: net device bond0 applied user defined pnetid SYZ0
[  708.721253][T11919] smc: net device bond0 erased user defined pnetid SYZ0
[  708.832047][ T6087] usb usb46-port1: unable to enumerate USB device
[  708.914366][T11915] vhci_hcd: connection closed
[  708.914657][ T3502] vhci_hcd vhci_hcd.9: stop threads
[  708.949702][ T5922] usb 52-1: SetAddress Request (14) to port 0
[  709.274407][ T5922] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd
[  709.363531][ T3502] vhci_hcd vhci_hcd.9: release socket
[  709.521046][ T3502] vhci_hcd vhci_hcd.9: disconnect device
[  710.355550][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  711.010903][ T7726] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  711.202547][ T7726] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.244940][ T7726] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  711.314857][ T7726] usb 7-1: config 0 interface 0 has no altsetting 0
[  711.355438][ T7726] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  711.412155][ T7726] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  711.443180][ T7726] usb 7-1: Product: syz
[  711.470380][ T7726] usb 7-1: Manufacturer: syz
[  711.489999][ T7726] usb 7-1: SerialNumber: syz
[  711.923343][ T7726] usb 7-1: config 0 descriptor??
[  712.077003][ T7726] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  712.375040][T11957] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  712.567951][T11414] udevd[11414]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  713.037029][T11957] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  713.174107][T11957] ovl_remap_lower_ino: 34 callbacks suppressed
[  713.174130][T11957] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  713.319753][T11957] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  714.173630][ T6053] usb 7-1: USB disconnect, device number 11
[  714.245134][T11957] overlayfs: d_ino too big (306, ino=9223372036854777494, xinobits=3)
[  714.260228][T11957] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  714.289798][T11957] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  714.323396][T11957] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  714.347682][T11957] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  714.370563][T11957] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  714.389134][T11957] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  714.411983][T11957] overlayfs: d_ino too big (instances, ino=4611686018427389159, xinobits=3)
[  714.880486][T11481] veth0_vlan: entered promiscuous mode
[  714.985658][T11481] veth1_vlan: entered promiscuous mode
[  715.097456][T11481] veth0_macvtap: entered promiscuous mode
[  715.224496][T11481] veth1_macvtap: entered promiscuous mode
[  715.351704][ T5922] usb 52-1: device descriptor read/8, error -110
[  715.783870][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.871734][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.962253][T11989] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1433'.
[  715.977955][ T3953] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.023762][ T3953] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.044830][ T5922] usb usb52-port1: attempt power cycle
[  716.069410][T11991] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1434'.
[  716.082066][T11991] unsupported nlmsg_type 40
[  716.093818][ T3953] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.105087][T11989] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1433'.
[  716.166453][ T3953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.189365][T11993] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  716.195906][T11993] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  716.234451][T11994] syz_tun: entered allmulticast mode
[  716.278462][T11993] vhci_hcd vhci_hcd.0: Device attached
[  716.291997][T11999] dvmrp8: entered allmulticast mode
[  716.433464][ T5922] usb 52-1: SetAddress Request (16) to port 0
[  716.977378][T11996] vhci_hcd: connection closed
[  717.024118][ T3953] vhci_hcd vhci_hcd.9: stop threads
[  717.071453][T12003] smc: net device bond0 applied user defined pnetid SYZ0
[  717.079427][T12004] smc: net device bond0 erased user defined pnetid SYZ0
[  717.108793][T11990] syz_tun: left allmulticast mode
[  717.229693][ T3953] vhci_hcd vhci_hcd.9: release socket
[  717.349423][ T3953] vhci_hcd vhci_hcd.9: disconnect device
[  717.487079][ T5922] usb 52-1: new SuperSpeed USB device number 16 using vhci_hcd
[  717.511205][ T5922] usb 52-1: enqueue for inactive port 0
[  717.721172][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.729016][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.922480][ T5922] usb usb52-port1: unable to enumerate USB device
[  718.012469][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.040007][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.801210][T12040] tipc: Started in network mode
[  719.861096][T12040] tipc: Node identity 4, cluster identity 4711
[  719.867280][T12040] tipc: Node number set to 4
[  720.632596][T12055] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  720.639127][T12055] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  720.704383][T12055] vhci_hcd vhci_hcd.0: Device attached
[  721.146675][T12066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'.
[  721.631144][ T6006] usb 44-1: SetAddress Request (2) to port 0
[  721.655009][T12059] smc: net device bond0 applied user defined pnetid SYZ0
[  721.665542][T12059] smc: net device bond0 erased user defined pnetid SYZ0
[  721.726440][ T6006] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  721.736602][T12067] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1448'.
[  721.841327][T12056] vhci_hcd: connection closed
[  721.843969][ T3071] vhci_hcd vhci_hcd.5: stop threads
[  721.995657][ T3071] vhci_hcd vhci_hcd.5: release socket
[  722.385296][ T3071] vhci_hcd vhci_hcd.5: disconnect device
[  724.515709][T12093] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.646655][T12093] bridge_slave_1 (unregistering): left allmulticast mode
[  724.653804][T12093] bridge_slave_1 (unregistering): left promiscuous mode
[  724.660892][T12093] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.771680][T12109] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  726.500979][ T6182] IPVS: starting estimator thread 0...
[  726.621016][T12110] IPVS: using max 33 ests per chain, 79200 per kthread
[  726.998071][ T6006] usb 44-1: device descriptor read/8, error -110
[  727.888587][ T6006] usb usb44-port1: attempt power cycle
[  728.344488][T12128] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  728.351014][T12128] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  728.389631][T12128] vhci_hcd vhci_hcd.0: Device attached
[  728.511179][ T6006] usb usb44-port1: unable to enumerate USB device
[  728.575193][T12132] smc: net device bond0 applied user defined pnetid SYZ0
[  728.585579][T12132] smc: net device bond0 erased user defined pnetid SYZ0
[  729.298852][T12129] vhci_hcd: connection closed
[  729.664648][  T377] vhci_hcd vhci_hcd.6: stop threads
[  729.855715][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'.
[  730.420325][ T6182] usb 46-1: SetAddress Request (10) to port 0
[  730.427655][ T6182] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  730.515118][  T377] vhci_hcd vhci_hcd.6: release socket
[  730.566650][  T377] vhci_hcd vhci_hcd.6: disconnect device
[  730.735010][T12145] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1468'.
[  730.744460][T12145] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1468'.
[  730.772714][T12143] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  730.846934][T12143] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  730.969144][T12143] ovl_remap_lower_ino: 34 callbacks suppressed
[  730.969161][T12143] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  731.159908][T12143] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  731.191361][T12143] overlayfs: d_ino too big (202, ino=9223372036854776959, xinobits=3)
[  731.210756][T12143] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  731.224682][T12143] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  731.235025][T12143] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  731.244880][T12143] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  731.255127][T12143] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  731.269995][T12143] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  731.283153][T12143] overlayfs: d_ino too big (instances, ino=4611686018427389159, xinobits=3)
[  732.852733][T12168] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.270922][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  733.487427][T12168] bridge_slave_1 (unregistering): left allmulticast mode
[  733.494517][T12168] bridge_slave_1 (unregistering): left promiscuous mode
[  733.501621][T12168] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.010968][ T6078] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  734.183328][ T6078] usb 7-1: config 0 has no interfaces?
[  734.207547][ T6078] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  734.246597][ T6078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.276909][ T6078] usb 7-1: config 0 descriptor??
[  734.958866][ T6078] usb 7-1: USB disconnect, device number 12
[  735.368102][T12199] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  735.374662][T12199] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  735.487711][T12199] vhci_hcd vhci_hcd.0: Device attached
[  735.510941][ T6182] usb 46-1: device descriptor read/8, error -110
[  735.782221][T12202] smc: net device bond0 applied user defined pnetid SYZ0
[  735.790956][ T6006] usb 44-1: SetAddress Request (6) to port 0
[  735.798728][T12202] smc: net device bond0 erased user defined pnetid SYZ0
[  735.961253][ T6182] usb usb46-port1: attempt power cycle
[  736.230347][T12200] vhci_hcd: connection closed
[  736.233803][ T3532] vhci_hcd vhci_hcd.5: stop threads
[  736.394014][ T3532] vhci_hcd vhci_hcd.5: release socket
[  736.493693][ T3532] vhci_hcd vhci_hcd.5: disconnect device
[  736.737422][ T6006] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  736.738122][ T6182] usb usb46-port1: unable to enumerate USB device
[  737.021189][ T6006] usb 44-1: enqueue for inactive port 0
[  737.141086][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'.
[  737.927648][T12219] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  738.509611][ T6006] usb usb44-port1: attempt power cycle
[  739.133487][ T6006] usb usb44-port1: unable to enumerate USB device
[  742.186481][T12261] xt_hashlimit: max too large, truncated to 1048576
[  750.547879][   T31] kauditd_printk_skb: 59 callbacks suppressed
[  750.547900][   T31] audit: type=1800 audit(1765826979.432:147): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1507" name="/" dev="fuse" ino=9 res=0 errno=0
[  751.392173][T12343] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1514'.
[  751.421096][T12343] netem: invalid attributes len -17
[  751.431414][T12343] netem: change failed
[  751.675307][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  751.861438][ T6078] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  752.665141][ T6078] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.740420][ T6078] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  752.800981][ T6078] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  752.843637][ T6078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.849187][T12362] [U] 
[  752.854443][T12362] [U] 
[  752.857145][T12362] [U] 
[  752.859843][T12362] [U] 
[  752.898808][ T6078] usb 10-1: config 0 descriptor??
[  752.908221][T12362] [U] 
[  752.910947][T12362] [U] 
[  752.913660][T12362] [U] 
[  752.916367][T12362] [U] 
[  752.956224][ T6078] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  752.991290][T12362] [U] 
[  752.991314][ T6078] dvb-usb: bulk message failed: -22 (3/0)
[  752.994019][T12362] [U] 
[  753.002748][T12362] [U] 
[  753.005446][T12362] [U] 
[  753.070934][ T6078] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  753.104039][ T6078] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  753.111458][T12362] [U] 
[  753.114173][T12362] [U] 
[  753.116886][T12362] [U] 
[  753.119584][T12362] [U] 
[  753.130904][ T6078] usb 10-1: media controller created
[  753.143948][ T6078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  753.151013][T12362] [U] 
[  753.154959][T12362] [U] 
[  753.157669][T12362] [U] 
[  753.160366][T12362] [U] 
[  753.177516][T12343] dvb-usb: bulk message failed: -22 (2/0)
[  753.252938][ T6078] dvb-usb: bulk message failed: -22 (6/0)
[  753.258822][T12362] [U] 
[  753.261628][T12362] [U] 
[  753.264327][T12362] [U] 
[  753.267022][T12362] [U] 
[  753.290902][ T6078] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  753.333509][ T6078] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input32
[  753.360955][T12362] [U] 
[  753.363678][T12362] [U] 
[  753.366382][T12362] [U] 
[  753.369080][T12362] [U] 
[  753.401597][ T6078] dvb-usb: schedule remote query interval to 150 msecs.
