last executing test programs:

6m6.57898632s ago: executing program 2 (id=1162):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007f00)=@newtaction={0x920, 0x30, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{0x90c, 0x1, [@m_ipt={0xdc, 0x1e, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x18}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x5f, 0x6, "579af87c52cf17cb793664665c516cb6b741ecd1698484886bf4a31ceba63747d07485bd6f97c3734c6b9fcca7814121fba87f3043f7bb7f77b227cf8bad84793b63866d54202478779e4e24f497601e98adc5a31428642f1232c8"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ipt={0x82c, 0x1c, 0x0, 0x0, {{0x8}, {0x79c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x751, 0x6, {0x8, 'filter\x00', 0x1, 0x7, "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"}}]}, {0x69, 0x6, "2886e7a928fa0f34147988b0bf1f1095cd23a5cb1617419979578c00bee28af9f962885721b6b1573a74cea4b17f24b7a43794bdb9ba781ebc5133bc641940971069bd0dd88a89e06d6b125dfab8f813641821343c0c0c327e59f667adec995e660c229675"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x920}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)

6m6.436030332s ago: executing program 2 (id=1166):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x3, 0x8, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x4, 0xc, 0x6, 0x2, 0x0, 0x6d9df36, 0x8, 0x3, 0x0, 0x8, 0x7, '\x00', 0x9, 0x24})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})

6m5.331157338s ago: executing program 2 (id=1170):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "662a47efb7afa8d9fa55bb9d354c74fd391b1d786a74f1aef2669e00"}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x0, 0x0, 0x0, 0x1}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

6m4.421155801s ago: executing program 2 (id=1173):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3000000000000)
chroot(&(0x7f0000000000)='./file0\x00')
pivot_root(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00')

6m4.110995857s ago: executing program 2 (id=1176):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)

6m3.363833112s ago: executing program 2 (id=1181):
r0 = socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000040)=ANY=[])
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3}}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000003ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r8 = io_uring_setup(0x3de6, &(0x7f0000000080)={0x0, 0xeba3, 0x4, 0x18, 0x105})
syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x0, 0x2000032a, 0x0, r8}, &(0x7f0000000040), &(0x7f0000000180))
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)

6m3.230675873s ago: executing program 32 (id=1181):
r0 = socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000040)=ANY=[])
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3}}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000003ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r8 = io_uring_setup(0x3de6, &(0x7f0000000080)={0x0, 0xeba3, 0x4, 0x18, 0x105})
syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x0, 0x2000032a, 0x0, r8}, &(0x7f0000000040), &(0x7f0000000180))
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)

2m39.075535457s ago: executing program 4 (id=1923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r2)
getresgid(&(0x7f0000000040), &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000240))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r4=>0x0}, 0x0)
setresgid(r2, r3, r4)

2m38.823558519s ago: executing program 4 (id=1925):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5e, 0x5e, 0x3, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xfffffffe, 0xd7}], "a985"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x9}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x3}, @float={0x7, 0x0, 0x0, 0x10, 0x8}, @fwd={0x6}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000500)=""/184, 0x7b, 0xb8, 0x0, 0x8001, 0x10000, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000019000000477fa87654498f96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x24018024)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window, @window, @sack_perm, @mss, @sack_perm], 0x6)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xe)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)

2m37.50662122s ago: executing program 5 (id=1930):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
close(0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204"], 0x14}}, 0x0)
recvmmsg(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCGETS(r6, 0x5401, &(0x7f0000000240))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x3, 0x1}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x4000090)
mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x200000c)
r10 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, 0x0, 0x0)
r11 = open_tree(r5, &(0x7f0000004800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r11, 0x80089419, &(0x7f0000000080))
acct(0x0)

2m35.839404804s ago: executing program 4 (id=1932):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

2m33.719887367s ago: executing program 4 (id=1936):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
pipe(0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x34, 0x0, 0x0)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ppoll(&(0x7f00000010c0)=[{r8}, {r8, 0xad0}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18)
syz_emit_ethernet(0x1a, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRESDEC=r2], 0x0)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000480)={&(0x7f0000649000/0x1000)=nil, 0x1000})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000000040)=0x1)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}})
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b)

2m30.965144891s ago: executing program 5 (id=1940):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, 0x11, 0x0)

2m30.896052976s ago: executing program 4 (id=1941):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc)
sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)='bx', 0x2}], 0x1)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x323c}}, [0x1ff, 0xa, 0x6, 0x5, 0x1, 0x101, 0x7, 0x7, 0x80000001, 0x2, 0x9, 0xff, 0x1ff, 0x81, 0x1ff]}, &(0x7f0000000300)=0x100)

2m30.855864224s ago: executing program 5 (id=1943):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4122, 0x101a)
sysfs$2(0x2, 0x81, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r4, 0x9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040))
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x7)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

2m29.59923263s ago: executing program 4 (id=1944):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendfile(r0, r0, 0x0, 0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)

2m29.291952699s ago: executing program 5 (id=1947):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007f00)=@newtaction={0xb98, 0x30, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{0xb84, 0x1, [@m_ipt={0xfc, 0x1e, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x18}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x7d, 0x6, "579af87c52cf17cb793664665c516cb6b741ecd1698484886bf4a31ceba63747d07485bd6f97c3734c6b9fcca7814121fba87f3043f7bb7f77b227cf8bad84793b63866d54202478779e4e24f497601e98adc5a31428642f1232c8dfc2570be3257bf6f606f8f36c9ed16f48ea9bca469d4763f8a98239caf9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ipt={0xa84, 0x1c, 0x0, 0x0, {{0x8}, {0x9f4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x9ab, 0x6, {0x8, 'filter\x00', 0x1, 0x7, "630272b90cb638e046ffad33e62c63dc22b0c338f064526b3579c679edcd6947a2d2010d9090ee92da754e0248276e25ee158ea499fca58b54d6df9225fdcea2f29248a1f61bf79f9f52879405279f3371641010c6462b872e6aed0c1ddb9cdc06baf39e7015291a7723d1882a3d85529aec63af18497582b4b3316d5dcb485f004f88002ec312af941567f59562413fd6fada950ffc47760d0e692b596c96614a062ca109dcc946dc6ba50e2ff6698385501c0226cd3cdf43be632fd0c581a202132f7adc9d9150d12806fa2d85bd05df9130c9337a5456161fa45f6b728beaf39cd2fa9bdc96a41b9e58964159b8f62bf424d4b114475fe62a39ad26a028fa80a70282ec42e792815f169a3c441c7d929cc7671ac57ad16d60356e961aad4c07a0c2ca356fdeadd169d516d66256b70b963c6b10afcf61f3f298499489700e3ed6aa2b963b6192b4ab0c7e8ef79a2b02f817247da7e1019360ed6f7284d2161f23ca1717be72112936efc118ba101ae387832a3503d832ab294d40ab764ab786506d2e7f035ca2e5fbc536db74d3a8ade3ac562c7577948038a254c47c10fcb95bfb51d8e0bf94f1e2269a53cbc22cac5fcf1fbcebcaf927c84197192af65e6ae2984ead2e4b8baa54cac2c17884e45998be6e04203d039bdc1731f49be732220509699d5d1dc3f49af7cfd4d11413e652aff2456a06da7a9f1fca86897b82a4daf9cd9719b9b69d21639e0f30f67686e55a3ae42ae247b9b93590741da8b7b855d74e50d30a2a2de32fddb3e3c7e62659b96596e0d9e8f8b70e54fafe1b9e8b8ec80cdb0db5ef2f741026fccd892483bba20d437345252018fc18f9a130fd2d74b224dab58727004193d49cd560f5c7e35cbb7c692aa78befafdc8e8101b3ede59513bb2396b2a8f92c9668199c38cd14f4072b258eb178c58deb34a916c63bf584a372241516e707cda87c63b08161ca6bc1970367eefedeee4376efa8c8e79ffd3f34e606421cf8516cd59f7c904bce91b09823b0ff3edcc2288d0ad78533e199ec3217d0d21802d1ac9336dabe2dfd9b1966e5d42bd15dc5513b6a335f1a12f4b8cf0eb1e2461fae4fc0f00c00d2c1dd1f9ad3f8fd740150346491d3f88ab55f36d8767ab370c0b4621531238848e91e0bc9a52a2149d2439a503fcdbb83f85455422d84f586504d4fadb2f44792b0627a21226d9c1a682137c725c709cb853d8f502a06c78536b2395c151fc29af5dccce95487f58735b029ef492268958aad912a5b17fb116005853fe5390d4a2950a5c38b8589a44043c01fd928da0f77408a438db8435c84431ce2cfd418bf5319024a5325a876d5773f2c4e7acfa52be282800a159024ee9f06fe860a8c506bca32430c19b26b6a39fde31f5603e0b9fd11b4f5c696fa04139d9c61b38569df38c562a9ac500bba579529a4339419294f74f9267ac50df8f8181dfd97dfbee932b1a49907d8ab88b7c879b64e77e26b0f8a4ee65ea2513fc312ade9752d91482464561679158f88f1a9fefd64468e5253bc69e6681ebb40a1176c6552b40e32ea99c04808fe94a61ad4d8283599228c7efa93dad90bbd7d073167bd9c4def26c021b93371bf81bac6275604ccd71871442c9ff47fb4d8b713630db63048c24eef4471034410b31fb400845b83c59b13362cb3797bb4feb5673f8da9fdac95b28583fe89b3d85b599c3dbd13cd028d7177f3b8d27b25e90aa913158d4341b301e75eecaab2a080d3ca2e88ff3af771e57f8655d9bfc1ab9700a1177f572317d5c0283643a63e5c88ef4847b227ef7aee82abe977c09358d863d3f9d925945e85eae677611478a4fb3c6e08c5c67e7fbb286797abdc24d1fcf48c67f6479a45741ca8aeffe59d7f1467501d856ea90f2a35567b26e89218613585dfd9bc9243296cbaa23d123a7c8092dd829fc56cc602ebbaa7712b4e1e43f6dbc5e529075bffac19ce8bd84e0c0eb26bc23bb626024e5c989833e7e17f361cdc587a8d15c1367d0ed1ca15c8871b5264a3db72b34016a43171f5f8cb61016e61b279a21676fd8d574f2015951d20ec2f6454b2c932d241d5ad0451380f0e92f953ddd667f8693d61483fc7035b9934985d37f6d8cb619311ba04a5c30085590a13c10d8421c28b4211da626302ee58207b3f5a679b586003b6ef8603c39fa4d2171bcbe74293f1cdfe0e1f3769d0188f2173a9cbc040086bf18df2396644023af5125216ea4aee6b74b05d478e0af9d8abbef928534386d19d7495e0a192b103b2d00ad88947f098002877f34d6ff75e29126dd6bb939d66e01c031f327499afdb197f8355f9b38f54af49d6d6d50b7092145c0b736b8afaff2c2e2a8dcf215f553869486f26b3b3ae1249776971df1bd9bcc01b6815f3e7f539e8d1092832bfc9f68f80e52baf647a7af48d727bd5478ae712c4a3f4f72132292bd213255154ec01a1a1eff2f4fb081fc4d2f3d635e9fe20b5eed93d95dd55c7f39fbb6efd414e8d80b827bba50415fe1459e2b586dd659787a89857ef3fbb8c8f61196a2de6c978ecef1920db5f8d69c7e25d60dc62e5e41e5858b987a99f7934094112e32d1d65b45ccca79ff515a42d720c31728a3a2f0ac4fc69d04345337209df8eac105703e211fe146cbd1444b3f26890dbf8b5dabf84c70cf3d90fc1bcd0ccb042f0384fa7cc5ba67915c7f595a81b6ee3a175a198fe3f7e604b3b30d31ad3cb617266daaea280901338fae4caad3ef4203ee4c3e17873a57d2fda97a461d89ef7bff4964e0444d4cf9524077464519b06b55e8e625682d0e557d5a5c812d068579b2cb3ef6ec4500dc5ac0b7737e0c590148fa328a4f04c8b8d2eef0044090fb38d648b357625564b67a76a907aba0dd2a01dc140c0cecced17fa0ec9755a5117385607adfda625af3f5fd122ac810599923b7b421ec25bf68964dea2d7f0f0592f3fbb4c17c1961acfe8667d8fa376aa4165133e80bd60b85af9ba672ef8653b854c47b42c8787ace21ea89775f738ae2750b26b7d695e1822ac9b4876910d63f31480c10117b8d9f1e82ff825a0e4406464e11b670d64116ba2b92efbec1da8d9b4c8b782482dead4fc98786225cca30d31600202e50661b0ad90c46b40eff7d20eee9c6ac0633d7e57528bf1d0d0fd20d2616c0997e23aafb22826a6d9eb4be1cedd12b84f366039071f7c9ee7dbd8eaaf89bf63d94e4a0cf2da3504070125e54cf8ec98cba3ff39a077666ab5e92b8d4a24a69e8b183d40a1903b99a3edcd9c97ac4126ec7e306791ee9b3bf12f99a12069cc51f19d46e2688ba335d1d2598694dd1d3110b756ffa828b195ae26da584ff4aa255457747097dc0538fea0b8f9cee5cb653b6364cd580e144ae37e43a01cd3ef4c8476c6676fad09b0df251e78a03ca1849d45bea58c747da5d76e6f48d833d919bb"}}]}, {0x69, 0x6, "2886e7a928fa0f34147988b0bf1f1095cd23a5cb1617419979578c00bee28af9f962885721b6b1573a74cea4b17f24b7a43794bdb9ba781ebc5133bc641940971069bd0dd88a89e06d6b125dfab8f813641821343c0c0c327e59f667adec995e660c229675"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb98}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)