[  753.435886][ T6078] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  753.515459][T12362] [U] 
[  753.518174][T12362] [U] 
[  753.520877][T12362] [U] 
[  753.523564][T12362] [U] 
[  753.544793][T12362] [U] 
[  753.547544][T12362] [U] 
[  753.550222][T12362] [U] 
[  753.552926][T12362] [U] 
[  753.566831][ T6078] usb 10-1: USB disconnect, device number 12
[  753.608084][T12362] [U] 
[  753.610833][T12362] [U] 
[  753.613524][T12362] [U] 
[  753.616201][T12362] [U] 
[  753.904316][T12362] [U] 
[  754.043981][ T6078] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  759.251343][T12415] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  759.257901][T12415] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  760.471452][T12415] vhci_hcd vhci_hcd.0: Device attached
[  761.347521][T12435] smc: net device bond0 applied user defined pnetid SYZ0
[  761.358607][T12435] smc: net device bond0 erased user defined pnetid SYZ0
[  761.485677][T12421] vhci_hcd: connection closed
[  761.520721][   T37] vhci_hcd vhci_hcd.9: stop threads
[  761.573937][  T109] usb 52-1: SetAddress Request (18) to port 0
[  761.680733][   T37] vhci_hcd vhci_hcd.9: release socket
[  761.782883][   T37] vhci_hcd vhci_hcd.9: disconnect device
[  762.020574][  T109] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd
[  762.090960][  T109] usb 52-1: enqueue for inactive port 0
[  762.532618][  T109] usb usb52-port1: attempt power cycle
[  762.706799][T12443] [U] 
[  762.709552][T12443] [U] 
[  762.712251][T12443] [U] 
[  762.714955][T12443] [U] 
[  763.274917][T12443] [U] 
[  763.277653][T12443] [U] 
[  763.280346][T12443] [U] 
[  763.283040][T12443] [U] 
[  763.292869][T12443] [U] 
[  763.295592][T12443] [U] 
[  763.298289][T12443] [U] 
[  763.301076][T12443] [U] 
[  763.442869][  T109] usb usb52-port1: unable to enumerate USB device
[  763.477821][T12443] [U] 
[  769.320871][ T5885] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  769.556057][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  769.621140][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.645318][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  769.655253][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  769.665211][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  769.676398][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  769.686491][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  769.804010][ T5885] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  770.063244][ T5885] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  771.750876][ T5845] Bluetooth: hci0: command tx timeout
[  771.934635][ T5885] usb 10-1: Manufacturer: syz
[  772.007569][ T5885] usb 10-1: config 0 descriptor??
[  772.690191][ T5885] usb 10-1: can't set config #0, error -71
[  772.764557][ T5885] usb 10-1: USB disconnect, device number 13
[  773.509254][T12526] [U] 
[  773.511988][T12526] [U] 
[  773.514677][T12526] [U] 
[  773.517363][T12526] [U] 
[  773.547551][T12526] [U] 
[  773.550292][T12526] [U] 
[  773.552983][T12526] [U] 
[  773.555661][T12526] [U] 
[  773.591720][T12526] [U] 
[  773.594469][T12526] [U] 
[  773.597164][T12526] [U] 
[  773.599851][T12526] [U] 
[  773.743019][T12526] [U] 
[  773.745771][T12526] [U] 
[  773.748535][T12526] [U] 
[  773.751211][T12526] [U] 
[  773.832051][ T5845] Bluetooth: hci0: command tx timeout
[  773.861633][T12526] [U] 
[  773.864383][T12526] [U] 
[  773.867059][T12526] [U] 
[  773.869735][T12526] [U] 
[  774.231268][T12526] [U] 
[  774.234017][T12526] [U] 
[  774.236714][T12526] [U] 
[  774.239410][T12526] [U] 
[  774.242546][T12526] [U] 
[  774.245257][T12526] [U] 
[  774.247947][T12526] [U] 
[  774.250635][T12526] [U] 
[  774.261726][T12526] [U] 
[  774.264437][T12526] [U] 
[  774.267124][T12526] [U] 
[  774.269846][T12526] [U] 
[  774.313445][T12526] [U] 
[  775.910964][ T5845] Bluetooth: hci0: command tx timeout
[  778.060935][ T5845] Bluetooth: hci0: command tx timeout
[  778.950204][ T3071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.082648][T12509] chnl_net:caif_netlink_parms(): no params data found
[  779.154304][ T6182] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  779.637499][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  779.662258][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.077148][ T6182] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  780.110826][ T6182] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  780.118821][ T6182] usb 5-1: Manufacturer: syz
[  780.329768][ T6182] usb 5-1: config 0 descriptor??
[  780.597701][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.642499][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  782.347802][ T6182] usbhid 5-1:0.0: can't add hid device: -71
[  782.369840][ T3071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.392517][ T6182] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  782.409990][ T6182] usb 5-1: USB disconnect, device number 14
[  783.135442][T12509] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.545123][T12509] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.571085][T12509] bridge_slave_0: entered allmulticast mode
[  783.586265][T12509] bridge_slave_0: entered promiscuous mode
[  784.197276][ T3071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.777638][T12509] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.502878][T12509] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.510154][T12509] bridge_slave_1: entered allmulticast mode
[  785.536518][T12509] bridge_slave_1: entered promiscuous mode
[  787.485114][ T3071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.674073][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  787.690989][ T6006] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  787.715184][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  787.791113][ T6087] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  787.914863][ T6006] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  787.947396][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.967133][ T6006] usb 8-1: Product: syz
[  788.394675][ T6087] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  788.440947][ T6006] usb 8-1: Manufacturer: syz
[  788.471063][ T6006] usb 8-1: SerialNumber: syz
[  788.477818][ T6087] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  788.509402][ T6006] usb 8-1: config 0 descriptor??
[  788.537427][ T6087] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  788.572046][ T6006] hso 8-1:0.0: Not our interface
[  788.581449][ T6087] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  788.581828][T12509] team0: Port device team_slave_0 added
[  788.590128][ T6006] usb-storage 8-1:0.0: USB Mass Storage device detected
[  788.665365][T12509] team0: Port device team_slave_1 added
[  788.771268][ T6087] usb 7-1: Manufacturer: syz
[  788.809737][ T6087] usb 7-1: config 0 descriptor??
[  789.208279][T12658] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  789.591017][T10380] Bluetooth: hci1: command 0x0406 tx timeout
[  789.729761][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  790.243901][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  792.060511][ T6087] usbhid 7-1:0.0: can't add hid device: -71
[  792.147185][ T6087] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  792.426498][ T6078] usb 8-1: USB disconnect, device number 11
[  793.360514][ T6087] usb 7-1: USB disconnect, device number 13
[  793.369002][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  793.460891][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.106473][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  794.365862][T10380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  794.377194][T10380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  794.386672][T10380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  794.390482][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  794.395356][T10380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  794.416557][T10380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  794.494075][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.639579][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.819214][ T3071] bridge_slave_0: left allmulticast mode
[  794.842572][ T3071] bridge_slave_0: left promiscuous mode
[  794.877149][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.525658][T10380] Bluetooth: hci2: command tx timeout
[  797.535780][ T3071] dvmrp8 (unregistering): left allmulticast mode
[  797.631113][ T6006] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  797.798021][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  797.813013][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  797.936366][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  797.997139][ T3071] bond0 (unregistering): Released all slaves
[  798.226008][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  798.650952][T10380] Bluetooth: hci2: command tx timeout
[  799.051935][ T6006] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  799.120943][ T6006] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  799.129082][ T6006] usb 5-1: Manufacturer: syz
[  799.157430][ T6006] usb 5-1: config 0 descriptor??
[  799.684353][T12741] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  800.188243][ T5966] IPVS: starting estimator thread 0...
[  800.211774][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.300900][T12742] IPVS: using max 25 ests per chain, 60000 per kthread
[  800.450476][T12509] hsr_slave_0: entered promiscuous mode
[  800.455053][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.476824][T12509] hsr_slave_1: entered promiscuous mode
[  800.512584][T12509] debugfs: 'hsr0' already exists in 'hsr'
[  800.518619][T12509] Cannot create hsr debugfs directory
[  800.578608][ T6006] usbhid 5-1:0.0: can't add hid device: -71
[  800.750082][T10380] Bluetooth: hci2: command tx timeout
[  800.828290][ T6006] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  801.321839][ T6006] usb 5-1: USB disconnect, device number 15
[  802.802335][T10380] Bluetooth: hci2: command tx timeout
[  803.650911][ T5885] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  803.729655][ T3071] hsr_slave_0: left promiscuous mode
[  803.757801][ T3071] hsr_slave_1: left promiscuous mode
[  803.791029][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  803.808708][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.823053][ T5885] usb 10-1: config 0 has no interfaces?
[  803.831032][ T5885] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  803.853992][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  803.870905][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.879264][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.892990][ T5885] usb 10-1: config 0 descriptor??
[  803.999918][ T3071] veth1_macvtap: left promiscuous mode
[  804.020065][ T3071] veth0_macvtap: left promiscuous mode
[  804.036344][ T3071] veth1_vlan: left promiscuous mode
[  804.056398][ T3071] veth0_vlan: left promiscuous mode
[  804.207870][ T6006] usb 10-1: USB disconnect, device number 14
[  805.626518][ T3071] team0 (unregistering): Port device team_slave_1 removed
[  805.679031][ T3071] team0 (unregistering): Port device team_slave_0 removed
[  806.127521][T12791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1603'.
[  806.148618][T12791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1603'.
[  808.201679][T12680] chnl_net:caif_netlink_parms(): no params data found
[  808.345815][ T3071] IPVS: stop unused estimator thread 0...
[  810.456171][ T3071] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.547657][T12680] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.595984][T12680] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.654349][T12680] bridge_slave_0: entered allmulticast mode
[  810.672729][T12680] bridge_slave_0: entered promiscuous mode
[  810.702620][T12680] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.709753][T12680] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.814855][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1616'.
[  810.844296][T12680] bridge_slave_1: entered allmulticast mode
[  810.875716][T12680] bridge_slave_1: entered promiscuous mode
[  810.944801][ T3071] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.283811][ T3071] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.016474][ T3071] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.071733][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.157278][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  813.241485][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  813.798079][T12680] team0: Port device team_slave_0 added
[  813.866761][T12680] team0: Port device team_slave_1 added
[  813.894914][T12509] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  814.010067][T12509] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  814.970475][T12509] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  817.017817][T12509] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  818.165011][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  818.205328][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.300999][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  818.444510][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.490799][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.876291][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.486233][ T3071] bridge_slave_1: left allmulticast mode
[  819.513582][ T3071] bridge_slave_1: left promiscuous mode
[  819.536070][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.756435][ T3071] bridge_slave_0: left allmulticast mode
[  819.787585][ T3071] bridge_slave_0: left promiscuous mode
[  820.424285][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.784511][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  825.896201][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.956610][ T3071] bond0 (unregistering): Released all slaves
[  826.692727][T12680] hsr_slave_0: entered promiscuous mode
[  826.701262][T12680] hsr_slave_1: entered promiscuous mode
[  829.293724][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  829.327010][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  829.347090][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  829.512271][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  829.587274][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  829.698403][ T3071] hsr_slave_0: left promiscuous mode
[  829.895208][ T3071] hsr_slave_1: left promiscuous mode
[  829.941072][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  829.992153][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  830.363471][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  830.391397][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  830.435370][ T3071] veth1_macvtap: left promiscuous mode
[  830.458873][ T3071] veth0_macvtap: left promiscuous mode
[  830.474157][ T3071] veth1_vlan: left promiscuous mode
[  830.495480][ T3071] veth0_vlan: left promiscuous mode
[  831.830527][ T5845] Bluetooth: hci1: command tx timeout
[  833.910866][ T5845] Bluetooth: hci1: command tx timeout
[  834.048314][T10380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  834.062392][T10380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  834.091296][T10380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  834.103409][T10380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  834.111630][T10380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  834.291316][ T3071] team0 (unregistering): Port device team_slave_1 removed
[  834.382973][ T3071] team0 (unregistering): Port device team_slave_0 removed
[  834.984067][ T5824] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  835.155169][ T5824] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  835.189588][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.232334][ T5824] usb 10-1: Product: syz
[  835.236612][ T5824] usb 10-1: Manufacturer: syz
[  835.251970][ T5824] usb 10-1: SerialNumber: syz
[  835.311676][ T5824] usb 10-1: config 0 descriptor??
[  835.375260][ T5824] hso 10-1:0.0: Not our interface
[  835.386546][ T5824] usb-storage 10-1:0.0: USB Mass Storage device detected
[  835.991224][T10380] Bluetooth: hci1: command tx timeout
[  836.151502][T10380] Bluetooth: hci0: command tx timeout
[  836.856737][T13103] fuse: Bad value for 'fd'
[  836.900145][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1652'.
[  838.071173][ T5845] Bluetooth: hci1: command tx timeout
[  838.199581][  T109] usb 10-1: USB disconnect, device number 15
[  838.231232][T10380] Bluetooth: hci0: command tx timeout
[  841.275770][T10380] Bluetooth: hci0: command tx timeout
[  841.633521][ T3502] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.091975][ T3502] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.170570][T13082] chnl_net:caif_netlink_parms(): no params data found
[  842.326954][ T3502] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.672414][T13059] chnl_net:caif_netlink_parms(): no params data found
[  842.872659][T12680] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  842.998853][T12680] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  843.045794][T12680] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  843.334970][T12680] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  843.356533][T10380] Bluetooth: hci0: command tx timeout
[  844.029047][T13165] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  844.065280][T13082] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.081427][T13165] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  844.092291][T13082] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.099487][T13082] bridge_slave_0: entered allmulticast mode
[  844.118475][T13165] ovl_remap_lower_ino: 34 callbacks suppressed
[  844.118489][T13165] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  844.136302][T13082] bridge_slave_0: entered promiscuous mode
[  844.152509][T13165] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  844.170526][T13082] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.189316][T13165] overlayfs: d_ino too big (363, ino=9223372036854777831, xinobits=3)
[  844.197868][T13082] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.205659][T13082] bridge_slave_1: entered allmulticast mode
[  844.212753][T13165] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  844.223391][T13082] bridge_slave_1: entered promiscuous mode
[  844.261957][T13165] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  844.277558][T13165] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  844.314423][T13059] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.325646][T13059] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.334128][T13165] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  844.343036][T13059] bridge_slave_0: entered allmulticast mode
[  844.354831][T13059] bridge_slave_0: entered promiscuous mode
[  844.361850][T13165] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  844.370241][T13165] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  844.379051][T13165] overlayfs: d_ino too big (instances, ino=4611686018427389159, xinobits=3)
[  844.843362][T13059] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.862730][T13059] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.909149][T13059] bridge_slave_1: entered allmulticast mode
[  844.991409][T13059] bridge_slave_1: entered promiscuous mode
[  845.116933][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.326531][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.604507][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  846.030384][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.048368][T13082] team0: Port device team_slave_0 added
[  846.144101][T13082] team0: Port device team_slave_1 added
[  846.334133][T13183] fuse: Bad value for 'fd'
[  846.411931][T13059] team0: Port device team_slave_0 added
[  846.430134][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.448042][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.513750][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.588982][T13059] team0: Port device team_slave_1 added
[  846.607437][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.619871][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.657158][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.778376][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.796086][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.859757][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.950112][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.974320][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.047281][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  847.100637][T13082] hsr_slave_0: entered promiscuous mode
[  847.416576][T13082] hsr_slave_1: entered promiscuous mode
[  847.448710][T13082] debugfs: 'hsr0' already exists in 'hsr'
[  847.475392][T13082] Cannot create hsr debugfs directory
[  849.996059][T13059] hsr_slave_0: entered promiscuous mode
[  850.021201][T13059] hsr_slave_1: entered promiscuous mode
[  850.058902][T13059] debugfs: 'hsr0' already exists in 'hsr'
[  850.079106][T13059] Cannot create hsr debugfs directory
[  850.138446][ T3502] bridge_slave_1: left allmulticast mode
[  850.343618][ T3502] bridge_slave_1: left promiscuous mode
[  850.410527][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.457728][ T3502] bridge_slave_0: left allmulticast mode
[  850.483948][ T3502] bridge_slave_0: left promiscuous mode
[  850.489688][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.580503][ T3502] bridge_slave_1: left allmulticast mode
[  850.588306][ T3502] bridge_slave_1: left promiscuous mode
[  850.601383][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.622892][ T3502] bridge_slave_0: left allmulticast mode
[  850.633512][ T3502] bridge_slave_0: left promiscuous mode
[  850.645977][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.343997][T13228] fuse: Bad value for 'fd'
[  851.854897][ T3502] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  852.812251][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  852.842779][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  852.887277][ T3502] bond0 (unregistering): (slave team0): Releasing backup interface
[  852.982218][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  853.010064][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  853.020423][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  853.020458][ T3502] bond0 (unregistering): Released all slaves
[  853.051177][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  853.071174][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  853.353082][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  853.397996][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  853.413908][ T3502] bond0 (unregistering): Released all slaves
[  853.973749][ T3502] tipc: Left network mode
[  855.110841][ T5845] Bluetooth: hci3: command tx timeout
[  856.079379][T13280] IPVS: sh: FWM 3 0x00000003 - no destination available
[  856.291905][ T7726] IPVS: starting estimator thread 0...
[  856.440849][T13281] IPVS: using max 26 ests per chain, 62400 per kthread
[  856.484376][ T3502] hsr_slave_0: left promiscuous mode
[  856.496318][ T3502] hsr_slave_1: left promiscuous mode
[  856.509440][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  856.526512][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.545922][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  856.562824][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.610399][ T3502] hsr_slave_0: left promiscuous mode
[  856.634996][ T3502] hsr_slave_1: left promiscuous mode
[  856.648165][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.669078][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.770830][ T3502] veth1_macvtap: left promiscuous mode
[  856.776414][ T3502] veth0_macvtap: left promiscuous mode
[  856.800016][ T3502] veth1_vlan: left promiscuous mode
[  856.805749][ T3502] veth0_vlan: left promiscuous mode
[  857.191515][ T5845] Bluetooth: hci3: command tx timeout
[  857.391742][T13291] fuse: Bad value for 'fd'
[  859.375510][ T5845] Bluetooth: hci3: command tx timeout
[  860.230353][ T3502] team0 (unregistering): Port device team_slave_1 removed
[  860.419856][ T3502] team0 (unregistering): Port device team_slave_0 removed
[  861.430937][ T5845] Bluetooth: hci3: command tx timeout
[  862.120986][ T3502] team0 (unregistering): Port device team_slave_1 removed
[  862.160848][ T3502] team0 (unregistering): Port device team_slave_0 removed
[  862.907549][T13242] chnl_net:caif_netlink_parms(): no params data found
[  863.081686][T13336] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1701'.
[  863.438863][T13242] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.470206][T13242] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.487993][T13242] bridge_slave_0: entered allmulticast mode
[  863.522605][T13242] bridge_slave_0: entered promiscuous mode
[  863.542557][T13242] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.549729][T13242] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.560256][T13242] bridge_slave_1: entered allmulticast mode
[  863.588209][T13242] bridge_slave_1: entered promiscuous mode
[  863.745811][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.803247][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.896372][T13059] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  864.015948][T13059] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  864.279550][T13059] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  864.307546][T13242] team0: Port device team_slave_0 added
[  864.612010][T13242] team0: Port device team_slave_1 added
[  864.648607][ T3502] IPVS: stop unused estimator thread 0...
[  864.719746][T13059] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  864.752453][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.759413][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.841237][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.986700][T13364] IPVS: sh: FWM 3 0x00000003 - no destination available
[  865.574868][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.583501][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.948573][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.352866][T13242] hsr_slave_0: entered promiscuous mode
[  866.377875][T13242] hsr_slave_1: entered promiscuous mode
[  866.397575][T13242] debugfs: 'hsr0' already exists in 'hsr'
[  866.404341][T13242] Cannot create hsr debugfs directory
[  867.560963][T13082] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  867.616633][T13082] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  867.706441][T13082] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  867.723783][T13082] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  870.778166][ T3502] bridge_slave_1: left allmulticast mode
[  870.791151][ T3502] bridge_slave_1: left promiscuous mode
[  870.804087][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.835348][ T3502] bridge_slave_0: left allmulticast mode
[  870.848951][ T3502] bridge_slave_0: left promiscuous mode
[  870.871668][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.482026][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  871.567741][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  871.668958][ T3502] bond0 (unregistering): Released all slaves
[  872.171775][ T3502] hsr_slave_0: left promiscuous mode
[  872.198417][ T3502] hsr_slave_1: left promiscuous mode
[  872.211693][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  872.233643][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.575057][ T3502] team0 (unregistering): Port device team_slave_1 removed
[  872.629135][ T3502] team0 (unregistering): Port device team_slave_0 removed
[  873.482693][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'.