2m26.597617121s ago: executing program 5 (id=1952):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/238, 0xee}], 0x1, &(0x7f00000014c0)=""/23, 0x17}, 0x40}], 0x1, 0x2000, 0x0)

2m25.986983652s ago: executing program 5 (id=1956):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000005, 0x13, r1, 0x80a48000)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xc2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x44084)

2m13.955427383s ago: executing program 33 (id=1944):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendfile(r0, r0, 0x0, 0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)

2m10.84550141s ago: executing program 34 (id=1956):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000005, 0x13, r1, 0x80a48000)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xc2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x44084)

2m1.908049353s ago: executing program 1 (id=2011):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0xca800, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "71aebd58"}, 0x0, 0x1, {0x0}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000100000050000000090a010100000000000000000100000008000f40000000020900010073797a3000000000c1ff020073797a3200000000080005400000060000000740000000150800084000000000340000000c0a010300000000000000030000000a0900020073797a320000000008000440000000030900010073797a3000000000140000001000010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000c00)=@ethtool_channels={0x3d, 0x0, 0x0, 0x7fffffc, 0x0, 0x1, 0x2, 0x4}})
close(r3)
openat$mixer(0xffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8)

1m59.776561379s ago: executing program 1 (id=2014):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5e, 0x5e, 0x3, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xfffffffe, 0xd7}], "a985"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x9}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x3}, @float={0x7, 0x0, 0x0, 0x10, 0x8}, @fwd={0x6}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000500)=""/184, 0x7b, 0xb8, 0x0, 0x8001, 0x10000, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000019000000477fa87654498f96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window, @window, @sack_perm, @mss, @sack_perm], 0x6)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xe)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)

1m58.717601597s ago: executing program 1 (id=2016):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000440)={0x2c, r4, 0xa29, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m58.493870876s ago: executing program 1 (id=2017):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000180))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r3=>r0}}, './file0\x00'})
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000001c0)=0x3, 0x4)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x2, 0x7, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4004034)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x7ff, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000003c00048047fd011b4aaff2ce5d83ba00140002800800024000000000080001400000000d180001801175010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x90}}, 0x0)

1m58.259820167s ago: executing program 1 (id=2018):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x9, 0x5, 0x4, 0x40, 0xfffffffb, {}, {0x5, 0x2, 0x11, 0x6, 0x70, 0x0, "0901c2d2"}, 0xfffffffe, 0x4, {<r1=>0xffffffffffffffff}, 0x2})
r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100))
fsopen(&(0x7f0000000140)='btrfs\x00', 0x1)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000300)='.[\x00')
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000380)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, &(0x7f00000003c0))
chroot(&(0x7f0000000400)='./file0\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084)
syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7b24}, @broadcast, @device_a, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x1c40, 0x2, 0x3, 0x0, 0x2}}, @addba_req={0x3, 0x0, {0x10, {0x0, 0x1, 0xa, 0x10}, 0x7, {0x7}}}}, 0x25)
r8 = socket$inet(0x2, 0x6, 0xbce5)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="94ab6f5dc3a858523039c22f378699940be7a4e3098beded0e9b56085e76df3d545eb421f62010327f785a8ca3c161832d97926544d7b3cf6b422b885789658a7674f44894", 0x45}, {&(0x7f0000000700)="b973bcf0a0e1c766270b257256dbb0531142d44fdcca1796b0f9a296f97461bf326791b7e539a57fb907d8", 0x2b}, {&(0x7f0000000740)="4e2a1f2ca0636a0b885ade5e794c8d9df5306793b2218092ee304a02f6d64c510d07337b49b512b4519be4b95376fa02f4f5e3915f6984e2288b700f1902a0958de990678a943b4ed14eafb0a0", 0x4d}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x40, 0x24008006}, 0x20000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r2, &(0x7f0000000880)="f81c0791f0330166e9beff6b4d2e32dca1652c7f23f8aba567a2653d530f6a43624b92004542ad451f2c36ef71ff0c01d1d02fc93dffcc67d0051416ae6de59b9b7dadd4e25ed99cab99db3b947d", &(0x7f0000000900)=""/60}, 0x20)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x8, 0x3)
setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000a00)={0x1, 0x0, 0xdc, 0x4, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10)
r9 = openat(r2, &(0x7f0000000a40)='.\x00', 0x42000, 0x66)
r10 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xcd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x1ff, 0x7, 0x1, {0x22, 0x665}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x4, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0xc9}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x250, 0x4, 0x9, 0x7f, 0x40, 0x4}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "5e23dd9b12fd72314014651825acb61b"}]}, 0x5, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x436}}, {0x93, &(0x7f0000000bc0)=@string={0x93, 0x3, "ac123ec750b9ac2d1cc9217ff6ec3e2695fc5ca220285986b42741980a50425f96bd53bbaa907c08c1937aad141c587513651885efeab9face47e388a6b5abf3383519c8a848cd8063db18de995cab6e790377a9bbefce41120f55d6b98f5acf729ab95e2050262e258713f24fc0f3c66edeca55dfd15b5ce3295dccb9c6fa54eb9bed05e36a9395ecfcbb9e734c6af94d"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x3409}}]})
syz_usb_control_io$hid(r10, &(0x7f0000000f00)={0x24, &(0x7f0000000d80)={0x40, 0x24, 0x98, {0x98, 0x23, "957bc1a1abf048640f7501e40c69b3822ccec4fcd4a1e931e2d247b4c963e7595b6bb6d409fcf6f0d766f34431c1923c25065207874921546ac389f640fa6dc0e57f9748254d424af99ba080d2445cb397e015dfffd87593ea40fd93a3aa1b7cee688d97ae07e41d0cb129b72bc4df7d491fad755925cb7edfef2af76a21750c46248617086c2111614849338e1d0fd20133ce2b8697"}}, &(0x7f0000000e40)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "25e7fd92ce286f4da6f50abcf2f3577cff124ef0b54e1724ac7c"}}, &(0x7f0000000e80)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0x0, "6eec5fb8"}, @main=@item_4={0x3, 0x0, 0x9, "b3e5a372"}, @local=@item_4={0x3, 0x2, 0xa, "3d8d5607"}, @main=@item_012={0x1, 0x0, 0xa, "c8"}, @global=@item_012={0x1, 0x1, 0xc, 'M'}, @main=@item_4={0x3, 0x0, 0xc, "1a5f32fb"}, @main=@item_4={0x3, 0x0, 0xb, "122ce0ca"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0xfb, 0x1, {0x22, 0xa1a}}}}, &(0x7f0000001180)={0x2c, &(0x7f0000000f40)={0x20, 0xf, 0x4d, "fe972ba1d0f3a2e65cc276d7e3183a1fcf90dc80b45a58c74c5debe50ca2f41da70345dcf8370af34e5b6e3ff370853e69882bd686d95a8b7a786204e6487d43ba223126f18b851a803a87a6d7"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001040)={0x20, 0x1, 0xc8, "ae61583ad42ae2fc2e259e46c557711aa1f579c0663fe166379e5fa237d8bb15d672eb517485b2abb944d5d5e41a88637b9631ca6f4611c1a7094881c8ca42f2a71e033529f8088a9fc62a53b8b512b26fe34301fbd3ef344e931c608cbda48207226b22ae602fc684a76ba9863d9607e7d6a5bbf02398baf54f9e1adf33f9da33d6807ae1ce11c541f0f9594e77304970ccf2db1fdd220f3f7891910f46e04136f9e11d6dcf39fdb21dcbf9bf47eb0b01c132d41f7b2e49df2c86c5777d789e7b9a2137d0265741"}, &(0x7f0000001140)={0x20, 0x3, 0x1, 0x40}})
ioctl$I2C_FUNCS(r9, 0x705, &(0x7f00000011c0)=0x3)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000001380)=0xe8)
mount$cgroup(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x2000, &(0x7f00000013c0)={[{@favordynmods}, {@subsystem='cpuset'}, {@name={'name', 0x3d, 'PPPPPP'}}, {@name={'name', 0x3d, '@'}}, {@name={'name', 0x3d, 'nl80211\x00'}}, {@subsystem='devices'}, {@subsystem='io'}, {@favordynmods}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@fowner_gt={'fowner>', r11}}, {@audit}]})
removexattr(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=@known='trusted.overlay.origin\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000001500)='objagg_obj_create\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)

1m56.772007651s ago: executing program 1 (id=2021):
ioperm(0x0, 0x7, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r8, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x233)

1m41.610503281s ago: executing program 35 (id=2021):
ioperm(0x0, 0x7, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r8, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x233)

30.852758757s ago: executing program 8 (id=2230):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="020000000600000000400000", @ANYRES32, @ANYBLOB="22614de5da0cffd8f8b2fefdb2c31e62e1", @ANYRES64=0x0], 0x10)

30.480118466s ago: executing program 8 (id=2233):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x10, 0x101000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b1a, &(0x7f0000000040))

30.054852579s ago: executing program 8 (id=2235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000004100000008000300", @ANYRES32=r7, @ANYBLOB="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"/488], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x44}}, 0x0)
r8 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)
preadv(r8, 0x0, 0x0, 0xfffffff7, 0x8)
socket$kcm(0x10, 0x2, 0x10)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSP'], 0xb8)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

26.123806041s ago: executing program 8 (id=2249):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x7, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000020000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES64=r7], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffc46)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c"], &(0x7f00000001c0)=""/201, 0x26, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa)
r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r11, r11, 0x0, 0x3)
connect$unix(r11, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYRES16=r11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

21.607957163s ago: executing program 8 (id=2260):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x5}}]}, 0x5c}}, 0x4004040)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0)
r7 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x80001, 0xc2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r7}, './file0\x00'})
listen(r3, 0xfffffffd)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="51936eeb4d8cabaa361b732e9685c115c946c4d885e9bdfb880ed6005b9adc49b5da5863720051e223bb3a8f7f721f2be935752c16e0e26f5f98579b2c244014f74cbc5383f77114acf663e6036774bcff1387146f730d9cc4317c997bab4ce36f415042c2e489cd07c21d7bffd93eedaf03efba49910869ecbe205ab86f337143b44e9166dd21d151ccf287d6083930d93f8f8f3343b4260a05702c584dc38f79ee67b3c0766e44197abadac6857168b14380b556bec14e40f415c5cd6fd7e24abf02e80f4230018c8cf704e225f313749529b1509264d793868f15a44ee4cfdffcc5587791e9c26378d0b283986b4c", 0xf0}], 0x1}}], 0x1, 0x2040)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa86dd600000000015060000000000000000000000ffffac141430fc02000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c200009078000035"], 0x0)
listen(r1, 0xa24d34b4)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x5, 0x3, 0x0, 0x0, [0x7]}]}}}}}}}}, 0x0)

20.708007309s ago: executing program 8 (id=2261):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@delqdisc={0x34, 0x25, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xf, 0x5}, {0x1, 0xd}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/218, 0xda}], 0x1, 0x0, 0x0, 0x40010000}, 0x38, 0x10000)

12.188539674s ago: executing program 0 (id=2278):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0)
splice(r3, 0x0, r4, 0x0, 0xffffffe1, 0x0)

11.986629742s ago: executing program 0 (id=2281):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) (fail_nth: 1)

11.450663685s ago: executing program 0 (id=2284):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x5}], 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={<r3=>0x0}, &(0x7f0000000cc0)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0)
r4 = dup(r2)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022070000008350d7365e01ec"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x57b, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xbf, 0xbc, 0x61, 0x8, 0x543, 0x1921, 0xe4b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x569, 0x2, 0x10, 0x8, 0x20, 0x5, [{{0x9, 0x4, 0x78, 0x2f, 0xa, 0x94, 0xaa, 0xf9, 0x2, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x50, 0xf4, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x92, 0xb}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x40, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x934}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x81, 0x80, [@generic={0x26, 0x31, "19b65ca56b8743f5ef5deec7898e1fca1313eae894405420c1f5c34732f4b3f6bbf5bc8e"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0xb0, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7f, 0x4, 0xe8, [@generic={0x2d, 0x10, "42d06e6a4b95b5341de0c45c52ea8ab028e41a93bbe37198168a19938b1568999b5b62bfda7a40da0ce283"}, @generic={0xd5, 0x13, "5c08469cd300d720fbb2d8d76abec68bbe43fb9ce2662e01140f19a2ee91385370de9f6a7fc658680e176505d0f891dc781ccfd8174da25c5d727c798b561d18c8ba35f1d2bdd61e3f3ce537e102aebc3048d3daf9a84c92bf0ab6cdde66db32fb635349562486b45925c8e5fcc5293adcde661f5da45a8ec989f3d234f17bc56004f322316101e189260dc8c4d3a1fb1a910bcb6e80c9a947a6e55ea34404e07e451d68ae3ab90499a9d55f626eac968189c8609b014f189204cfd28c21295a7fbf620d2be48a4d1fd9b6765c05ac102803f8"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xb, 0x92, 0x4}}, {{0x9, 0x5, 0x2, 0x5, 0x8, 0xc5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}, @generic={0xe5, 0xc, "f2a4263b3425161af52c10fd40f25f0c12d1868552444bb709dc7ba18314436aaa0e48364b81e325c678d0dffcad7bfd113e5b3ed40defd7f1a7ac86cc3475d22994dbc183022ca4b1d54f9cfe377085356dc98654647c305fc82dc98502039c2ae035b95db38437c6c6be198e03fa2fc78fa696091e0dd5d86c3bf2ab9ad8f1103559016775ee137d8856f38c824859088863f227f44fa491f1ad06598d5ef157353c456854a3614ba57f10670caa2952c0a2cdb7b23df01f74fbc857ad7c1240c091cdabd8ebc5bad78b3e1c097216e8c00fe3c55833613a94092d9a79b81d8fef08"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0xf, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x0, 0x9}]}}, {{0x9, 0x5, 0xccd92261f66e4269, 0x1, 0x10, 0x9, 0x14, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x0, 0x7, [@generic={0x69, 0xa, "420ee406fbffc6e5fcdd84c0ee6ae418b6216a2c45a879783ecc4330bc54b0cb139a32e17bbb727f0e83436442584651f3fe1fba36fa2bc2506d1c9640388a8605622d2ea51d2fd07ecb4edb34d98321bdbac9bba2adb550c116203fd7eb1487257fbe7135137c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7ff}]}}]}}, {{0x9, 0x4, 0xf4, 0x4, 0xf, 0xff, 0x3, 0xb, 0x70, [], [{{0x9, 0x5, 0x6, 0x2, 0x400, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x2, 0x5, [@generic={0x85, 0xb, "8e7027131f831c0e61147e4b61f93fc7a7f0914bf39457d915ab31b838df7708771f0d16245961101a3a9d97382ba1e485a64e5da8b5896937680378f471d2734cbadec402a87ac3f73b39c294fc59bb095dcef1f87a1e4ca2d2a805b4be81557ce8e9cee0b22cf7b47c4dc9b9a7d576b0bc2be84038fec8ec30a3d5f3f4bdc24ccb21"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6f, 0x7}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x6, 0x8, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xa, 0x19}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x85, 0x2, 0x7, [@generic={0x32, 0x21, "b10b08c742025126367db5e7f6c3762a49efe72655d9c9033149e7f4ffa1610d07422383767b2838f2450116c383995e"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x0, 0xfe}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x3, 0x6, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x0, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xff, 0xd3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x46, 0xe}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xb, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xa}, @generic={0x33, 0x2, "06399a6a998abc0a3bc43d718ab2bbd4b4b855e61d1aa61a512006c1cf9b44c185bdd93b4d17b858fca549af9a54269746"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x8, 0x7, [@generic={0x3d, 0xd, "aa31f4d5cfac5d9b5ec2caa84698ca8980b7a9fdc187a7cd0497b6c5b9aef5d3c5c046874f76e0635ca98473fa48554eb5832c57971ba9dbeaf8ad"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x38, 0x4}, @generic={0x75, 0x4, "3753bb6086694e83d4eb6f617886f7ef8e48f36df7685078c0aecc8d63fd740bf6c366f3f7cee00b9caa5fb283ccfc1bea0b0d49f94f3737a7d35752ef999f0540e848589651d5c4cb968bcbb22218630913f5d2c2766db39db27761a83f23fa23789d85707e3b4d85f9f22a0b2863104d6407"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0xa, 0x9}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0xf7, 0x1d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xfb, 0x8, 0x3, 0x10, 0x15}, 0xfa, &(0x7f0000000100)={0x5, 0xf, 0xfa, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xfb, 0x7, 0xbb84}, @generic={0xe4, 0x10, 0x3, "594449752e459814f6a45059b47ee07b6931730d5d8de4a09400945cbad5293b7a0f58267eca63d51c8ce2ec851c70d8ef773462375c23eb66cd25644c8f1f484fdaa263c48201dbcf22f9564db9c775442f2c8d1feec8682d3da98b7034a6a195830498744de64d1c7cb034d4b617df9aec1024b086c46bf8e9e3523b264b441f73be4036f3098ea93cd2fa21211938dffa96b720f2cef6067b0d4f7fc0ed27e20160d791a6074994ff230fe5396437db8608c61640730a916c80208305ac93f7dda3150b58f93ef9c2026a98f2c0d2ada6103b326787f58059eeb8538083532d"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0xb, 0xec}]}, 0x2, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x70, &(0x7f0000000800)=@string={0x70, 0x3, "b980a677b3af35b516e7bbe75ea242f87d470f64a7330aede0962d8ccf7927677eeb5342cf110c7cf6da96c274029f4f447d0469e374aab9cb5c6f9db3b01cd2b8f33122d95785e3af42d27043d01fac3b81a5c65269a3d3838e287bc557959cc0802d422b76758ee9ee19556d38"}}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002)
close_range(r0, 0xffffffffffffffff, 0x0)

10.047008396s ago: executing program 6 (id=2285):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000)
r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@null, @remote, @netrom, @default, @null, @bcast, @netrom, @null]}, &(0x7f0000000140)=0x48)
accept$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@rose, @netrom, @remote, @rose, @rose, @remote, @remote, @bcast]}, &(0x7f0000000200)=0x48)

10.046159961s ago: executing program 3 (id=2286):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500050002000000050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x68, 0x0, 0xa, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "e5b5f5fcae114084be3c434de92b708d"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "a01c063634cea56c652c232c7b8737de"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x1}, @timestamp={0x8, 0xa, 0x1, 0xadd7}]}}}}}}}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe14)
syz_usb_control_io$hid(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x4010, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

9.743776053s ago: executing program 6 (id=2288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00')
read$FUSE(r5, &(0x7f0000004480)={0x2020}, 0x2020)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone(0x5800400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='ext4_allocate_inode\x00'}, 0x10)

8.625932772s ago: executing program 6 (id=2292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYBLOB], 0x2c}}, 0x0) (fail_nth: 1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)=0x2, 0x4)

7.632068705s ago: executing program 6 (id=2294):
syz_usb_connect(0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="12010400d691cf407c2c2501ba510102030109022f78b924cc20200904f3ff00ffffff200524060001052400c6150d240f010e1d000001002004fe0690792a93034c06f34939c5b135241a050108715f8dcb291177e5e805096315b495fc7e54366cafbf619b7bdd8940fe55ef04f2fc9f91e4d31ab8b2103d8d2f74a8c6e769350ebeeb8c6f72e1ca75c4d3ec13e206fc5d485f50157f04000000c55921c186278ecefce56d22b4fd5bc5a3183db5d0f4b11955d024aaa2f2f751338140e85cdf36369b88116738ab95700ab19856cdc8704ae4002646e349827019723d88ac203691fe"], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x8924, 0xbffffffffffffffb)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4801, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x2000000000000138)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x700, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x80, 0x40, 0x3, 0x9, {{0x12, 0x4, 0x3, 0x2f, 0x48, 0x64, 0x0, 0x9, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0xef, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0xf}, {@remote, 0x6}, {@multicast1, 0x9}, {@multicast1, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x3}]}]}}}}})

6.899180042s ago: executing program 0 (id=2296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (fail_nth: 1)

6.826144049s ago: executing program 3 (id=2297):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000025c0), 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, 0x0)
ptrace(0x4208, r0)

6.327985542s ago: executing program 7 (id=2299):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000044)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5b281b5a, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r3, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r3, 0xe}, &(0x7f0000000340)=0x8)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x2325}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x15, 0x1})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc120d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)

6.32767075s ago: executing program 0 (id=2300):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000340)=""/221)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x44b, 0x70bd2c, 0x1, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xe}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x81}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x50}}, 0x0)
io_setup(0x5, &(0x7f0000000040)=<r2=>0x0)
io_pgetevents(r2, 0x8, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]})

5.285013826s ago: executing program 36 (id=2261):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@delqdisc={0x34, 0x25, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xf, 0x5}, {0x1, 0xd}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/218, 0xda}], 0x1, 0x0, 0x0, 0x40010000}, 0x38, 0x10000)

5.279410805s ago: executing program 7 (id=2302):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00')
read$FUSE(r5, &(0x7f0000004480)={0x2020}, 0x2020)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone(0x5800400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='ext4_allocate_inode\x00'}, 0x10)

4.365810802s ago: executing program 3 (id=2303):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0)
splice(r3, 0x0, r4, 0x0, 0xffffffe1, 0x0)

3.832607873s ago: executing program 7 (id=2304):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="6426f3470f09360f014df8b9800000c00f3235000400000f30660faeb628430000b956030000b804000000ba000000000f30420fc7b4cf0e00000066baf80cb800f7a589ef66bafc0ced460f79987cffffff66baf80cb8edf0578aef66bafc0cec64360fc772b3", 0x67}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000079f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_setup(0x14000, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r6 = memfd_create(&(0x7f0000003040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc1&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda\xb5_\x1a\xfc\xe8\xe4\xbc\xbe\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)

3.455648488s ago: executing program 3 (id=2305):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f3400f221c450f01c266b85c008ec8c4217a12550b66baf80cb8f24eff86ef66bafc0c66b8cf0466ef0f01c2420f211848b88000c0fe000000000f23d00f21f835100000060f23f80f005d00f3470fc7b6d5000000", 0x55}], 0x1, 0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x280000b, 0x52, r2, 0x6ae69000)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.336117331s ago: executing program 6 (id=2306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2, 0x400002}, 0x1c)
socket(0x2, 0x80805, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001)
connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc)

2.12773949s ago: executing program 0 (id=2307):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800)
memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1c\xed\xa2\xfc\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xc6\xd7\xb5:i\x83s\xda\xabQ\xf7\x05', 0x0)
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
dup(r0)
r1 = fanotify_init(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

1.262647364s ago: executing program 7 (id=2308):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x64}, {}, {0x85, 0x0, 0x0, 0xc}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.228938554s ago: executing program 6 (id=2309):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000180)=0x3, 0x0, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000008000ed000000001372bf928ff748c11f74d656f85db797f41b42f1e5680db39f27e2a590c49521142ff67722605f7f85910aa4273f174c532a6520d392c6c88f27bd596c014a04c8fa34cafab6a688", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000df8761353f000000060000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