[  874.164598][T13059] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.185980][T13059] 8021q: adding VLAN 0 to HW filter on device team0
[  874.216771][T13082] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.271394][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.278581][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  874.522116][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.529310][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  874.573452][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  875.707687][T13082] 8021q: adding VLAN 0 to HW filter on device team0
[  875.744019][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.751211][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  876.307068][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.314262][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  876.467508][T13242] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  876.626875][T13242] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  876.707369][T13242] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  876.941651][T13242] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  877.605854][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.807721][T13242] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.341377][T13059] veth0_vlan: entered promiscuous mode
[  878.524857][T13242] 8021q: adding VLAN 0 to HW filter on device team0
[  878.568127][T13059] veth1_vlan: entered promiscuous mode
[  879.090223][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.097420][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  879.148402][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.155602][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.243074][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.666220][T13059] veth0_macvtap: entered promiscuous mode
[  879.777281][T13059] veth1_macvtap: entered promiscuous mode
[  880.589065][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  880.671706][T13495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  880.678238][T13495] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  880.691338][T13495] vhci_hcd vhci_hcd.0: Device attached
[  880.696781][T13498] smc: net device bond0 applied user defined pnetid SYZ0
[  880.697143][T13498] smc: net device bond0 erased user defined pnetid SYZ0
[  880.718925][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  880.795521][ T6012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  880.836388][ T6012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  880.947169][T13505] IPVS: sh: FWM 3 0x00000003 - no destination available
[  881.282689][T13499] vhci_hcd: connection closed
[  881.291002][  T377] vhci_hcd vhci_hcd.4: stop threads
[  881.320808][  T377] vhci_hcd vhci_hcd.4: release socket
[  881.330249][ T6012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  881.333204][  T377] vhci_hcd vhci_hcd.4: disconnect device
[  881.340860][ T5966] usb 42-1: SetAddress Request (2) to port 0
[  881.359763][ T6012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  881.381524][ T5966] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  881.440952][ T5966] usb 42-1: enqueue for inactive port 0
[  881.559920][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0
[  881.578867][  T377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.621536][  T377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.774126][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.803941][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.852450][ T5966] usb usb42-port1: attempt power cycle
[  881.995105][T13082] veth0_vlan: entered promiscuous mode
[  882.013155][T13242] veth0_vlan: entered promiscuous mode
[  882.065698][T13082] veth1_vlan: entered promiscuous mode
[  882.321921][T13516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  882.328457][T13516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  882.339244][T13516] vhci_hcd vhci_hcd.0: Device attached
[  882.342139][T13242] veth1_vlan: entered promiscuous mode
[  882.455591][T13523] smc: net device bond0 applied user defined pnetid SYZ0
[  882.465089][T13523] smc: net device bond0 erased user defined pnetid SYZ0
[  882.505566][ T5966] usb usb42-port1: unable to enumerate USB device
[  882.767628][T13082] veth0_macvtap: entered promiscuous mode
[  882.853830][ T5966] usb 34-1: SetAddress Request (2) to port 0
[  882.894332][T13520] vhci_hcd: connection closed
[  883.445656][ T3071] vhci_hcd vhci_hcd.0: stop threads
[  883.466578][ T5966] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  883.496817][ T3071] vhci_hcd vhci_hcd.0: release socket
[  883.502081][T13082] veth1_macvtap: entered promiscuous mode
[  883.567182][ T3071] vhci_hcd vhci_hcd.0: disconnect device
[  883.697494][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.769428][T13242] veth0_macvtap: entered promiscuous mode
[  883.822371][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.843068][T13242] veth1_macvtap: entered promiscuous mode
[  883.855686][T13528] fuse: Bad value for 'fd'
[  884.093603][ T1033] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.114015][ T1033] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.213145][ T1033] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.347978][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1740'.
[  884.472691][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0
[  884.480118][ T3071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  884.765673][T13531] : entered promiscuous mode
[  884.871008][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1
[  884.936078][ T1033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  885.004673][ T1033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  885.070709][ T1033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  885.149774][ T1033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.098639][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.140836][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.604849][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.840783][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.943049][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.983464][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.321539][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.562547][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.283513][T13558] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  888.290107][T13558] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  888.414769][T13558] vhci_hcd vhci_hcd.0: Device attached
[  888.419994][T13563] smc: net device bond0 applied user defined pnetid SYZ0
[  888.479585][T13558] smc: net device bond0 erased user defined pnetid SYZ0
[  888.576767][T13559] vhci_hcd: connection reset by peer
[  888.603304][ T6198] vhci_hcd vhci_hcd.0: stop threads
[  888.608719][ T6198] vhci_hcd vhci_hcd.0: release socket
[  888.631835][ T5966] usb 34-1: device descriptor read/8, error -110
[  888.652258][ T6198] vhci_hcd vhci_hcd.0: disconnect device
[  888.900461][T13579] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  888.907013][T13579] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  889.122389][T13579] vhci_hcd vhci_hcd.0: Device attached
[  889.186673][T13589] fuse: Bad value for 'fd'
[  889.212956][T13579] smc: net device bond0 applied user defined pnetid SYZ0
[  889.233991][T13579] smc: net device bond0 erased user defined pnetid SYZ0
[  889.385726][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1750'.
[  889.492622][ T5966] usb usb34-port1: attempt power cycle
[  889.510910][ T5885] usb 50-1: SetAddress Request (2) to port 0
[  889.520862][ T5885] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  889.879390][T13582] vhci_hcd: connection reset by peer
[  889.969359][   T37] vhci_hcd vhci_hcd.8: stop threads
[  889.990870][   T37] vhci_hcd vhci_hcd.8: release socket
[  890.009827][   T37] vhci_hcd vhci_hcd.8: disconnect device
[  890.707002][ T5966] usb usb34-port1: unable to enumerate USB device
[  891.357881][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1754'.
[  891.377144][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1754'.
[  894.421437][T13643] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  894.428074][T13643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  894.508117][T13643] vhci_hcd vhci_hcd.0: Device attached
[  894.535440][T13643] smc: net device bond0 applied user defined pnetid SYZ0
[  894.543303][T13643] smc: net device bond0 erased user defined pnetid SYZ0
[  894.554907][T13644] vhci_hcd: connection closed
[  894.555287][ T1033] vhci_hcd vhci_hcd.9: stop threads
[  894.586016][ T1033] vhci_hcd vhci_hcd.9: release socket
[  894.598180][T13648] fuse: Bad value for 'fd'
[  894.730215][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'.
[  894.791770][T13653] : entered promiscuous mode
[  895.063825][ T5885] usb 50-1: device descriptor read/8, error -110
[  895.179919][ T1033] vhci_hcd vhci_hcd.9: disconnect device
[  895.200960][    T9] usb 52-1: enqueue for inactive port 0
[  895.572174][ T5885] usb usb50-port1: attempt power cycle
[  895.711914][    T9] usb usb52-port1: attempt power cycle
[  896.000838][T13663] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  896.007391][T13663] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  896.044939][T13663] vhci_hcd vhci_hcd.0: Device attached
[  896.050211][T13669] smc: net device bond0 applied user defined pnetid SYZ0
[  896.113214][T13663] smc: net device bond0 erased user defined pnetid SYZ0
[  896.224253][T13667] vhci_hcd: connection closed
[  896.224482][ T6198] vhci_hcd vhci_hcd.9: stop threads
[  896.253910][ T5885] usb usb50-port1: unable to enumerate USB device
[  896.260384][    T9] usb 52-1: SetAddress Request (24) to port 0
[  896.275790][ T6198] vhci_hcd vhci_hcd.9: release socket
[  896.287247][    T9] usb 52-1: new SuperSpeed USB device number 24 using vhci_hcd
[  896.494739][ T6198] vhci_hcd vhci_hcd.9: disconnect device
[  898.758151][T13697] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  898.812228][T13697] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  898.820914][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1773'.
[  898.889898][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1773'.
[  898.939614][T13697] ovl_remap_lower_ino: 34 callbacks suppressed
[  898.939636][T13697] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  899.375005][T13697] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  899.383488][T13697] overlayfs: d_ino too big (223, ino=9223372036854777077, xinobits=3)
[  899.391984][T13697] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  899.401058][T13697] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  899.410046][T13697] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  899.418533][T13697] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  899.428270][T13697] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  899.437413][T13697] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  899.447443][T13697] overlayfs: d_ino too big (instances, ino=4611686018427389159, xinobits=3)
[  900.016674][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1777'.
[  900.369269][T13713] : entered promiscuous mode
[  900.739299][T13718] fuse: Bad value for 'fd'
[  901.591590][    T9] usb 52-1: device descriptor read/8, error -110
[  902.091247][T13728] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  902.097897][T13728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  902.129426][T13728] vhci_hcd vhci_hcd.0: Device attached
[  902.209934][T13728] smc: net device bond0 applied user defined pnetid SYZ0
[  902.220672][T13728] smc: net device bond0 erased user defined pnetid SYZ0
[  902.506842][    T9] usb usb52-port1: unable to enumerate USB device
[  902.525037][T13732] vhci_hcd: connection closed
[  902.525723][ T6052] vhci_hcd vhci_hcd.0: stop threads
[  902.761203][ T6006] usb 34-1: SetAddress Request (6) to port 0
[  903.066296][ T6052] vhci_hcd vhci_hcd.0: release socket
[  903.101068][ T6006] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd
[  903.136579][ T6052] vhci_hcd vhci_hcd.0: disconnect device
[  903.260830][ T6006] usb 34-1: enqueue for inactive port 0
[  904.294807][ T6006] usb usb34-port1: attempt power cycle
[  904.567204][T13758] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  904.573768][T13758] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  904.801315][T13758] vhci_hcd vhci_hcd.0: Device attached
[  904.907981][T13758] smc: net device bond0 applied user defined pnetid SYZ0
[  904.915463][T13758] smc: net device bond0 erased user defined pnetid SYZ0
[  904.926323][T13762] vhci_hcd: connection closed
[  904.926530][ T6052] vhci_hcd vhci_hcd.7: stop threads
[  905.098874][ T6052] vhci_hcd vhci_hcd.7: release socket
[  905.120689][ T6052] vhci_hcd vhci_hcd.7: disconnect device
[  905.131999][ T6006] usb usb34-port1: unable to enumerate USB device
[  905.140863][    T9] usb 48-1: enqueue for inactive port 0
[  905.976575][    T9] usb usb48-port1: attempt power cycle
[  906.817200][    T9] usb usb48-port1: unable to enumerate USB device
[  909.245039][T13811] fuse: Bad value for 'fd'
[  909.273289][T13812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  909.279835][T13812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  909.421475][T13812] vhci_hcd vhci_hcd.0: Device attached
[  909.744842][T13816] smc: net device bond0 applied user defined pnetid SYZ0
[  909.755779][T13816] smc: net device bond0 erased user defined pnetid SYZ0
[  909.770898][    T9] usb 40-1: SetAddress Request (2) to port 0
[  909.777023][    T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  910.033489][T13814] vhci_hcd: connection closed
[  910.039430][ T6048] vhci_hcd vhci_hcd.3: stop threads
[  910.198001][ T6048] vhci_hcd vhci_hcd.3: release socket
[  910.293816][ T6048] vhci_hcd vhci_hcd.3: disconnect device
[  910.570836][    T9] usb 40-1: enqueue for inactive port 0
[  911.052035][    T9] usb usb40-port1: attempt power cycle
[  911.322120][T13835] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  911.339192][ T6006] IPVS: starting estimator thread 0...
[  911.581174][T13841] IPVS: using max 33 ests per chain, 79200 per kthread
[  912.423375][ T6053] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  912.438537][    T9] usb usb40-port1: unable to enumerate USB device
[  913.453443][ T6053] usb 5-1: config 0 has no interfaces?
[  913.458963][ T6053] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  913.480672][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.634011][ T6053] usb 5-1: config 0 descriptor??
[  913.708756][T13861] IPVS: sh: FWM 3 0x00000003 - no destination available
[  913.715824][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  913.726614][ T6006] IPVS: starting estimator thread 0...
[  913.861490][T13864] IPVS: using max 33 ests per chain, 79200 per kthread
[  913.905281][ T6053] usb 5-1: USB disconnect, device number 16
[  916.374656][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1812'.
[  916.484847][T13898] : entered promiscuous mode
[  917.044987][T13904] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  917.051532][T13904] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  917.080630][T13902] fuse: Bad value for 'fd'
[  917.127921][T13904] vhci_hcd vhci_hcd.0: Device attached
[  917.235889][T13904] smc: net device bond0 applied user defined pnetid SYZ0
[  917.246176][T13904] smc: net device bond0 erased user defined pnetid SYZ0
[  917.970788][ T5942] usb 48-1: SetAddress Request (10) to port 0
[  917.976418][T13905] vhci_hcd: connection closed
[  917.976948][ T5942] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd
[  917.993241][ T6048] vhci_hcd vhci_hcd.7: stop threads
[  918.760873][ T6048] vhci_hcd vhci_hcd.7: release socket
[  918.818300][ T6048] vhci_hcd vhci_hcd.7: disconnect device
[  923.830945][ T5942] usb 48-1: device descriptor read/8, error -110
[  925.394245][T13975] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  925.400789][T13975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  925.651839][T13975] vhci_hcd vhci_hcd.0: Device attached
[  925.681000][ T5942] usb usb48-port1: attempt power cycle
[  926.489170][T13975] smc: net device bond0 applied user defined pnetid SYZ0
[  926.496804][T13975] smc: net device bond0 erased user defined pnetid SYZ0
[  926.645957][T13976] vhci_hcd: connection closed
[  926.651529][   T37] vhci_hcd vhci_hcd.7: stop threads
[  926.680906][ T5942] usb 48-1: SetAddress Request (12) to port 0
[  926.702108][ T5942] usb 48-1: new SuperSpeed USB device number 12 using vhci_hcd
[  926.720790][   T37] vhci_hcd vhci_hcd.7: release socket
[  926.735061][   T37] vhci_hcd vhci_hcd.7: disconnect device
[  926.795663][ T5942] usb 48-1: enqueue for inactive port 0
[  927.534675][ T5942] usb usb48-port1: unable to enumerate USB device
[  928.035811][T14009] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  929.111163][  T109] IPVS: starting estimator thread 0...
[  929.209298][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'.
[  929.222676][T14011] IPVS: using max 26 ests per chain, 62400 per kthread
[  930.173291][T14028] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  930.512050][T14028] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  931.202785][T14043] netlink: 'syz.7.1847': attribute type 1 has an invalid length.
[  931.211156][T14043] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1847'.
[  934.935585][T14069] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  934.942105][T14069] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  934.991326][T14069] vhci_hcd vhci_hcd.0: Device attached
[  935.113501][T14069] smc: net device bond0 applied user defined pnetid SYZ0
[  935.121035][T14069] smc: net device bond0 erased user defined pnetid SYZ0
[  935.135110][T14071] vhci_hcd: connection closed
[  935.137351][ T6052] vhci_hcd vhci_hcd.9: stop threads
[  935.152900][ T6052] vhci_hcd vhci_hcd.9: release socket
[  935.185741][ T6052] vhci_hcd vhci_hcd.9: disconnect device
[  935.398648][T14081] IPVS: set_ctl: invalid protocol: 8 10.1.5.1:0
[  935.995361][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  940.170851][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1864'.
[  942.288400][T14144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  942.294955][T14144] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  942.352511][T14144] vhci_hcd vhci_hcd.0: Device attached
[  942.383255][T14142] smc: net device bond0 applied user defined pnetid SYZ0
[  942.390691][T14142] smc: net device bond0 erased user defined pnetid SYZ0
[  942.405225][T14145] vhci_hcd: connection closed
[  942.406660][   T50] vhci_hcd vhci_hcd.3: stop threads
[  942.473119][   T50] vhci_hcd vhci_hcd.3: release socket
[  942.478614][   T50] vhci_hcd vhci_hcd.3: disconnect device
[  947.386517][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'.
[  947.456616][T14203] : entered promiscuous mode
[  948.359950][T14215] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  948.366510][T14215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  948.602579][T14215] vhci_hcd vhci_hcd.0: Device attached
[  948.794371][T14222] smc: net device bond0 applied user defined pnetid SYZ0
[  948.817553][T14222] smc: net device bond0 erased user defined pnetid SYZ0
[  949.001256][ T5885] usb 40-1: SetAddress Request (6) to port 0
[  949.022337][ T5885] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd
[  949.210196][T14218] vhci_hcd: connection reset by peer
[  949.270655][ T5989] vhci_hcd vhci_hcd.3: stop threads
[  949.400666][ T5989] vhci_hcd vhci_hcd.3: release socket
[  949.514242][ T5989] vhci_hcd vhci_hcd.3: disconnect device
[  953.440932][T10380] Bluetooth: hci1: command 0x0406 tx timeout
[  953.990434][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'.
[  954.150854][ T5885] usb 40-1: device descriptor read/8, error -110
[  954.615848][ T5885] usb usb40-port1: attempt power cycle
[  954.769658][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[  955.821913][ T5885] usb usb40-port1: unable to enumerate USB device
[  955.828959][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'.
[  957.072594][T14294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  957.079151][T14294] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  957.126843][T14294] vhci_hcd vhci_hcd.0: Device attached
[  957.182823][T14294] smc: net device bond0 applied user defined pnetid SYZ0
[  957.224629][T14294] smc: net device bond0 erased user defined pnetid SYZ0
[  957.286010][T14295] vhci_hcd: connection closed
[  957.286361][ T5989] vhci_hcd vhci_hcd.4: stop threads
[  957.324611][ T5989] vhci_hcd vhci_hcd.4: release socket
[  957.441032][  T109] usb 42-1: SetAddress Request (6) to port 0
[  957.451518][  T109] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  957.905795][ T5989] vhci_hcd vhci_hcd.4: disconnect device
[  958.320816][  T109] usb 42-1: enqueue for inactive port 0
[  958.558185][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  959.011648][  T109] usb usb42-port1: attempt power cycle
[  960.416750][  T109] usb usb42-port1: unable to enumerate USB device
[  962.948605][T14344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1917'.
[  962.958258][T14344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1917'.
[  963.715709][T14356] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  967.011509][T14376] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  967.018042][T14376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  967.066344][T14376] vhci_hcd vhci_hcd.0: Device attached
[  967.101616][T14382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1927'.
[  967.164788][T14376] smc: net device bond0 applied user defined pnetid SYZ0
[  967.172370][T14376] smc: net device bond0 erased user defined pnetid SYZ0
[  967.189575][T14379] vhci_hcd: connection closed
[  967.189869][   T50] vhci_hcd vhci_hcd.0: stop threads
[  967.220611][   T50] vhci_hcd vhci_hcd.0: release socket
[  967.237085][   T50] vhci_hcd vhci_hcd.0: disconnect device
[  967.265868][T14386] netlink: 'syz.3.1926': attribute type 25 has an invalid length.
[  967.550869][T14395] binder: 14394:14395 ioctl c0306201 0 returned -14
[  967.960463][T14399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1930'.
[  968.202660][T14399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1930'.
[  971.845465][T14438] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1941'.
[  973.854976][T14462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1945'.
[  973.867603][T14462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1945'.
[  979.031145][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  979.458146][T14525] xt_time: invalid argument - start or stop time greater than 23:59:59
[  981.691393][T14554] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1966'.
[  981.861015][T14554] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1966'.
[  984.164281][T14587] netlink: 21 bytes leftover after parsing attributes in process `syz.8.1972'.
[  989.960064][T14644] netlink: 21 bytes leftover after parsing attributes in process `syz.9.1987'.
[  991.084070][T14666] netlink: 'syz.0.1994': attribute type 1 has an invalid length.
[  991.092208][T14666] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1994'.
[  993.491247][ T7229] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  994.286309][ T7229] usb 10-1: config 0 has no interfaces?
[  994.543498][ T7229] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  994.690838][ T7229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.722695][ T7229] usb 10-1: config 0 descriptor??
[  995.449327][T14325] usb 10-1: USB disconnect, device number 16
[  996.113666][ T6085] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  997.110604][T14721] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2005'.
[  997.510015][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  998.521848][T14736] netlink: 21 bytes leftover after parsing attributes in process `syz.7.2008'.
[  999.874868][T14753] 9p: Bad value for 'rfdno'
[  999.929535][T14754] netlink: 'syz.3.2011': attribute type 1 has an invalid length.
[  999.937589][T14754] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2011'.
[ 1000.663800][   T31] audit: type=1326 audit(1765827229.552:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14739 comm="syz.9.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7298f749 code=0x7fc00000
[ 1000.918824][T14766] Bluetooth: MGMT ver 1.23
[ 1003.530083][T14795] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2027'.
[ 1005.045205][T14810] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[ 1005.051770][T14810] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1005.081179][T14810] vhci_hcd vhci_hcd.0: Device attached
[ 1005.890543][T14815] netlink: 'syz.3.2032': attribute type 1 has an invalid length.
[ 1005.898832][T14815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2032'.
[ 1005.974149][T14816] smc: net device bond0 applied user defined pnetid SYZ0
[ 1005.983376][T14816] smc: net device bond0 erased user defined pnetid SYZ0
[ 1006.142845][T14811] vhci_hcd: connection closed
[ 1006.169343][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1006.227134][T14325] usb 48-1: SetAddress Request (14) to port 0
[ 1006.278072][T14325] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd
[ 1006.291031][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1006.344103][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1006.401127][T14325] usb 48-1: enqueue for inactive port 0
[ 1006.882044][T14325] usb usb48-port1: attempt power cycle
[ 1008.202139][T14325] usb usb48-port1: unable to enumerate USB device
[ 1008.565993][ T5885] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 1008.862551][ T5885] usb 4-1: config 0 has no interfaces?
[ 1008.881228][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1008.942463][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.027790][ T5885] usb 4-1: config 0 descriptor??
[ 1009.616948][T14858] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2040'.
[ 1013.681322][T14883] netlink: 'syz.9.2046': attribute type 1 has an invalid length.
[ 1013.689058][T14883] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2046'.
[ 1015.106295][T14892] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[ 1015.114188][T14892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2047'.
[ 1016.007610][ T6182] usb 4-1: USB disconnect, device number 12
[ 1016.534485][T14927] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2054'.
[ 1016.800932][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2055'.