1.186611255s ago: executing program 7 (id=2310):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007f00)=@newtaction={0xb98, 0x30, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{0xb84, 0x1, [@m_ipt={0xf4, 0x1e, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x18}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x7d, 0x6, "579af87c52cf17cb793664665c516cb6b741ecd1698484886bf4a31ceba63747d07485bd6f97c3734c6b9fcca7814121fba87f3043f7bb7f77b227cf8bad84793b63866d54202478779e4e24f497601e98adc5a31428642f1232c8dfc2570be3257bf6f606f8f36c9ed16f48ea9bca469d4763f8a98239caf9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ipt={0xa8c, 0x1c, 0x0, 0x0, {{0x8}, {0x9fc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x9b1, 0x6, {0x8, 'filter\x00', 0x1, 0x7, "630272b90cb638e046ffad33e62c63dc22b0c338f064526b3579c679edcd6947a2d2010d9090ee92da754e0248276e25ee158ea499fca58b54d6df9225fdcea2f29248a1f61bf79f9f52879405279f3371641010c6462b872e6aed0c1ddb9cdc06baf39e7015291a7723d1882a3d85529aec63af18497582b4b3316d5dcb485f004f88002ec312af941567f59562413fd6fada950ffc47760d0e692b596c96614a062ca109dcc946dc6ba50e2ff6698385501c0226cd3cdf43be632fd0c581a202132f7adc9d9150d12806fa2d85bd05df9130c9337a5456161fa45f6b728beaf39cd2fa9bdc96a41b9e58964159b8f62bf424d4b114475fe62a39ad26a028fa80a70282ec42e792815f169a3c441c7d929cc7671ac57ad16d60356e961aad4c07a0c2ca356fdeadd169d516d66256b70b963c6b10afcf61f3f298499489700e3ed6aa2b963b6192b4ab0c7e8ef79a2b02f817247da7e1019360ed6f7284d2161f23ca1717be72112936efc118ba101ae387832a3503d832ab294d40ab764ab786506d2e7f035ca2e5fbc536db74d3a8ade3ac562c7577948038a254c47c10fcb95bfb51d8e0bf94f1e2269a53cbc22cac5fcf1fbcebcaf927c84197192af65e6ae2984ead2e4b8baa54cac2c17884e45998be6e04203d039bdc1731f49be732220509699d5d1dc3f49af7cfd4d11413e652aff2456a06da7a9f1fca86897b82a4daf9cd9719b9b69d21639e0f30f67686e55a3ae42ae247b9b93590741da8b7b855d74e50d30a2a2de32fddb3e3c7e62659b96596e0d9e8f8b70e54fafe1b9e8b8ec80cdb0db5ef2f741026fccd892483bba20d437345252018fc18f9a130fd2d74b224dab58727004193d49cd560f5c7e35cbb7c692aa78befafdc8e8101b3ede59513bb2396b2a8f92c9668199c38cd14f4072b258eb178c58deb34a916c63bf584a372241516e707cda87c63b08161ca6bc1970367eefedeee4376efa8c8e79ffd3f34e606421cf8516cd59f7c904bce91b09823b0ff3edcc2288d0ad78533e199ec3217d0d21802d1ac9336dabe2dfd9b1966e5d42bd15dc5513b6a335f1a12f4b8cf0eb1e2461fae4fc0f00c00d2c1dd1f9ad3f8fd740150346491d3f88ab55f36d8767ab370c0b4621531238848e91e0bc9a52a2149d2439a503fcdbb83f85455422d84f586504d4fadb2f44792b0627a21226d9c1a682137c725c709cb853d8f502a06c78536b2395c151fc29af5dccce95487f58735b029ef492268958aad912a5b17fb116005853fe5390d4a2950a5c38b8589a44043c01fd928da0f77408a438db8435c84431ce2cfd418bf5319024a5325a876d5773f2c4e7acfa52be282800a159024ee9f06fe860a8c506bca32430c19b26b6a39fde31f5603e0b9fd11b4f5c696fa04139d9c61b38569df38c562a9ac500bba579529a4339419294f74f9267ac50df8f8181dfd97dfbee932b1a49907d8ab88b7c879b64e77e26b0f8a4ee65ea2513fc312ade9752d91482464561679158f88f1a9fefd64468e5253bc69e6681ebb40a1176c6552b40e32ea99c04808fe94a61ad4d8283599228c7efa93dad90bbd7d073167bd9c4def26c021b93371bf81bac6275604ccd71871442c9ff47fb4d8b713630db63048c24eef4471034410b31fb400845b83c59b13362cb3797bb4feb5673f8da9fdac95b28583fe89b3d85b599c3dbd13cd028d7177f3b8d27b25e90aa913158d4341b301e75eecaab2a080d3ca2e88ff3af771e57f8655d9bfc1ab9700a1177f572317d5c0283643a63e5c88ef4847b227ef7aee82abe977c09358d863d3f9d925945e85eae677611478a4fb3c6e08c5c67e7fbb286797abdc24d1fcf48c67f6479a45741ca8aeffe59d7f1467501d856ea90f2a35567b26e89218613585dfd9bc9243296cbaa23d123a7c8092dd829fc56cc602ebbaa7712b4e1e43f6dbc5e529075bffac19ce8bd84e0c0eb26bc23bb626024e5c989833e7e17f361cdc587a8d15c1367d0ed1ca15c8871b5264a3db72b34016a43171f5f8cb61016e61b279a21676fd8d574f2015951d20ec2f6454b2c932d241d5ad0451380f0e92f953ddd667f8693d61483fc7035b9934985d37f6d8cb619311ba04a5c30085590a13c10d8421c28b4211da626302ee58207b3f5a679b586003b6ef8603c39fa4d2171bcbe74293f1cdfe0e1f3769d0188f2173a9cbc040086bf18df2396644023af5125216ea4aee6b74b05d478e0af9d8abbef928534386d19d7495e0a192b103b2d00ad88947f098002877f34d6ff75e29126dd6bb939d66e01c031f327499afdb197f8355f9b38f54af49d6d6d50b7092145c0b736b8afaff2c2e2a8dcf215f553869486f26b3b3ae1249776971df1bd9bcc01b6815f3e7f539e8d1092832bfc9f68f80e52baf647a7af48d727bd5478ae712c4a3f4f72132292bd213255154ec01a1a1eff2f4fb081fc4d2f3d635e9fe20b5eed93d95dd55c7f39fbb6efd414e8d80b827bba50415fe1459e2b586dd659787a89857ef3fbb8c8f61196a2de6c978ecef1920db5f8d69c7e25d60dc62e5e41e5858b987a99f7934094112e32d1d65b45ccca79ff515a42d720c31728a3a2f0ac4fc69d04345337209df8eac105703e211fe146cbd1444b3f26890dbf8b5dabf84c70cf3d90fc1bcd0ccb042f0384fa7cc5ba67915c7f595a81b6ee3a175a198fe3f7e604b3b30d31ad3cb617266daaea280901338fae4caad3ef4203ee4c3e17873a57d2fda97a461d89ef7bff4964e0444d4cf9524077464519b06b55e8e625682d0e557d5a5c812d068579b2cb3ef6ec4500dc5ac0b7737e0c590148fa328a4f04c8b8d2eef0044090fb38d648b357625564b67a76a907aba0dd2a01dc140c0cecced17fa0ec9755a5117385607adfda625af3f5fd122ac810599923b7b421ec25bf68964dea2d7f0f0592f3fbb4c17c1961acfe8667d8fa376aa4165133e80bd60b85af9ba672ef8653b854c47b42c8787ace21ea89775f738ae2750b26b7d695e1822ac9b4876910d63f31480c10117b8d9f1e82ff825a0e4406464e11b670d64116ba2b92efbec1da8d9b4c8b782482dead4fc98786225cca30d31600202e50661b0ad90c46b40eff7d20eee9c6ac0633d7e57528bf1d0d0fd20d2616c0997e23aafb22826a6d9eb4be1cedd12b84f366039071f7c9ee7dbd8eaaf89bf63d94e4a0cf2da3504070125e54cf8ec98cba3ff39a077666ab5e92b8d4a24a69e8b183d40a1903b99a3edcd9c97ac4126ec7e306791ee9b3bf12f99a12069cc51f19d46e2688ba335d1d2598694dd1d3110b756ffa828b195ae26da584ff4aa255457747097dc0538fea0b8f9cee5cb653b6364cd580e144ae37e43a01cd3ef4c8476c6676fad09b0df251e78a03ca1849d45bea58c747da5d76e6f48d833d919bb9f61796b1c38"}}]}, {0x69, 0x6, "2886e7a928fa0f34147988b0bf1f1095cd23a5cb1617419979578c00bee28af9f962885721b6b1573a74cea4b17f24b7a43794bdb9ba781ebc5133bc641940971069bd0dd88a89e06d6b125dfab8f813641821343c0c0c327e59f667adec995e660c229675"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb98}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)

1.096762214s ago: executing program 7 (id=2311):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

919.920709ms ago: executing program 3 (id=2312):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004)
bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000040)={0x20, 0x2, "000001"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0x0, 0x35315258, 0xf00, 0x870, 0x0, @discrete={0x2, 0x4}})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r5, &(0x7f0000002bc0)=[{{&(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xf000}]}}}], 0x18}}], 0x1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@deltaction={0x1b4, 0x31, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4db}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb274}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8}, 0x40805)

0s ago: executing program 3 (id=2313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00')
read$FUSE(r5, &(0x7f0000004480)={0x2020}, 0x2020)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone(0x5800400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='ext4_allocate_inode\x00'}, 0x10)

kernel console output (not intermixed with test programs):