[ 1018.464843][T14950] netlink: 'syz.8.2059': attribute type 1 has an invalid length.
[ 1018.472785][T14950] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2059'.
[ 1020.167757][T14967] netlink: 'syz.7.2063': attribute type 1 has an invalid length.
[ 1020.175559][T14967] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2063'.
[ 1021.795498][T14992] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2070'.
[ 1023.184950][T15014] fuse: Bad value for 'fd'
[ 1023.692956][T15017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.709868][T15021] netlink: 'syz.3.2078': attribute type 1 has an invalid length.
[ 1023.717770][T15021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2078'.
[ 1024.237833][T15017] bridge_slave_1 (unregistering): left allmulticast mode
[ 1024.391923][T15017] bridge_slave_1 (unregistering): left promiscuous mode
[ 1024.501884][T15017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1028.430576][T15091] No control pipe specified
[ 1029.107989][T15095] fuse: Bad value for 'fd'
[ 1032.405518][T15118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.488237][T15118] bridge_slave_1 (unregistering): left allmulticast mode
[ 1032.495403][T15118] bridge_slave_1 (unregistering): left promiscuous mode
[ 1032.502538][T15118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.645069][ T6053] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1034.018589][ T6053] usb 5-1: config 0 has no interfaces?
[ 1034.031576][ T6053] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1034.064542][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.161848][ T6053] usb 5-1: config 0 descriptor??
[ 1034.237507][T15147] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2105'.
[ 1035.666617][T15166] fuse: Bad value for 'fd'
[ 1041.712538][ T6053] usb 5-1: USB disconnect, device number 17
[ 1041.860930][T15211] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2119'.
[ 1046.482516][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'.
[ 1049.270998][T14325] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1049.551305][T14325] usb 9-1: config 0 has no interfaces?
[ 1049.558827][T14325] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1049.572332][T14325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.836140][T14325] usb 9-1: config 0 descriptor??
[ 1050.336911][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'.
[ 1054.508898][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1054.561244][T15305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1054.578984][T15305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1054.587004][T15305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1054.594837][T15305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1055.739832][ T7726] usb 9-1: USB disconnect, device number 4
[ 1056.630942][T15305] Bluetooth: hci2: command tx timeout
[ 1056.943810][T15304] chnl_net:caif_netlink_parms(): no params data found
[ 1058.261356][ T6198] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.843599][T15305] Bluetooth: hci2: command tx timeout
[ 1058.904443][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.180837][T15352] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1060.866625][T15304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.875484][T15305] Bluetooth: hci2: command tx timeout
[ 1061.086551][T15304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.093953][T15304] bridge_slave_0: entered allmulticast mode
[ 1061.102537][T15304] bridge_slave_0: entered promiscuous mode
[ 1061.117196][T15304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.124629][T15304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1061.134895][T15304] bridge_slave_1: entered allmulticast mode
[ 1061.763504][T15304] bridge_slave_1: entered promiscuous mode
[ 1062.716532][T15368] overlayfs: failed to resolve './file2': -2
[ 1063.001442][T15305] Bluetooth: hci2: command tx timeout
[ 1064.457660][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1066.481440][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.095368][ T3071] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.231161][T10380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1068.240164][T10380] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1068.247926][T10380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1068.257380][T10380] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1068.265090][T10380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1068.423263][T15304] team0: Port device team_slave_0 added
[ 1068.504756][T15304] team0: Port device team_slave_1 added
[ 1068.591026][T15421] netlink: 'syz.4.2165': attribute type 25 has an invalid length.
[ 1069.772747][ T3071] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.201838][T15304] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1070.294332][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1070.322120][T10380] Bluetooth: hci6: command tx timeout
[ 1070.447023][T15304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1071.109487][ T3071] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.335162][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'.
[ 1071.362487][T15304] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1071.415314][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1071.517610][T15304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.585725][T10380] Bluetooth: hci6: command tx timeout
[ 1072.999677][T15304] hsr_slave_0: entered promiscuous mode
[ 1073.207520][T15304] hsr_slave_1: entered promiscuous mode
[ 1074.633532][T10380] Bluetooth: hci6: command tx timeout
[ 1074.691113][ T5968] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1075.178469][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1075.282372][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.571512][ T5968] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1075.580642][ T5968] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1075.589061][ T5968] usb 4-1: Manufacturer: syz
[ 1075.628455][ T5968] usb 4-1: config 0 descriptor??
[ 1075.981393][T15480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.021064][T15480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.412319][T15509] netlink: 'syz.4.2181': attribute type 25 has an invalid length.
[ 1076.458293][ T3071] bridge_slave_1: left allmulticast mode
[ 1076.497290][ T3071] bridge_slave_1: left promiscuous mode
[ 1076.518237][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.592059][ T3071] bridge_slave_0: left allmulticast mode
[ 1076.612979][ T3071] bridge_slave_0: left promiscuous mode
[ 1076.644236][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'.
[ 1076.671013][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.710985][T10380] Bluetooth: hci6: command tx timeout
[ 1079.392206][ T5968] usbhid 4-1:0.0: can't add hid device: -71
[ 1079.405920][ T5968] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1079.451042][ T5968] usb 4-1: USB disconnect, device number 13
[ 1080.944384][ T6078] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1081.101126][ T6078] usb 5-1: Using ep0 maxpacket: 32
[ 1081.110809][ T6078] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.121729][ T6078] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1081.135611][ T6078] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1081.153923][ T6078] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1081.176755][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.217975][ T6078] usb 5-1: config 0 descriptor??
[ 1081.320497][ T6078] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1081.464135][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1081.483218][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1081.513259][ T3071] bond0 (unregistering): Released all slaves
[ 1082.041109][ T3071] : left promiscuous mode
[ 1082.317646][    T9] usb 5-1: USB disconnect, device number 18
[ 1082.616049][ T3071] tipc: Left network mode
[ 1082.620834][T15415] chnl_net:caif_netlink_parms(): no params data found
[ 1083.322567][T15580] overlayfs: failed to resolve './file2': -2
[ 1084.350495][T15589] netlink: 'syz.4.2194': attribute type 25 has an invalid length.
[ 1085.435443][T15415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.577021][T15415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.671526][T15415] bridge_slave_0: entered allmulticast mode
[ 1085.864322][T15415] bridge_slave_0: entered promiscuous mode
[ 1086.914333][T15415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.951448][T15415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.972844][T15415] bridge_slave_1: entered allmulticast mode
[ 1087.015460][T15415] bridge_slave_1: entered promiscuous mode
[ 1087.113982][ T3071] hsr_slave_0: left promiscuous mode
[ 1087.328729][ T3071] hsr_slave_1: left promiscuous mode
[ 1087.398225][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1089.187675][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1089.205788][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1089.215197][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1089.307718][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[ 1089.683774][ T3071] veth1_macvtap: left promiscuous mode
[ 1089.689430][ T3071] veth0_macvtap: left promiscuous mode
[ 1089.695769][ T3071] veth1_vlan: left promiscuous mode
[ 1089.711049][T15626] overlayfs: missing 'lowerdir'
[ 1089.716090][ T3071] veth0_vlan: left promiscuous mode
[ 1091.385542][ T3071] team0 (unregistering): Port device team_slave_1 removed
[ 1091.472416][ T3071] team0 (unregistering): Port device team_slave_0 removed
[ 1092.514090][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1092.535773][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1093.302987][T15415] team0: Port device team_slave_0 added
[ 1093.370482][T15415] team0: Port device team_slave_1 added
[ 1093.385287][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2209'.
[ 1093.654863][T15304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1093.692796][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1093.715842][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1093.818976][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1093.853229][T15304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1093.921234][T15304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1093.994052][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1094.034636][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1094.119866][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1094.132605][T15304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1094.623577][T15415] hsr_slave_0: entered promiscuous mode
[ 1094.655215][T15415] hsr_slave_1: entered promiscuous mode
[ 1094.669587][T15415] debugfs: 'hsr0' already exists in 'hsr'
[ 1094.832180][T15415] Cannot create hsr debugfs directory
[ 1095.460009][ T5966] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1095.970738][ T5966] usb 4-1: Using ep0 maxpacket: 32
[ 1095.990875][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1096.011361][ T5966] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1096.064633][ T5966] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1096.098432][ T5966] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1096.120939][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.156470][ T5966] usb 4-1: config 0 descriptor??
[ 1097.873811][ T5966] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1098.681043][T15304] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.852748][ T6053] usb 4-1: USB disconnect, device number 14
[ 1099.043763][T15304] 8021q: adding VLAN 0 to HW filter on device team0
[ 1099.161992][T14400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.169384][T14400] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1099.509966][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.517145][ T7576] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1100.542322][T15717] netlink: 'syz.0.2221': attribute type 25 has an invalid length.
[ 1100.701231][T15721] netlink: 'syz.3.2222': attribute type 1 has an invalid length.
[ 1100.709140][T15721] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2222'.
[ 1101.623222][T15415] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1101.773180][T15415] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1101.866639][T15415] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1101.975480][T15415] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1102.430353][T15304] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.781090][T15304] veth0_vlan: entered promiscuous mode
[ 1104.375636][T15304] veth1_vlan: entered promiscuous mode
[ 1104.425749][T15415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1104.540836][T15304] veth0_macvtap: entered promiscuous mode
[ 1104.654214][T15415] 8021q: adding VLAN 0 to HW filter on device team0
[ 1104.715446][T15304] veth1_macvtap: entered promiscuous mode
[ 1104.754351][  T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1104.761580][  T377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1104.857155][  T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1104.864313][  T377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1104.987132][T15304] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1105.041634][T15304] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1105.170285][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1105.197434][ T6052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1105.251351][ T6052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1105.297036][ T6052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1105.572306][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.618811][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.759236][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.797944][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1108.096148][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1108.350153][T15415] veth0_vlan: entered promiscuous mode
[ 1108.423014][T15415] veth1_vlan: entered promiscuous mode
[ 1108.477822][T15415] veth0_macvtap: entered promiscuous mode
[ 1108.517537][T15415] veth1_macvtap: entered promiscuous mode
[ 1108.709678][T15415] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1108.831581][T15415] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.951897][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.111236][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.141318][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.150065][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.320964][T15810] netlink: 'syz.4.2236': attribute type 25 has an invalid length.
[ 1109.581862][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.589683][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.741420][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.799665][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1110.100815][   T30] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1110.270828][T15825] netlink: 'syz.1.2160': attribute type 1 has an invalid length.
[ 1110.278635][T15825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2160'.
[ 1110.395151][   T30] usb 9-1: config 0 has no interfaces?
[ 1110.421041][   T30] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1110.483604][   T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.646246][   T30] usb 9-1: config 0 descriptor??
[ 1113.512620][ T5885] usb 9-1: USB disconnect, device number 5
[ 1114.850007][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'.
[ 1114.864461][T15852] : entered promiscuous mode
[ 1116.431088][ T7229] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1116.782135][ T7229] usb 9-1: Using ep0 maxpacket: 32
[ 1116.964608][ T7229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.995567][ T7229] usb 9-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1117.090818][ T7229] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1117.107796][ T7229] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1117.161111][ T7229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.222130][ T7229] usb 9-1: config 0 descriptor??
[ 1117.284908][ T7229] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1119.756179][    T9] usb 9-1: USB disconnect, device number 6
[ 1119.874148][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'.
[ 1120.260853][    T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1120.414718][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.483291][    T9] usb 9-1: config 0 has no interfaces?
[ 1120.488782][    T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1120.628383][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.659179][    T9] usb 9-1: config 0 descriptor??
[ 1124.316950][T15928] overlayfs: missing 'lowerdir'
[ 1127.887561][T15622] usb 9-1: USB disconnect, device number 7
[ 1128.057751][T15950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'.
[ 1129.752027][T15976] overlayfs: missing 'workdir'
[ 1130.471387][ T6307] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1130.891675][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1131.816011][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1131.904136][T15993] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1132.630772][ T6307] usb 1-1: string descriptor 0 read error: -71
[ 1132.636992][ T6307] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1134.700620][ T6307] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1134.892217][ T6307] usb 1-1: config 0 descriptor??
[ 1135.076358][ T6307] usb 1-1: can't set config #0, error -71
[ 1135.144904][ T6307] usb 1-1: USB disconnect, device number 4
[ 1135.291347][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'.
[ 1135.394969][ T5922] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[ 1135.600218][ T5922] usb 5-1: config 0 has no interfaces?
[ 1135.608205][ T5922] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1135.724014][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1136.074817][ T5922] usb 5-1: config 0 descriptor??
[ 1139.581240][T15305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1139.623686][T15305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1139.631796][T15305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1139.639698][T15305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1139.647443][T15305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1140.617757][ T3532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.176853][ T3532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.385484][T14325] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1141.477858][ T3532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.492161][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2294'.
[ 1141.581575][T14325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.607881][T14325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.628627][T14325] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1141.750896][T15305] Bluetooth: hci5: command tx timeout
[ 1141.780823][T14325] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1141.788886][T14325] usb 2-1: Manufacturer: syz
[ 1141.818733][T14325] usb 2-1: config 0 descriptor??
[ 1142.068430][T16054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1142.140245][T16054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1144.184758][T15305] Bluetooth: hci5: command tx timeout
[ 1144.194621][ T3532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.209504][T14325] usbhid 2-1:0.0: can't add hid device: -71
[ 1144.266943][T14325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1144.330844][T14325] usb 2-1: USB disconnect, device number 10
[ 1145.125803][ T5922] usb 5-1: USB disconnect, device number 19
[ 1145.162906][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2295'.
[ 1145.412659][T16077] overlayfs: missing 'workdir'
[ 1146.048279][T16039] chnl_net:caif_netlink_parms(): no params data found
[ 1146.351099][T15305] Bluetooth: hci5: command tx timeout
[ 1148.414824][T15305] Bluetooth: hci5: command tx timeout
[ 1149.482743][ T3532] bridge_slave_1: left allmulticast mode
[ 1149.488427][ T3532] bridge_slave_1: left promiscuous mode
[ 1149.580926][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.434866][ T3532] bridge_slave_0: left allmulticast mode
[ 1150.505789][ T3532] bridge_slave_0: left promiscuous mode
[ 1150.556226][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.728852][T16134] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1156.438386][T16147] overlayfs: missing 'workdir'
[ 1157.675927][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1157.717300][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1159.007667][ T3532] bond0 (unregistering): Released all slaves
[ 1159.593970][T15978] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1159.637850][T16039] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.820455][T16039] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1159.829170][T16039] bridge_slave_0: entered allmulticast mode
[ 1159.843603][T16039] bridge_slave_0: entered promiscuous mode
[ 1159.862702][T16039] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1159.872222][T15978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1159.874610][T16039] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.905224][T15978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1160.558285][T16039] bridge_slave_1: entered allmulticast mode
[ 1160.573288][T16039] bridge_slave_1: entered promiscuous mode
[ 1160.656022][T15978] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1160.681635][T15978] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1161.449182][T15978] usb 5-1: Manufacturer: syz
[ 1161.485320][T15978] usb 5-1: config 0 descriptor??
[ 1161.691628][T15978] usb 5-1: can't set config #0, error -71
[ 1161.724874][T15978] usb 5-1: USB disconnect, device number 20
[ 1162.610377][T16181] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1163.409124][T16039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1163.494314][T16039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1165.933020][T16039] team0: Port device team_slave_0 added
[ 1166.041798][ T3532] hsr_slave_0: left promiscuous mode
[ 1167.900950][ T3532] hsr_slave_1: left promiscuous mode
[ 1167.925148][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1167.963468][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1168.448775][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1168.490844][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1168.866654][ T3532] veth1_macvtap: left promiscuous mode
[ 1168.895844][ T3532] veth0_macvtap: left promiscuous mode
[ 1168.927801][ T3532] veth1_vlan: left promiscuous mode
[ 1168.983450][ T3532] veth0_vlan: left promiscuous mode
[ 1171.123624][ T6307] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1171.651487][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.062400][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.075316][ T6307] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1172.084585][ T6307] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1172.092894][ T6307] usb 1-1: Manufacturer: syz
[ 1172.113131][ T6307] usb 1-1: config 0 descriptor??
[ 1172.329543][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1172.369040][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1174.615711][ T6307] usbhid 1-1:0.0: can't add hid device: -71
[ 1174.636931][ T6307] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1174.674803][ T6307] usb 1-1: USB disconnect, device number 5
[ 1175.325433][T10380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1175.416241][T10380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1175.424082][T10380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1175.453954][T10380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1175.461721][T10380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1176.449501][ T3532] team0 (unregistering): Port device team_slave_1 removed
[ 1176.579208][ T3532] team0 (unregistering): Port device team_slave_0 removed
[ 1177.593873][T10380] Bluetooth: hci2: command tx timeout
[ 1180.160698][T10380] Bluetooth: hci2: command tx timeout
[ 1181.004319][T16298] netlink: 'syz.1.2347': attribute type 1 has an invalid length.
[ 1181.012589][T16298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2347'.
[ 1181.763191][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.231052][T10380] Bluetooth: hci2: command tx timeout
[ 1183.195011][T16039] team0: Port device team_slave_1 added
[ 1183.440701][T16323] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2356'.
[ 1183.671673][  T109] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1183.872353][T16323] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2356'.
[ 1183.890712][  T109] usb 1-1: Using ep0 maxpacket: 32
[ 1183.910072][  T109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1183.935785][  T109] usb 1-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1183.961203][  T109] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1183.967845][  T109] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1184.001438][  T109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.027323][T16039] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1184.040871][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.094242][  T109] usb 1-1: config 0 descriptor??
[ 1184.094981][T16039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.147954][  T109] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1184.184724][T16039] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.205694][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.276609][T16039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.320826][T15305] Bluetooth: hci2: command tx timeout
[ 1185.382043][  T109] usb 1-1: USB disconnect, device number 6
[ 1186.658196][T16039] hsr_slave_0: entered promiscuous mode
[ 1186.737064][T16039] hsr_slave_1: entered promiscuous mode
[ 1186.941380][T16350] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2361'.
[ 1187.251313][T16350] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2361'.
[ 1187.620849][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1187.814102][ T5885] usb 5-1: Using ep0 maxpacket: 32
[ 1187.835597][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.866746][ T5885] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1187.893383][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1187.900028][ T5885] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1187.915537][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.929007][ T5885] usb 5-1: config 0 descriptor??
[ 1187.956054][ T5885] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1188.037562][ T3532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.990954][ T6307] usb 5-1: USB disconnect, device number 21
[ 1191.294543][ T3532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1192.359327][T16385] tipc: Started in network mode
[ 1192.365108][T16385] tipc: Node identity 4, cluster identity 4711
[ 1192.371365][T16385] tipc: Node number set to 4
[ 1192.509945][ T3532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1192.860078][T16390] netlink: 'syz.1.2370': attribute type 25 has an invalid length.
[ 1193.070082][T16258] chnl_net:caif_netlink_parms(): no params data found
[ 1193.790809][T15622] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1193.908164][T16408] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1194.014997][T15622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1194.056200][T15622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1194.089217][T15622] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1194.110871][T15622] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1194.118862][T15622] usb 9-1: Manufacturer: syz
[ 1194.146313][T15622] usb 9-1: config 0 descriptor??
[ 1194.342635][ T5845] Bluetooth: hci6: command 0x0406 tx timeout
[ 1194.384518][T16398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1194.447718][T16398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1194.487394][T16258] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.492878][T16422] fuse: Bad value for 'fd'
[ 1195.992114][T10380] Bluetooth: hci3: command 0x1003 tx timeout
[ 1195.998474][T15305] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1196.005475][T16258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.013946][T16258] bridge_slave_0: entered allmulticast mode
[ 1196.022093][T16258] bridge_slave_0: entered promiscuous mode
[ 1196.032623][ T3532] bridge_slave_1: left allmulticast mode
[ 1196.038276][ T3532] bridge_slave_1: left promiscuous mode
[ 1196.049377][T15622] usbhid 9-1:0.0: can't add hid device: -71
[ 1196.066194][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.107941][T15622] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1196.133638][T15622] usb 9-1: USB disconnect, device number 8
[ 1196.301846][ T3532] bridge_slave_0: left allmulticast mode
[ 1196.307530][ T3532] bridge_slave_0: left promiscuous mode
[ 1196.395493][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.822319][T16435] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2381'.
[ 1197.126676][T16435] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2381'.
[ 1197.162764][T16437] netlink: 'syz.1.2382': attribute type 25 has an invalid length.
[ 1197.724105][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'.
[ 1198.401408][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1198.424536][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1198.454331][ T3532] bond0 (unregistering): Released all slaves
[ 1198.478508][T16258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1198.485930][T16258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.493758][T16258] bridge_slave_1: entered allmulticast mode
[ 1198.504686][T16258] bridge_slave_1: entered promiscuous mode
[ 1199.215289][ T3532] : left promiscuous mode
[ 1199.244456][T16453] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1199.439553][T16456] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2387'.
[ 1199.500738][  T109] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1199.763262][T16456] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2387'.
[ 1199.798029][T16258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1199.814049][T10380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1199.828824][T10380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1199.846582][T10380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1199.871152][T10380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1199.880955][  T109] usb 5-1: Using ep0 maxpacket: 32
[ 1199.886386][T16258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1199.907594][  T109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.918349][T10380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1199.951339][  T109] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1200.007221][  T109] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1200.043395][  T109] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1200.078296][  T109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.127297][  T109] usb 5-1: config 0 descriptor??