][T12728]  <TASK>
[  733.042183][T12728]  dump_stack_lvl+0x241/0x360
[  733.046888][T12728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  733.052106][T12728]  ? __pfx__printk+0x10/0x10
[  733.056723][T12728]  ? __pfx_lock_release+0x10/0x10
[  733.061769][T12728]  ? __lock_acquire+0x1397/0x2100
[  733.066815][T12728]  should_fail_ex+0x3b0/0x4e0
[  733.071529][T12728]  _copy_from_user+0x2f/0xc0
[  733.076150][T12728]  do_seccomp+0x20b/0xf90
[  733.080510][T12728]  ? __pfx_do_seccomp+0x10/0x10
[  733.085378][T12728]  ? validate_chain+0x11e/0x5920
[  733.090343][T12728]  ? static_key_count+0x41/0x70
[  733.095214][T12728]  ? security_task_prctl+0x13c/0x160
[  733.100536][T12728]  __se_sys_prctl+0xf2f/0x3bb0
[  733.105319][T12728]  ? mark_lock+0x9a/0x360
[  733.109680][T12728]  ? __lock_acquire+0x1397/0x2100
[  733.114738][T12728]  ? _parse_integer_limit+0x1b5/0x200
[  733.120136][T12728]  ? mark_lock+0x9a/0x360
[  733.124495][T12728]  ? __lock_acquire+0x1397/0x2100
[  733.129546][T12728]  ? __pfx___se_sys_prctl+0x10/0x10
[  733.134880][T12728]  ? __pfx_lock_acquire+0x10/0x10
[  733.139929][T12728]  ? get_pid_task+0x23/0x1f0
[  733.144543][T12728]  ? __pfx_lock_release+0x10/0x10
[  733.149590][T12728]  ? kstrtouint_from_user+0x128/0x190
[  733.155006][T12728]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  733.160931][T12728]  ? ksys_write+0x22a/0x2b0
[  733.165463][T12728]  ? __pfx_lock_release+0x10/0x10
[  733.170526][T12728]  ? vfs_write+0x730/0xd30
[  733.175026][T12728]  ? __mutex_unlock_slowpath+0x21e/0x790
[  733.180687][T12728]  ? __pfx_vfs_write+0x10/0x10
[  733.185486][T12728]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  733.191495][T12728]  ? __fget_files+0x2a/0x410
[  733.196128][T12728]  ? __fget_files+0x2a/0x410
[  733.200749][T12728]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  733.206754][T12728]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  733.213100][T12728]  ? do_syscall_64+0x100/0x230
[  733.217889][T12728]  ? __x64_sys_prctl+0x20/0xc0
[  733.222689][T12728]  do_syscall_64+0xf3/0x230
[  733.227223][T12728]  ? clear_bhb_loop+0x35/0x90
[  733.231927][T12728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.237837][T12728] RIP: 0033:0x7f5d13b80809
[  733.242267][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  733.261901][T12728] RSP: 002b:00007f5d1491a058 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  733.270345][T12728] RAX: ffffffffffffffda RBX: 00007f5d13d45fa0 RCX: 00007f5d13b80809
[  733.278339][T12728] RDX: 0000000020000180 RSI: 0000000000000002 RDI: 0000000000000016
[  733.286327][T12728] RBP: 00007f5d1491a0a0 R08: 0000000000000000 R09: 0000000000000000
[  733.294321][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  733.302309][T12728] R13: 0000000000000000 R14: 00007f5d13d45fa0 R15: 00007ffe1bad0808
[  733.310313][T12728]  </TASK>
[  734.095807][T12742] hub 6-0:1.0: USB hub found
[  734.106124][T12742] hub 6-0:1.0: 1 port detected
[  734.556757][T12736] lo speed is unknown, defaulting to 1000
[  734.586124][T12736] lo speed is unknown, defaulting to 1000
[  734.592128][T12736] lo speed is unknown, defaulting to 1000
[  735.462985][T12761] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  735.850972][T12767] syzkaller0: entered promiscuous mode
[  735.894426][T12736] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  735.952856][T12767] syzkaller0: entered allmulticast mode
[  736.068242][T12770] block device autoloading is deprecated and will be removed.
[  736.087739][T12770] bio_check_eod: 2 callbacks suppressed
[  736.087759][T12770] syz.3.1771: attempt to access beyond end of device
[  736.087759][T12770] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  736.110248][T12770] FAT-fs (loop7): unable to read boot sector
[  736.119946][T12771] block device autoloading is deprecated and will be removed.
[  736.303673][T12770] nfs4: Unknown parameter '
/file0'
[  736.389632][T12736] lo speed is unknown, defaulting to 1000
[  738.738300][T12788] FAULT_INJECTION: forcing a failure.
[  738.738300][T12788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.781882][T12788] CPU: 1 UID: 0 PID: 12788 Comm: syz.4.1779 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  738.792379][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  738.802472][T12788] Call Trace:
[  738.805766][T12788]  <TASK>
[  738.808712][T12788]  dump_stack_lvl+0x241/0x360
[  738.813407][T12788]  ? __pfx_dump_stack_lvl+0x10/0x10
[  738.818626][T12788]  ? __pfx__printk+0x10/0x10
[  738.823238][T12788]  ? __pfx_lock_release+0x10/0x10
[  738.828286][T12788]  should_fail_ex+0x3b0/0x4e0
[  738.833001][T12788]  _copy_from_user+0x2f/0xc0
[  738.837622][T12788]  sk_setsockopt+0x2d4/0x33b0
[  738.842315][T12788]  ? mark_lock+0x9a/0x360
[  738.846669][T12788]  ? __pfx_sk_setsockopt+0x10/0x10
[  738.851822][T12788]  ? __pfx_lock_acquire+0x10/0x10
[  738.856876][T12788]  ? __fget_files+0x2a/0x410
[  738.861496][T12788]  do_sock_setsockopt+0x2fb/0x720
[  738.866557][T12788]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  738.872139][T12788]  ? __fget_files+0x395/0x410
[  738.876847][T12788]  ? __fget_files+0x2a/0x410
[  738.881470][T12788]  __x64_sys_setsockopt+0x1ee/0x280
[  738.886705][T12788]  do_syscall_64+0xf3/0x230
[  738.891228][T12788]  ? clear_bhb_loop+0x35/0x90
[  738.895932][T12788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.901851][T12788] RIP: 0033:0x7f5d13b80809
[  738.906283][T12788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  738.925954][T12788] RSP: 002b:00007f5d148f9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  738.934388][T12788] RAX: ffffffffffffffda RBX: 00007f5d13d46080 RCX: 00007f5d13b80809
[  738.942377][T12788] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000003
[  738.950345][T12788] RBP: 00007f5d148f90a0 R08: 0000000000000010 R09: 0000000000000000
[  738.958315][T12788] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001
[  738.966278][T12788] R13: 0000000000000001 R14: 00007f5d13d46080 R15: 00007ffe1bad0808
[  738.974258][T12788]  </TASK>
[  738.977317][    C1] vkms_vblank_simulate: vblank timer overrun
[  739.049782][T12736] lo speed is unknown, defaulting to 1000
[  739.081927][T12736] lo speed is unknown, defaulting to 1000
[  739.126665][T12736] lo speed is unknown, defaulting to 1000
[  739.138014][T12736] lo speed is unknown, defaulting to 1000
[  741.166890][T12830] hub 6-0:1.0: USB hub found
[  741.233749][T12835] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  741.401777][T12830] hub 6-0:1.0: 1 port detected
[  741.902078][T12847] sctp: [Deprecated]: syz.1.1793 (pid 12847) Use of int in max_burst socket option deprecated.
[  741.902078][T12847] Use struct sctp_assoc_value instead
[  746.830737][T12899] FAULT_INJECTION: forcing a failure.
[  746.830737][T12899] name failslab, interval 1, probability 0, space 0, times 0
[  746.866212][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.3.1806 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  746.876696][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  746.886778][T12899] Call Trace:
[  746.890075][T12899]  <TASK>
[  746.893023][T12899]  dump_stack_lvl+0x241/0x360
[  746.897736][T12899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  746.902961][T12899]  ? __pfx__printk+0x10/0x10
[  746.907586][T12899]  ? fs_reclaim_acquire+0x93/0x130
[  746.912727][T12899]  ? __pfx___might_resched+0x10/0x10
[  746.918041][T12899]  should_fail_ex+0x3b0/0x4e0
[  746.922813][T12899]  should_failslab+0xac/0x100
[  746.927493][T12899]  __kmalloc_noprof+0xdd/0x4c0
[  746.932262][T12899]  ? kstrtouint_from_user+0x128/0x190
[  746.937628][T12899]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  746.943347][T12899]  tomoyo_realpath_from_path+0xcf/0x5e0
[  746.948900][T12899]  tomoyo_path_number_perm+0x236/0x860
[  746.954351][T12899]  ? __lock_acquire+0x1397/0x2100
[  746.959552][T12899]  ? tomoyo_path_number_perm+0x206/0x860
[  746.965181][T12899]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  746.971188][T12899]  ? __fget_files+0x2a/0x410
[  746.975777][T12899]  ? __fget_files+0x2a/0x410
[  746.980370][T12899]  security_file_ioctl+0xc6/0x2a0
[  746.985403][T12899]  __se_sys_ioctl+0x46/0x170
[  746.989996][T12899]  do_syscall_64+0xf3/0x230
[  746.994495][T12899]  ? clear_bhb_loop+0x35/0x90
[  747.000214][T12899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.006101][T12899] RIP: 0033:0x7f20db980809
[  747.010512][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.030576][T12899] RSP: 002b:00007f20dc7ba058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  747.038990][T12899] RAX: ffffffffffffffda RBX: 00007f20dbb45fa0 RCX: 00007f20db980809
[  747.046957][T12899] RDX: 0000000020000180 RSI: 0000000000008955 RDI: 0000000000000003
[  747.054918][T12899] RBP: 00007f20dc7ba0a0 R08: 0000000000000000 R09: 0000000000000000
[  747.062883][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.070852][T12899] R13: 0000000000000000 R14: 00007f20dbb45fa0 R15: 00007ffe88148ba8
[  747.078841][T12899]  </TASK>
[  747.126923][T12901] sctp: [Deprecated]: syz.5.1807 (pid 12901) Use of int in max_burst socket option deprecated.
[  747.126923][T12901] Use struct sctp_assoc_value instead
[  747.220645][T12899] ERROR: Out of memory at tomoyo_realpath_from_path.
[  747.605130][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  747.637489][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  751.138118][T12937] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  751.457130][T12913] hub 6-0:1.0: USB hub found
[  751.466596][T12913] hub 6-0:1.0: 1 port detected
[  752.605000][T12948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1818'.
[  753.492679][T12953] sctp: [Deprecated]: syz.3.1819 (pid 12953) Use of int in max_burst socket option deprecated.
[  753.492679][T12953] Use struct sctp_assoc_value instead
[  754.564021][T12965] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  756.088076][T12979] sctp: [Deprecated]: syz.3.1827 (pid 12979) Use of int in max_burst socket option deprecated.
[  756.088076][T12979] Use struct sctp_assoc_value instead
[  756.369765][T12985] FAULT_INJECTION: forcing a failure.
[  756.369765][T12985] name failslab, interval 1, probability 0, space 0, times 0
[  756.429467][T12985] CPU: 0 UID: 0 PID: 12985 Comm: syz.4.1829 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  756.439955][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  756.450038][T12985] Call Trace:
[  756.453335][T12985]  <TASK>
[  756.456284][T12985]  dump_stack_lvl+0x241/0x360
[  756.460995][T12985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  756.466219][T12985]  ? __pfx__printk+0x10/0x10
[  756.470843][T12985]  ? fs_reclaim_acquire+0x93/0x130
[  756.475992][T12985]  ? __pfx___might_resched+0x10/0x10
[  756.481301][T12985]  should_fail_ex+0x3b0/0x4e0
[  756.486157][T12985]  should_failslab+0xac/0x100
[  756.490842][T12985]  __kmalloc_noprof+0xdd/0x4c0
[  756.495624][T12985]  ? kstrtouint_from_user+0x128/0x190
[  756.500998][T12985]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  756.506740][T12985]  tomoyo_realpath_from_path+0xcf/0x5e0
[  756.512299][T12985]  tomoyo_path_number_perm+0x236/0x860
[  756.517761][T12985]  ? __lock_acquire+0x1397/0x2100
[  756.522790][T12985]  ? tomoyo_path_number_perm+0x206/0x860
[  756.528426][T12985]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  756.534429][T12985]  ? __fget_files+0x2a/0x410
[  756.539019][T12985]  ? __fget_files+0x2a/0x410
[  756.543642][T12985]  security_file_ioctl+0xc6/0x2a0
[  756.548666][T12985]  __se_sys_ioctl+0x46/0x170
[  756.553255][T12985]  do_syscall_64+0xf3/0x230
[  756.557753][T12985]  ? clear_bhb_loop+0x35/0x90
[  756.562425][T12985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.568331][T12985] RIP: 0033:0x7f5d13b80809
[  756.572738][T12985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  756.592335][T12985] RSP: 002b:00007f5d1491a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  756.600755][T12985] RAX: ffffffffffffffda RBX: 00007f5d13d45fa0 RCX: 00007f5d13b80809
[  756.608726][T12985] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000003
[  756.616694][T12985] RBP: 00007f5d1491a0a0 R08: 0000000000000000 R09: 0000000000000000
[  756.624681][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.632645][T12985] R13: 0000000000000000 R14: 00007f5d13d45fa0 R15: 00007ffe1bad0808
[  756.640626][T12985]  </TASK>
[  756.693138][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'.
[  756.726290][T12985] ERROR: Out of memory at tomoyo_realpath_from_path.
[  756.859300][T12994] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1832'.
[  758.525247][T13019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1836'.
[  759.585874][T13045] fuse: Bad value for 'fd'
[  759.623442][T13044] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1844'.
[  759.643734][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1844'.
[  760.439909][T13051] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  761.140913][T13075] sp0: Synchronizing with TNC
[  761.159537][T13055] siw: device registration error -23
[  761.231737][T13080] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1852'.
[  761.255826][T10633] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  761.416052][T10633] usb 1-1: Using ep0 maxpacket: 8
[  761.434862][T10633] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  761.444222][T10633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.470528][T10633] usb 1-1: Product: syz
[  761.484138][T10633] usb 1-1: Manufacturer: syz
[  761.493314][T10633] usb 1-1: SerialNumber: syz
[  761.530278][T10633] usb 1-1: config 0 descriptor??
[  761.549502][T10633] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  762.433495][T13097] FAULT_INJECTION: forcing a failure.
[  762.433495][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  762.466638][T10633] gspca_m5602: Failed to find a sensor
[  762.472172][T10633] ALi m5602 1-1:0.0: ALi m5602 webcam failed
[  762.478553][T13097] CPU: 0 UID: 0 PID: 13097 Comm: syz.5.1858 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  762.489010][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  762.494750][T10633] usb 1-1: USB disconnect, device number 25
[  762.499072][T13097] Call Trace:
[  762.499087][T13097]  <TASK>
[  762.499095][T13097]  dump_stack_lvl+0x241/0x360
[  762.499123][T13097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  762.499140][T13097]  ? __pfx__printk+0x10/0x10
[  762.499167][T13097]  ? __pfx_lock_release+0x10/0x10
[  762.530796][T13097]  should_fail_ex+0x3b0/0x4e0
[  762.535520][T13097]  _copy_from_user+0x2f/0xc0
[  762.540149][T13097]  copy_msghdr_from_user+0xae/0x680
[  762.545397][T13097]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  762.551234][T13097]  ? __fget_files+0x2a/0x410
[  762.555863][T13097]  ? __fget_files+0x2a/0x410
[  762.560491][T13097]  __sys_sendmsg+0x209/0x350
[  762.565112][T13097]  ? __pfx_lock_release+0x10/0x10
[  762.570169][T13097]  ? __pfx___sys_sendmsg+0x10/0x10
[  762.575334][T13097]  ? __pfx_vfs_write+0x10/0x10
[  762.580171][T13097]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  762.586708][T13097]  ? do_syscall_64+0x100/0x230
[  762.591505][T13097]  ? do_syscall_64+0xb6/0x230
[  762.596230][T13097]  do_syscall_64+0xf3/0x230
[  762.600765][T13097]  ? clear_bhb_loop+0x35/0x90
[  762.605473][T13097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.611389][T13097] RIP: 0033:0x7f6566d80809
[  762.615832][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  762.635558][T13097] RSP: 002b:00007f6567b25058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  762.644017][T13097] RAX: ffffffffffffffda RBX: 00007f6566f45fa0 RCX: 00007f6566d80809
[  762.652022][T13097] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  762.660023][T13097] RBP: 00007f6567b250a0 R08: 0000000000000000 R09: 0000000000000000
[  762.668029][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  762.676029][T13097] R13: 0000000000000000 R14: 00007f6566f45fa0 R15: 00007ffc874481f8
[  762.684024][T13097]  </TASK>
[  762.724578][T13105] fuse: Unknown parameter '0x0000000000000004'
[  764.023809][T13116] sctp: [Deprecated]: syz.4.1864 (pid 13116) Use of int in max_burst socket option deprecated.
[  764.023809][T13116] Use struct sctp_assoc_value instead
[  764.920504][T13130] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1868'.
[  764.921749][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1868'.
[  765.127220][T13136] sctp: [Deprecated]: syz.5.1871 (pid 13136) Use of int in max_burst socket option deprecated.