[ 1200.140080][  T109] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1200.216826][T16258] team0: Port device team_slave_0 added
[ 1200.260967][ T5922] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1200.300422][T16258] team0: Port device team_slave_1 added
[ 1200.508692][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1200.521469][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1200.748765][ T5922] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1200.750587][T16472] fuse: Bad value for 'fd'
[ 1200.759015][ T5922] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1200.882679][ T5922] usb 2-1: Manufacturer: syz
[ 1200.938516][ T5922] usb 2-1: config 0 descriptor??
[ 1201.014015][T16215] usb 5-1: USB disconnect, device number 22
[ 1201.089144][T16258] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1201.103691][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1201.133315][T16258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1201.161411][T16466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1201.195770][T16466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1201.230984][ T3532] hsr_slave_0: left promiscuous mode
[ 1202.740703][T10380] Bluetooth: hci3: command tx timeout
[ 1202.753626][ T5922] usbhid 2-1:0.0: can't add hid device: -71
[ 1202.772597][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1202.793471][ T5922] usb 2-1: USB disconnect, device number 11
[ 1202.900878][ T3532] hsr_slave_1: left promiscuous mode
[ 1202.930790][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1202.970749][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1203.053381][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1203.118369][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1203.307132][ T3532] veth1_macvtap: left promiscuous mode
[ 1203.500899][ T3532] veth0_macvtap: left promiscuous mode
[ 1203.555313][ T3532] veth1_vlan: left promiscuous mode
[ 1203.567980][T16485] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1204.245788][ T3532] veth0_vlan: left promiscuous mode
[ 1204.811704][T10380] Bluetooth: hci3: command tx timeout
[ 1205.603360][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2397'.
[ 1205.947971][T16497] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2398'.
[ 1206.182140][T16497] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2398'.
[ 1206.871018][T10380] Bluetooth: hci3: command tx timeout
[ 1208.054796][ T3532] team0 (unregistering): Port device team_slave_1 removed
[ 1208.105224][ T3532] team0 (unregistering): Port device team_slave_0 removed
[ 1208.950994][T10380] Bluetooth: hci3: command tx timeout
[ 1208.979144][T16258] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1208.986376][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1209.013096][T16258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1209.722279][T16258] hsr_slave_0: entered promiscuous mode
[ 1209.745845][T16258] hsr_slave_1: entered promiscuous mode
[ 1209.755413][T16258] debugfs: 'hsr0' already exists in 'hsr'
[ 1209.763320][T16258] Cannot create hsr debugfs directory
[ 1209.840747][T16215] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1210.014355][T16215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1210.050501][ T3532] IPVS: stop unused estimator thread 0...
[ 1210.059938][T16215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1210.072641][T16215] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1210.082403][T16215] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1210.090477][T16215] usb 2-1: Manufacturer: syz
[ 1210.104548][T16215] usb 2-1: config 0 descriptor??
[ 1210.335409][T16513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1210.361220][T16513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1212.170012][T16215] usbhid 2-1:0.0: can't add hid device: -71
[ 1212.189357][T16215] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1212.211417][T16215] usb 2-1: USB disconnect, device number 12
[ 1212.523916][   T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1212.761288][   T30] usb 5-1: Using ep0 maxpacket: 32
[ 1213.125957][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1213.171081][   T30] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1213.451669][   T30] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1213.461566][   T30] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1213.470864][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.491725][   T30] usb 5-1: config 0 descriptor??
[ 1214.253611][   T30] usb 5-1: can't set config #0, error -71
[ 1214.328761][   T30] usb 5-1: USB disconnect, device number 23
[ 1214.721242][T16457] chnl_net:caif_netlink_parms(): no params data found
[ 1215.208392][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'.
[ 1217.276496][T16457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1217.293176][T16457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.314685][T16457] bridge_slave_0: entered allmulticast mode
[ 1217.347153][T16457] bridge_slave_0: entered promiscuous mode
[ 1217.429156][T16457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1217.456879][T16457] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.464098][T16586] netlink: 'syz.1.2405': attribute type 25 has an invalid length.
[ 1217.496867][T16457] bridge_slave_1: entered allmulticast mode
[ 1217.522661][T16457] bridge_slave_1: entered promiscuous mode
[ 1219.087279][T16457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1219.178441][T16457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1219.883718][ T6048] bridge_slave_1: left allmulticast mode
[ 1219.908495][ T6048] bridge_slave_1: left promiscuous mode
[ 1219.914803][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1219.942201][ T6048] bridge_slave_0: left allmulticast mode
[ 1219.958146][ T6048] bridge_slave_0: left promiscuous mode
[ 1220.014999][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1220.401033][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1220.452337][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1220.483493][ T6048] bond0 (unregistering): Released all slaves
[ 1220.535686][T16258] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1221.024340][T16258] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1221.168131][T16457] team0: Port device team_slave_0 added
[ 1221.220992][T16258] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1221.266685][T16457] team0: Port device team_slave_1 added
[ 1221.278779][ T6048] hsr_slave_0: left promiscuous mode
[ 1221.298234][ T6048] hsr_slave_1: left promiscuous mode
[ 1221.352146][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.415199][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.656643][T16635] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2425'.
[ 1221.871407][T16635] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2425'.
[ 1224.096392][ T6048] team0 (unregistering): Port device team_slave_1 removed
[ 1224.284393][ T6048] team0 (unregistering): Port device team_slave_0 removed
[ 1224.379081][T16662] netlink: 'syz.0.2430': attribute type 25 has an invalid length.
[ 1225.002550][T16258] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1225.347629][T16457] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1225.370764][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1225.651752][T16457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1225.693147][T16457] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1225.700111][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1225.786376][T16457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1227.601776][T16457] hsr_slave_0: entered promiscuous mode
[ 1227.608582][T16457] hsr_slave_1: entered promiscuous mode
[ 1231.032394][T16714] netlink: 'syz.1.2439': attribute type 1 has an invalid length.
[ 1231.040266][T16714] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2439'.
[ 1231.654940][T16720] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2440'.
[ 1231.831541][T16720] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2440'.
[ 1232.392864][T16258] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1234.010447][T16258] 8021q: adding VLAN 0 to HW filter on device team0
[ 1236.272702][T16457] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1237.477926][T16457] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1237.647447][T16457] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1237.831528][T15305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1237.841408][T15305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1237.919586][T15305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1237.933542][T15305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1237.946902][T15305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1238.025080][T16773] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2451'.
[ 1238.044673][T16773] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2451'.
[ 1238.131546][T16457] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1238.289731][T16778] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[ 1238.297788][T16778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2452'.
[ 1239.998902][T10380] Bluetooth: hci5: command tx timeout
[ 1240.044001][T16806] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2455'.
[ 1240.130221][T16806] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2455'.
[ 1242.080998][T10380] Bluetooth: hci5: command tx timeout
[ 1243.293029][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.735172][T16769] chnl_net:caif_netlink_parms(): no params data found
[ 1244.160728][T10380] Bluetooth: hci5: command tx timeout
[ 1245.365120][T16769] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.400794][T16769] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.408189][T16769] bridge_slave_0: entered allmulticast mode
[ 1245.462730][T16769] bridge_slave_0: entered promiscuous mode
[ 1245.493253][T16769] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.500528][T16769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.529949][T16769] bridge_slave_1: entered allmulticast mode
[ 1245.562712][T16769] bridge_slave_1: entered promiscuous mode
[ 1351.210590][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1351.217558][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=86377, q=273 ncpus=2)
[ 1351.225253][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295072306-4295061804), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 1351.238604][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g86377 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1351.249781][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1351.259727][    C1] rcu: RCU grace-period kthread stack dump:
[ 1351.265590][    C1] task:rcu_preempt     state:R  running task     stack:27200 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1351.279066][    C1] Call Trace:
[ 1351.282328][    C1]  <TASK>
[ 1351.285330][    C1]  __schedule+0x14bc/0x5000
[ 1351.289850][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1351.295041][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.300660][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1351.306544][    C1]  ? __pfx___schedule+0x10/0x10
[ 1351.311394][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.317014][    C1]  ? schedule+0x91/0x360
[ 1351.321249][    C1]  schedule+0x165/0x360
[ 1351.325400][    C1]  schedule_timeout+0x12b/0x270
[ 1351.330240][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1351.335603][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1351.340883][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.346501][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1351.352039][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1351.356887][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1351.361809][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1351.366993][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1351.372260][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1351.377461][    C1]  ? finish_swait+0xcd/0x1f0
[ 1351.382049][    C1]  rcu_gp_kthread+0x99/0x390
[ 1351.386626][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1351.391986][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1351.396910][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.402536][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1351.407562][    C1]  kthread+0x711/0x8a0
[ 1351.411623][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1351.416808][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.421385][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.427004][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1351.432193][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.437814][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1351.442992][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.447578][    C1]  ret_from_fork+0x599/0xb30
[ 1351.452153][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1351.457254][    C1]  ? __switch_to_asm+0x39/0x70
[ 1351.462007][    C1]  ? __switch_to_asm+0x33/0x70
[ 1351.466759][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.471344][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1351.476110][    C1]  </TASK>
[ 1351.479110][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1351.485406][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1351.490590][    C0] NMI backtrace for cpu 0
[ 1351.490608][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1351.490636][    C0] Tainted: [L]=SOFTLOCKUP
[ 1351.490644][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1351.490656][    C0] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20
[ 1351.490682][    C0] Code: 56 96 5b 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 66 95 5b 0a e9 41 06 00 00 90 <f3> 0f 1e fa 0f 01 ca fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8
[ 1351.490700][    C0] RSP: 0018:ffffffff8dc07d58 EFLAGS: 000000c6
[ 1351.490718][    C0] RAX: d750e34f4b655800 RBX: ffffffff81978eba RCX: d750e34f4b655800
[ 1351.490734][    C0] RDX: 0000000000000001 RSI: ffffffff8d7921b8 RDI: ffffffff8bc08360
[ 1351.490749][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[ 1351.490765][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f821e70
[ 1351.490780][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[ 1351.490797][    C0] FS:  0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
[ 1351.490814][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1351.490829][    C0] CR2: 00007f7e2cfed068 CR3: 0000000037fbb000 CR4: 0000000000350ef0
[ 1351.490845][    C0] Call Trace:
[ 1351.490854][    C0]  <TASK>
[ 1351.490861][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1351.490883][    C0] Code: 5e 93 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 <e9> 33 93 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1351.490900][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 1351.490916][    C0]  default_idle+0x13/0x20
[ 1351.490942][    C0]  default_idle_call+0x73/0xb0
[ 1351.490967][    C0]  do_idle+0x1ea/0x520
[ 1351.490990][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1351.491015][    C0]  ? irqentry_exit+0x5ba/0x660
[ 1351.491055][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1351.491089][    C0]  cpu_startup_entry+0x44/0x60
[ 1351.491114][    C0]  rest_init+0x2de/0x300
[ 1351.491143][    C0]  start_kernel+0x3a7/0x400
[ 1351.491179][    C0]  x86_64_start_reservations+0x24/0x30
[ 1351.491206][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1351.491233][    C0]  common_startup_64+0x13e/0x147
[ 1351.491272][    C0]  </TASK>