[  765.127220][T13136] Use struct sctp_assoc_value instead
[  766.162935][T13145] fuse: Unknown parameter '0x0000000000000004'
[  767.257850][T13162] sctp: [Deprecated]: syz.5.1879 (pid 13162) Use of int in max_burst socket option deprecated.
[  767.257850][T13162] Use struct sctp_assoc_value instead
[  767.312191][T13165] FAULT_INJECTION: forcing a failure.
[  767.312191][T13165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.456327][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.3.1881 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  767.466805][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  767.476874][T13165] Call Trace:
[  767.480171][T13165]  <TASK>
[  767.483113][T13165]  dump_stack_lvl+0x241/0x360
[  767.487826][T13165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  767.493042][T13165]  ? __pfx__printk+0x10/0x10
[  767.497658][T13165]  ? vfs_write+0x730/0xd30
[  767.502099][T13165]  should_fail_ex+0x3b0/0x4e0
[  767.506834][T13165]  _copy_from_user+0x2f/0xc0
[  767.511459][T13165]  move_addr_to_kernel+0x82/0x150
[  767.516513][T13165]  __sys_connect+0xb6/0x2d0
[  767.521028][T13165]  ? __fget_files+0x2a/0x410
[  767.525633][T13165]  ? __pfx___sys_connect+0x10/0x10
[  767.530778][T13165]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  767.537121][T13165]  ? do_syscall_64+0x100/0x230
[  767.541902][T13165]  __x64_sys_connect+0x7a/0x90
[  767.546715][T13165]  do_syscall_64+0xf3/0x230
[  767.551239][T13165]  ? clear_bhb_loop+0x35/0x90
[  767.555940][T13165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.561847][T13165] RIP: 0033:0x7f20db980809
[  767.566284][T13165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  767.585909][T13165] RSP: 002b:00007f20dc7ba058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  767.594345][T13165] RAX: ffffffffffffffda RBX: 00007f20dbb45fa0 RCX: 00007f20db980809
[  767.602336][T13165] RDX: 0000000000000058 RSI: 00000000200001c0 RDI: 0000000000000003
[  767.610322][T13165] RBP: 00007f20dc7ba0a0 R08: 0000000000000000 R09: 0000000000000000
[  767.618316][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.626311][T13165] R13: 0000000000000000 R14: 00007f20dbb45fa0 R15: 00007ffe88148ba8
[  767.634313][T13165]  </TASK>
[  767.894297][    T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  768.196985][    T8] usb 1-1: Using ep0 maxpacket: 16
[  768.204057][    T8] usb 1-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[  768.215034][    T8] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  768.275026][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  768.420243][    T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.20
[  768.579080][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.887909][    T8] usb 1-1: config 0 descriptor??
[  772.115091][T13199] fuse: Unknown parameter '0x0000000000000004'
[  772.124133][    T8] usb 1-1: string descriptor 0 read error: -71
[  772.151512][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  772.214905][    T8] usb 1-1: USB disconnect, device number 26
[  772.333463][T13205] ip6gretap0: entered promiscuous mode
[  772.406154][T13205] ip6gretap0: left promiscuous mode
[  772.447863][T13211] sctp: [Deprecated]: syz.3.1895 (pid 13211) Use of int in max_burst socket option deprecated.
[  772.447863][T13211] Use struct sctp_assoc_value instead
[  775.427190][T13239] [U] ^C
[  775.629473][T13246] fuse: Unknown parameter '0x0000000000000004'
[  777.262354][T13257] fuse: Bad value for 'fd'
[  777.695308][T13259] sctp: [Deprecated]: syz.5.1909 (pid 13259) Use of int in max_burst socket option deprecated.
[  777.695308][T13259] Use struct sctp_assoc_value instead
[  780.491110][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  780.666007][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  782.106070][ T5889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  782.114313][ T5889] usb 2-1: config 0 has no interface number 0
[  782.266273][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  782.275372][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.283522][ T5889] usb 2-1: Product: syz
[  782.287770][ T5889] usb 2-1: Manufacturer: syz
[  782.292387][ T5889] usb 2-1: SerialNumber: syz
[  782.301638][ T5889] usb 2-1: config 0 descriptor??
[  782.308747][ T5889] smsc95xx v2.0.0
[  782.854742][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  782.866174][ T5889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  782.906592][ T5889] usb 2-1: USB disconnect, device number 14
[  783.079914][T13322] fuse: Bad value for 'fd'
[  783.454920][T13301] siw: device registration error -23
[  783.515777][T13327] FAULT_INJECTION: forcing a failure.
[  783.515777][T13327] name failslab, interval 1, probability 0, space 0, times 0
[  783.529954][T13328] sctp: [Deprecated]: syz.1.1924 (pid 13328) Use of int in max_burst socket option deprecated.
[  783.529954][T13328] Use struct sctp_assoc_value instead
[  783.583862][T13327] CPU: 1 UID: 0 PID: 13327 Comm: syz.3.1926 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  783.594340][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  783.604412][T13327] Call Trace:
[  783.607685][T13327]  <TASK>
[  783.610625][T13327]  dump_stack_lvl+0x241/0x360
[  783.615295][T13327]  ? __pfx_dump_stack_lvl+0x10/0x10
[  783.620482][T13327]  ? __pfx__printk+0x10/0x10
[  783.625128][T13327]  ? fs_reclaim_acquire+0x93/0x130
[  783.630235][T13327]  ? __pfx___might_resched+0x10/0x10
[  783.635556][T13327]  should_fail_ex+0x3b0/0x4e0
[  783.640259][T13327]  should_failslab+0xac/0x100
[  783.644928][T13327]  __kmalloc_noprof+0xdd/0x4c0
[  783.649697][T13327]  ? kstrtouint_from_user+0x128/0x190
[  783.655091][T13327]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  783.660832][T13327]  tomoyo_realpath_from_path+0xcf/0x5e0
[  783.666379][T13327]  tomoyo_path_number_perm+0x236/0x860
[  783.671826][T13327]  ? __lock_acquire+0x1397/0x2100
[  783.676848][T13327]  ? tomoyo_path_number_perm+0x206/0x860
[  783.682472][T13327]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  783.688495][T13327]  ? __fget_files+0x2a/0x410
[  783.693101][T13327]  ? __fget_files+0x2a/0x410
[  783.697687][T13327]  security_file_ioctl+0xc6/0x2a0
[  783.702728][T13327]  __se_sys_ioctl+0x46/0x170
[  783.707334][T13327]  do_syscall_64+0xf3/0x230
[  783.711842][T13327]  ? clear_bhb_loop+0x35/0x90
[  783.716515][T13327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.722398][T13327] RIP: 0033:0x7f20db980809
[  783.726930][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  783.746542][T13327] RSP: 002b:00007f20dc7ba058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  783.754978][T13327] RAX: ffffffffffffffda RBX: 00007f20dbb45fa0 RCX: 00007f20db980809
[  783.762944][T13327] RDX: 0000000020000100 RSI: 00000000c0405602 RDI: 0000000000000003
[  783.770908][T13327] RBP: 00007f20dc7ba0a0 R08: 0000000000000000 R09: 0000000000000000
[  783.778874][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.786842][T13327] R13: 0000000000000000 R14: 00007f20dbb45fa0 R15: 00007ffe88148ba8
[  783.794817][T13327]  </TASK>
[  783.941421][T13327] ERROR: Out of memory at tomoyo_realpath_from_path.
[  784.271294][T13341] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  786.156177][T13350] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1931'.
[  789.095846][T13368] FAULT_INJECTION: forcing a failure.
[  789.095846][T13368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  789.853725][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.0.1937 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  789.864206][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  789.874292][T13368] Call Trace:
[  789.877585][T13368]  <TASK>
[  789.880533][T13368]  dump_stack_lvl+0x241/0x360
[  789.885231][T13368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  789.890446][T13368]  ? __pfx__printk+0x10/0x10
[  789.895059][T13368]  ? __pfx_lock_release+0x10/0x10
[  789.900106][T13368]  should_fail_ex+0x3b0/0x4e0
[  789.904809][T13368]  _copy_from_user+0x2f/0xc0
[  789.909430][T13368]  copy_bpf_fprog_from_user+0x167/0x450
[  789.914996][T13368]  ? __pfx_copy_bpf_fprog_from_user+0x10/0x10
[  789.921091][T13368]  fanout_set_data+0x26e/0x510
[  789.925891][T13368]  ? __pfx_fanout_set_data+0x10/0x10
[  789.931209][T13368]  ? __pfx_lock_release+0x10/0x10
[  789.936257][T13368]  ? kstrtouint_from_user+0x128/0x190
[  789.941644][T13368]  packet_setsockopt+0x99c/0x1970
[  789.946664][T13368]  ? __pfx_packet_setsockopt+0x10/0x10
[  789.952117][T13368]  ? __lock_acquire+0x1397/0x2100
[  789.957156][T13368]  ? __pfx_lock_acquire+0x10/0x10
[  789.962184][T13368]  ? __fget_files+0x2a/0x410
[  789.966762][T13368]  ? __pfx_packet_setsockopt+0x10/0x10
[  789.972203][T13368]  do_sock_setsockopt+0x3af/0x720
[  789.977228][T13368]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  789.982778][T13368]  ? __fget_files+0x395/0x410
[  789.987454][T13368]  ? __fget_files+0x2a/0x410
[  789.992048][T13368]  __x64_sys_setsockopt+0x1ee/0x280
[  789.997258][T13368]  do_syscall_64+0xf3/0x230
[  790.001755][T13368]  ? clear_bhb_loop+0x35/0x90
[  790.006439][T13368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.012326][T13368] RIP: 0033:0x7f2f19b80809
[  790.016741][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  790.036351][T13368] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  790.044768][T13368] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  790.052740][T13368] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003
[  790.060705][T13368] RBP: 00007f2f1aa120a0 R08: 0000000000000010 R09: 0000000000000000
[  790.068674][T13368] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  790.076648][T13368] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  790.084631][T13368]  </TASK>
[  790.240560][T13371] fuse: Bad value for 'fd'
[  790.828810][T13385] sctp: [Deprecated]: syz.4.1941 (pid 13385) Use of int in max_burst socket option deprecated.
[  790.828810][T13385] Use struct sctp_assoc_value instead
[  792.702506][ T5918] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  793.299242][T13401] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  793.817807][ T5918] usb 5-1: Using ep0 maxpacket: 32
[  794.526283][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1949'.
[  794.562539][ T5918] usb 5-1: config index 0 descriptor too short (expected 164, got 36)
[  794.570950][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.582096][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  794.594405][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  794.603546][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.688434][ T5918] usb 5-1: config 0 descriptor??
[  794.929849][T13404] siw: device registration error -23
[  796.366829][ T5918] usbhid 5-1:0.0: can't add hid device: -71
[  796.374783][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  796.408356][ T5918] usb 5-1: USB disconnect, device number 10
[  799.072133][T13455] siw: device registration error -23
[  799.125143][T13471] hub 6-0:1.0: USB hub found
[  799.152370][T13471] hub 6-0:1.0: 1 port detected
[  801.198140][T13489] sctp: [Deprecated]: syz.0.1968 (pid 13489) Use of int in max_burst socket option deprecated.
[  801.198140][T13489] Use struct sctp_assoc_value instead
[  804.416096][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1972'.
[  804.425240][T13504] tipc: Invalid UDP bearer configuration
[  804.425281][T13504] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  805.462285][T13518] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  808.606062][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  808.665239][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  808.703155][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  808.741704][T13543] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  808.754292][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  808.764162][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  808.773241][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  808.780676][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  808.807807][ T5889] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  808.820895][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  808.832685][ T5889] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64
[  808.843771][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  808.869746][ T5889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  808.876211][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  808.879005][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.885196][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  809.075075][T13538] lo speed is unknown, defaulting to 1000
[  809.143652][T13538] lo speed is unknown, defaulting to 1000
[  810.444522][ T5889] ath6kl: Failed to submit usb control message: -110
[  810.555574][T13553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1984'.
[  810.565005][T13553] tipc: Invalid UDP bearer configuration
[  810.565043][T13553] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  810.573847][ T5889] ath6kl: unable to send the bmi data to the device: -110
[  810.747922][ T5889] ath6kl: Unable to send get target info: -110
[  810.782343][ T5889] ath6kl: Failed to init ath6kl core: -110
[  810.887040][ T5851] Bluetooth: hci3: command tx timeout
[  810.900540][ T5889] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110
[  810.915417][T13538] chnl_net:caif_netlink_parms(): no params data found
[  810.963791][ T5889] usb 4-1: USB disconnect, device number 19
[  811.989203][T13538] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.089026][T13538] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.146192][T13538] bridge_slave_0: entered allmulticast mode
[  812.489594][T13538] bridge_slave_0: entered promiscuous mode
[  812.768963][T13538] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.795543][T13538] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.957963][T13538] bridge_slave_1: entered allmulticast mode
[  812.965111][T13538] bridge_slave_1: entered promiscuous mode
[  813.004204][ T5851] Bluetooth: hci3: command tx timeout
[  813.703986][T13589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1996'.
[  813.859302][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  813.880431][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  813.881950][T13538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.009946][T13538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.035490][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  814.111692][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  814.120540][ T5153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  814.127968][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  815.856033][ T5153] Bluetooth: hci3: command tx timeout
[  816.062903][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  816.062923][   T29] audit: type=1107 audit(1732864556.718:125): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P'
[  816.226278][ T5153] Bluetooth: hci5: command tx timeout
[  816.470462][T13538] team0: Port device team_slave_0 added
[  816.479028][T13538] team0: Port device team_slave_1 added
[  816.546361][T13614] QAT: failed to copy from user cfg_data.
[  816.566888][T13590] lo speed is unknown, defaulting to 1000
[  816.578016][T13538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.597691][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.778367][T13614] Bluetooth: MGMT ver 1.23
[  816.805960][T13538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.828074][T13590] lo speed is unknown, defaulting to 1000
[  816.829061][T13538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.841040][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.867191][T13538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.948690][T13619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2003'.
[  817.230746][T13538] hsr_slave_0: entered promiscuous mode
[  817.246515][T13538] hsr_slave_1: entered promiscuous mode
[  817.492702][T13538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  817.503334][T13538] Cannot create hsr debugfs directory
[  817.906398][ T5153] Bluetooth: hci3: command tx timeout
[  818.289356][T13632] FAULT_INJECTION: forcing a failure.
[  818.289356][T13632] name failslab, interval 1, probability 0, space 0, times 0
[  818.302063][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.1.2006 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  818.311292][ T5153] Bluetooth: hci5: command tx timeout
[  818.312480][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  818.312495][T13632] Call Trace:
[  818.312503][T13632]  <TASK>
[  818.312513][T13632]  dump_stack_lvl+0x241/0x360
[  818.338870][T13632]  ? __pfx_dump_stack_lvl+0x10/0x10
[  818.344098][T13632]  ? __pfx__printk+0x10/0x10
[  818.348719][T13632]  ? fs_reclaim_acquire+0x93/0x130
[  818.353860][T13632]  ? __pfx___might_resched+0x10/0x10
[  818.359187][T13632]  should_fail_ex+0x3b0/0x4e0
[  818.363897][T13632]  should_failslab+0xac/0x100
[  818.368597][T13632]  __kmalloc_noprof+0xdd/0x4c0
[  818.373365][T13632]  ? kstrtouint_from_user+0x128/0x190
[  818.378737][T13632]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  818.384467][T13632]  tomoyo_realpath_from_path+0xcf/0x5e0
[  818.390021][T13632]  tomoyo_path_number_perm+0x236/0x860
[  818.395474][T13632]  ? __lock_acquire+0x1397/0x2100
[  818.400500][T13632]  ? tomoyo_path_number_perm+0x206/0x860
[  818.406126][T13632]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  818.412123][T13632]  ? __fget_files+0x2a/0x410
[  818.416726][T13632]  ? __fget_files+0x2a/0x410
[  818.421331][T13632]  security_file_ioctl+0xc6/0x2a0
[  818.426377][T13632]  __se_sys_ioctl+0x46/0x170
[  818.430979][T13632]  do_syscall_64+0xf3/0x230
[  818.435484][T13632]  ? clear_bhb_loop+0x35/0x90
[  818.440162][T13632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.446060][T13632] RIP: 0033:0x7f5f88980809
[  818.450506][T13632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  818.470134][T13632] RSP: 002b:00007f5f896d8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  818.478566][T13632] RAX: ffffffffffffffda RBX: 00007f5f88b45fa0 RCX: 00007f5f88980809
[  818.486540][T13632] RDX: 00000000200000c0 RSI: 000000005000aea5 RDI: 0000000000000005
[  818.494508][T13632] RBP: 00007f5f896d80a0 R08: 0000000000000000 R09: 0000000000000000
[  818.502480][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  818.510466][T13632] R13: 0000000000000000 R14: 00007f5f88b45fa0 R15: 00007ffe508cd0a8
[  818.518464][T13632]  </TASK>
[  818.523261][T13632] ERROR: Out of memory at tomoyo_realpath_from_path.
[  818.785619][T10633] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  818.812037][T13590] chnl_net:caif_netlink_parms(): no params data found
[  819.603979][T10633] usb 1-1: Using ep0 maxpacket: 8
[  819.647690][T10633] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[  819.678600][T10633] usb 1-1: config 0 has no interface number 0
[  819.684837][T10633] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b
[  819.711240][T10633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.731591][T10633] usb 1-1: config 0 descriptor??
[  819.743156][T10633] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected
[  819.747670][T13538] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  819.751733][T10633] ftdi_sio ttyUSB0: unknown device type: 0x711b
[  819.799484][T13538] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  820.001778][T13538] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  820.985938][ T5153] Bluetooth: hci5: command tx timeout
[  821.588734][T13665] xt_cgroup: path and classid specified
[  821.610634][T13664] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  821.674979][    T8] usb 1-1: USB disconnect, device number 27
[  821.697275][T13538] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  821.717572][    T8] ftdi_sio 1-1:0.130: device disconnected
[  821.752885][T13590] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.760720][T13590] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.768339][T13590] bridge_slave_0: entered allmulticast mode
[  821.780765][T13590] bridge_slave_0: entered promiscuous mode
[  822.226254][T13590] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.236194][T13590] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.243441][T13590] bridge_slave_1: entered allmulticast mode
[  822.257371][T13590] bridge_slave_1: entered promiscuous mode
[  823.026104][ T5153] Bluetooth: hci5: command tx timeout
[  823.130259][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.164761][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.311856][T13590] team0: Port device team_slave_0 added
[  823.340392][T13590] team0: Port device team_slave_1 added
[  823.403174][T13538] 8021q: adding VLAN 0 to HW filter on device bond0
[  823.472608][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.486973][T13687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.488835][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  823.549382][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.579664][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.592684][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  823.684243][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.797719][T13538] 8021q: adding VLAN 0 to HW filter on device team0
[  823.890704][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.898022][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  824.529447][T13590] hsr_slave_0: entered promiscuous mode
[  824.676350][T13590] hsr_slave_1: entered promiscuous mode
[  824.693555][T13590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  824.701392][T13590] Cannot create hsr debugfs directory
[  824.869909][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.877109][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.055007][T13538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  827.065743][T13538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  827.555091][T13590] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  827.604420][T13538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.626131][   T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  827.634735][T13590] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  827.655769][T13590] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  827.708583][T13590] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  827.797515][   T25] usb 1-1: Using ep0 maxpacket: 8
[  827.808524][   T25] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[  827.826140][   T25] usb 1-1: config 0 has no interface number 0
[  827.840525][   T25] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b
[  827.874367][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.893358][T13590] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.907272][   T25] usb 1-1: config 0 descriptor??
[  827.931856][   T25] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected
[  827.942608][   T25] ftdi_sio ttyUSB0: unknown device type: 0x711b
[  827.952622][T13590] 8021q: adding VLAN 0 to HW filter on device team0
[  827.983505][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.990725][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  828.051704][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.058915][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.151046][T10633] usb 1-1: USB disconnect, device number 28
[  828.160799][T10633] ftdi_sio 1-1:0.130: device disconnected
[  828.204867][T13538] veth0_vlan: entered promiscuous mode
[  828.241859][T13538] veth1_vlan: entered promiscuous mode
[  828.295590][T13538] veth0_macvtap: entered promiscuous mode
[  828.324067][T13538] veth1_macvtap: entered promiscuous mode
[  828.352931][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.364997][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.403003][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.416422][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.430641][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.441361][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.456112][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.467276][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.478435][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.490690][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.507497][T13538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.521419][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.537444][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.556032][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.572826][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.603666][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.644905][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.665808][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.685420][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.696026][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.706743][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.717758][T13538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.731140][T13538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.739976][T13538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.748804][T13538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.757670][T13538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.856280][T13736] IPVS: stopping master sync thread 13735 ...
[  829.284977][T13590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  829.479401][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.540602][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.466404][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.474573][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.559948][T13764] IPVS: stopping master sync thread 13543 ...
[  832.733354][T13590] veth0_vlan: entered promiscuous mode
[  832.908412][T13775] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2035'.
[  833.103198][T13777] hub 6-0:1.0: USB hub found
[  833.120963][T13777] hub 6-0:1.0: 1 port detected
[  833.512578][T13590] veth1_vlan: entered promiscuous mode
[  833.599924][T13590] veth0_macvtap: entered promiscuous mode
[  833.622304][T13590] veth1_macvtap: entered promiscuous mode
[  833.691912][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.731665][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.766665][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.816686][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.850478][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.878361][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.914002][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.943331][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.978403][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  834.018967][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.046130][T10417] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  834.062798][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  834.100436][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.138028][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  834.198386][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.209469][T10417] usb 1-1: Using ep0 maxpacket: 8
[  834.221787][T10417] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[  834.241342][T10417] usb 1-1: config 0 has no interface number 0
[  834.252125][T10417] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b
[  834.263610][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.281413][T10417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.289964][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.312213][T10417] usb 1-1: config 0 descriptor??
[  834.319336][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.338377][T10417] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected
[  834.351356][T10417] ftdi_sio ttyUSB0: unknown device type: 0x711b
[  834.357940][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.373525][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.398184][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.421334][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.441729][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.464881][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.482805][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  834.493535][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  834.524035][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.555404][T13590] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  834.570944][T13590] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  834.591892][T13590] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  834.604164][T13590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  834.623277][T13790] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  834.753847][T10417] usb 1-1: USB disconnect, device number 29
[  834.803371][T10417] ftdi_sio 1-1:0.130: device disconnected
[  835.179168][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.196154][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.226013][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.233877][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.804346][T13799] syz.6.2040 uses old SIOCAX25GETINFO
[  836.147315][T13798] tty tty33: ldisc open failed (-12), clearing slot 32
[  837.896110][T13809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'.
[  839.316817][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'.
[  840.864872][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  840.880949][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  840.936145][   T47] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  840.957737][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  841.049791][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  841.066758][ T5851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  841.076985][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  841.106057][   T47] usb 1-1: Using ep0 maxpacket: 8
[  841.135352][T13836] lo speed is unknown, defaulting to 1000
[  841.141632][   T47] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[  841.150020][   T47] usb 1-1: config 0 has no interface number 0
[  841.157239][   T47] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b
[  841.166928][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.180537][   T47] usb 1-1: config 0 descriptor??
[  841.187895][   T47] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected
[  841.196714][   T47] ftdi_sio ttyUSB0: unknown device type: 0x711b
[  841.264213][T13836] lo speed is unknown, defaulting to 1000
[  841.748134][T13855] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2056'.
[  842.682854][T13836] chnl_net:caif_netlink_parms(): no params data found
[  842.695640][ T5888] usb 1-1: USB disconnect, device number 30
[  842.726281][ T5888] ftdi_sio 1-1:0.130: device disconnected
[  842.870611][T13850] siw: device registration error -23
[  843.158295][ T5851] Bluetooth: hci6: command tx timeout
[  844.481593][T13836] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.491213][T13836] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.521633][T13836] bridge_slave_0: entered allmulticast mode
[  844.543817][T13836] bridge_slave_0: entered promiscuous mode
[  845.182042][T13836] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.192195][ T5851] Bluetooth: hci6: command tx timeout
[  845.199205][T13836] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.240043][T13836] bridge_slave_1: entered allmulticast mode
[  845.247885][T13836] bridge_slave_1: entered promiscuous mode
[  845.393801][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.424883][T13896] IPVS: stopping master sync thread 13897 ...
[  845.431911][T13897] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  845.485065][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.699221][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.732267][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.809279][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.829184][T13906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.866428][ T5888] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  846.229345][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  846.467169][T13906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  846.559363][ T5888] usb 7-1: config index 0 descriptor too short (expected 115, got 72)
[  846.578086][ T5888] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  846.588010][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.596573][ T5888] usb 7-1: Product: syz
[  846.600776][ T5888] usb 7-1: Manufacturer: syz
[  846.606966][ T5888] usb 7-1: SerialNumber: syz
[  846.624679][T13836] team0: Port device team_slave_0 added
[  846.649479][T13836] team0: Port device team_slave_1 added
[  846.673708][ T5888] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  846.781442][T10613] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  846.865156][T13913] FAULT_INJECTION: forcing a failure.
[  846.865156][T13913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.868734][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.936115][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.942048][T13913] CPU: 1 UID: 0 PID: 13913 Comm: syz.0.2070 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  846.972562][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  846.982645][T13913] Call Trace:
[  846.985942][T13913]  <TASK>
[  846.986010][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.988865][T13913]  dump_stack_lvl+0x241/0x360
[  846.988895][T13913]  ? __pfx_dump_stack_lvl+0x10/0x10
[  846.988915][T13913]  ? __pfx__printk+0x10/0x10
[  847.013860][T13913]  ? __pfx_lock_release+0x10/0x10
[  847.018929][T13913]  should_fail_ex+0x3b0/0x4e0
[  847.023651][T13913]  _copy_from_user+0x2f/0xc0
[  847.028269][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.028337][T13913]  copy_msghdr_from_user+0xae/0x680
[  847.040481][T13913]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  847.041911][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.046315][T13913]  ? __fget_files+0x2a/0x410
[  847.046344][T13913]  ? __fget_files+0x2a/0x410
[  847.046369][T13913]  __sys_sendmsg+0x209/0x350
[  847.046398][T13913]  ? __pfx_lock_release+0x10/0x10
[  847.046420][T13913]  ? __pfx___sys_sendmsg+0x10/0x10
[  847.046450][T13913]  ? __pfx_vfs_write+0x10/0x10
[  847.046496][T13913]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  847.046517][T13913]  ? do_syscall_64+0x100/0x230
[  847.046540][T13913]  ? do_syscall_64+0xb6/0x230
[  847.046558][T13913]  do_syscall_64+0xf3/0x230
[  847.046575][T13913]  ? clear_bhb_loop+0x35/0x90
[  847.046598][T13913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.046615][T13913] RIP: 0033:0x7f2f19b80809
[  847.046632][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  847.046648][T13913] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  847.046670][T13913] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  847.046684][T13913] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003
[  847.180226][T13913] RBP: 00007f2f1aa120a0 R08: 0000000000000000 R09: 0000000000000000
[  847.188201][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  847.196166][T13913] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  847.204154][T13913]  </TASK>
[  847.356076][ T5851] Bluetooth: hci6: command tx timeout
[  847.419599][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  849.490532][ T5851] Bluetooth: hci6: command tx timeout
[  853.211695][T10613] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  853.724693][T10613] ath9k_htc: Failed to initialize the device
[  853.730763][    C0] sched: DL replenish lagged too much
[  857.364505][T13836] hsr_slave_0: entered promiscuous mode
[  857.459653][T13836] hsr_slave_1: entered promiscuous mode
[  857.580839][T13836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  857.612371][T13836] Cannot create hsr debugfs directory
[  865.831520][T13836] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  866.217106][ T5888] usb 7-1: USB disconnect, device number 2
[  866.412099][T13836] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  866.439372][T13971] siw: device registration error -23
[  866.454250][ T5888] usb 7-1: ath9k_htc: USB layer deinitialized
[  866.478700][T13836] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  866.546584][T13836] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  866.953490][T13836] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.983705][T13980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2089'.
[  867.032333][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2089'.
[  867.117600][T13836] 8021q: adding VLAN 0 to HW filter on device team0
[  867.227515][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.234823][ T7021] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.260242][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.267523][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.275555][T13984] hub 6-0:1.0: USB hub found
[  867.280761][T13984] hub 6-0:1.0: 1 port detected
[  867.332637][T13836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  867.343684][T13836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  867.402876][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2092'.
[  867.689259][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.964815][T13997] kvm: kvm [13996]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800
[  867.987668][T13997] kvm: kvm [13996]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  868.803538][T13836] veth0_vlan: entered promiscuous mode
[  868.920347][T13836] veth1_vlan: entered promiscuous mode
[  869.709112][T13836] veth0_macvtap: entered promiscuous mode
[  869.753777][T13836] veth1_macvtap: entered promiscuous mode
[  869.818441][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.861194][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  869.891742][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.925079][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  869.957412][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.986032][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.005996][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.046039][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.095962][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.115959][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.125845][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.184563][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.205956][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.216640][T10417] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  870.235790][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.259472][T13836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.278803][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.315768][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  870.325406][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  870.343817][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.376051][T10417] usb 4-1: Using ep0 maxpacket: 8
[  870.382939][T10417] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec
[  870.392388][T10417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.400445][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.422143][T10417] usb 4-1: config 0 descriptor??
[  870.445750][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.448184][T10417] ttusb_dec_send_command: command bulk message failed: error -22
[  870.488806][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.490482][T10417] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22
[  870.525184][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.552638][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.603300][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.655977][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.719742][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.780426][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.038465][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.207057][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.272787][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.346026][T13836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.466710][T14029] bridge0: port 3(erspan0) entered blocking state
[  871.473338][T14029] bridge0: port 3(erspan0) entered disabled state
[  871.480143][T14029] erspan0: entered allmulticast mode
[  871.487786][T14029] erspan0: entered promiscuous mode
[  871.493582][T14029] bridge0: port 3(erspan0) entered blocking state
[  871.500219][T14029] bridge0: port 3(erspan0) entered forwarding state
[  871.519248][T13836] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.571634][T13836] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.607966][T13836] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.616901][T13836] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  872.902211][T12154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.034788][T12154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.159388][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.169355][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.790999][T10417] usb 4-1: USB disconnect, device number 20
[  874.278914][T14055] FAULT_INJECTION: forcing a failure.
[  874.278914][T14055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.292034][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.3.2109 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  874.302480][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  874.312564][T14055] Call Trace:
[  874.315865][T14055]  <TASK>
[  874.318899][T14055]  dump_stack_lvl+0x241/0x360
[  874.323605][T14055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  874.328841][T14055]  ? __pfx__printk+0x10/0x10
[  874.333469][T14055]  ? __pfx_lock_release+0x10/0x10
[  874.338523][T14055]  should_fail_ex+0x3b0/0x4e0
[  874.343244][T14055]  _copy_from_user+0x2f/0xc0
[  874.347867][T14055]  copy_msghdr_from_user+0xae/0x680
[  874.353096][T14055]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  874.358926][T14055]  ? __fget_files+0x2a/0x410
[  874.363547][T14055]  ? __fget_files+0x2a/0x410
[  874.368167][T14055]  __sys_sendmsg+0x209/0x350
[  874.372866][T14055]  ? __pfx_lock_release+0x10/0x10
[  874.377909][T14055]  ? __pfx___sys_sendmsg+0x10/0x10
[  874.383052][T14055]  ? __pfx_vfs_write+0x10/0x10
[  874.387860][T14055]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  874.394214][T14055]  ? do_syscall_64+0x100/0x230
[  874.399001][T14055]  ? do_syscall_64+0xb6/0x230
[  874.403701][T14055]  do_syscall_64+0xf3/0x230
[  874.408220][T14055]  ? clear_bhb_loop+0x35/0x90
[  874.412916][T14055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.418829][T14055] RIP: 0033:0x7f20db980809
[  874.423258][T14055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  874.442889][T14055] RSP: 002b:00007f20dc799058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  874.451347][T14055] RAX: ffffffffffffffda RBX: 00007f20dbb46080 RCX: 00007f20db980809
[  874.459350][T14055] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005
[  874.467346][T14055] RBP: 00007f20dc7990a0 R08: 0000000000000000 R09: 0000000000000000
[  874.475340][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.483335][T14055] R13: 0000000000000000 R14: 00007f20dbb46080 R15: 00007ffe88148ba8
[  874.491350][T14055]  </TASK>
[  875.139065][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2111'.
[  876.817256][ T5851] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  876.824141][ T5851] Bluetooth: Wrong link type (-22)
[  879.315147][T14111] input: syz0 as /devices/virtual/input/input12
[  879.756906][T14123] FAULT_INJECTION: forcing a failure.
[  879.756906][T14123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.311827][T14123] CPU: 0 UID: 0 PID: 14123 Comm: syz.7.2127 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  880.322312][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  880.332376][T14123] Call Trace:
[  880.335692][T14123]  <TASK>
[  880.338631][T14123]  dump_stack_lvl+0x241/0x360
[  880.343320][T14123]  ? __pfx_dump_stack_lvl+0x10/0x10
[  880.348525][T14123]  ? __pfx__printk+0x10/0x10
[  880.353121][T14123]  ? __pfx_lock_release+0x10/0x10
[  880.358149][T14123]  should_fail_ex+0x3b0/0x4e0
[  880.362835][T14123]  _copy_from_user+0x2f/0xc0
[  880.367436][T14123]  copy_msghdr_from_user+0xae/0x680
[  880.372644][T14123]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  880.378629][T14123]  ? __fget_files+0x2a/0x410
[  880.383249][T14123]  ? __fget_files+0x2a/0x410
[  880.387844][T14123]  __sys_sendmsg+0x209/0x350
[  880.392438][T14123]  ? __pfx_lock_release+0x10/0x10
[  880.397478][T14123]  ? __pfx___sys_sendmsg+0x10/0x10
[  880.402601][T14123]  ? __pfx_vfs_write+0x10/0x10
[  880.407376][T14123]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  880.413723][T14123]  do_syscall_64+0xf3/0x230
[  880.418232][T14123]  ? clear_bhb_loop+0x35/0x90
[  880.422927][T14123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.428818][T14123] RIP: 0033:0x7fc841180809
[  880.433236][T14123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  880.452864][T14123] RSP: 002b:00007fc841f87058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.461304][T14123] RAX: ffffffffffffffda RBX: 00007fc841346160 RCX: 00007fc841180809
[  880.469294][T14123] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006
[  880.477283][T14123] RBP: 00007fc841f870a0 R08: 0000000000000000 R09: 0000000000000000
[  880.485261][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.493232][T14123] R13: 0000000000000000 R14: 00007fc841346160 R15: 00007ffdf8175138
[  880.501228][T14123]  </TASK>
[  882.166091][T14141] tty tty34: ldisc open failed (-12), clearing slot 33
[  884.090032][T14164] FAULT_INJECTION: forcing a failure.
[  884.090032][T14164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  884.103600][T14164] CPU: 0 UID: 0 PID: 14164 Comm: syz.6.2137 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  884.114063][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  884.124147][T14164] Call Trace:
[  884.127456][T14164]  <TASK>
[  884.130414][T14164]  dump_stack_lvl+0x241/0x360
[  884.135119][T14164]  ? __pfx_dump_stack_lvl+0x10/0x10
[  884.140353][T14164]  ? __pfx__printk+0x10/0x10
[  884.145404][T14164]  ? __pfx_lock_release+0x10/0x10
[  884.150461][T14164]  should_fail_ex+0x3b0/0x4e0
[  884.155171][T14164]  _copy_from_user+0x2f/0xc0
[  884.159822][T14164]  copy_msghdr_from_user+0xae/0x680
[  884.165131][T14164]  ? __lock_acquire+0x1397/0x2100
[  884.170187][T14164]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  884.176105][T14164]  ? __fget_files+0x2a/0x410
[  884.180822][T14164]  ? __fget_files+0x2a/0x410
[  884.185531][T14164]  do_recvmmsg+0x3bd/0xab0
[  884.189985][T14164]  ? __pfx_do_recvmmsg+0x10/0x10
[  884.194966][T14164]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  884.200890][T14164]  ? ksys_write+0x22a/0x2b0
[  884.205425][T14164]  ? __pfx_lock_release+0x10/0x10
[  884.210490][T14164]  ? vfs_write+0x730/0xd30
[  884.215030][T14164]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  884.221028][T14164]  ? __fget_files+0x2a/0x410
[  884.225655][T14164]  __x64_sys_recvmmsg+0x199/0x250
[  884.230727][T14164]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  884.236304][T14164]  ? do_syscall_64+0x100/0x230
[  884.241092][T14164]  ? do_syscall_64+0xb6/0x230
[  884.245791][T14164]  do_syscall_64+0xf3/0x230
[  884.250316][T14164]  ? clear_bhb_loop+0x35/0x90
[  884.255015][T14164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.260931][T14164] RIP: 0033:0x7f45b9d80809
[  884.265370][T14164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  884.285092][T14164] RSP: 002b:00007f45baac8058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  884.293549][T14164] RAX: ffffffffffffffda RBX: 00007f45b9f46080 RCX: 00007f45b9d80809
[  884.301573][T14164] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 0000000000000004
[  884.309575][T14164] RBP: 00007f45baac80a0 R08: 0000000000000000 R09: 0000000000000000
[  884.317577][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.325580][T14164] R13: 0000000000000001 R14: 00007f45b9f46080 R15: 00007fff2e88b548
[  884.333606][T14164]  </TASK>
[  887.729498][   T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  888.144784][T14205] FAULT_INJECTION: forcing a failure.
[  888.144784][T14205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  888.181504][T14205] CPU: 1 UID: 0 PID: 14205 Comm: syz.3.2152 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  888.191981][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  888.202063][T14205] Call Trace:
[  888.205360][T14205]  <TASK>
[  888.208309][T14205]  dump_stack_lvl+0x241/0x360
[  888.213016][T14205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  888.218240][T14205]  ? __pfx__printk+0x10/0x10
[  888.222867][T14205]  ? __pfx_lock_release+0x10/0x10
[  888.227921][T14205]  should_fail_ex+0x3b0/0x4e0
[  888.232631][T14205]  _copy_from_user+0x2f/0xc0
[  888.237247][T14205]  __sys_bpf+0x1a4/0x810
[  888.241513][T14205]  ? __pfx___sys_bpf+0x10/0x10
[  888.246310][T14205]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  888.252316][T14205]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  888.258667][T14205]  ? do_syscall_64+0x100/0x230
[  888.263456][T14205]  __x64_sys_bpf+0x7c/0x90
[  888.267898][T14205]  do_syscall_64+0xf3/0x230
[  888.272430][T14205]  ? clear_bhb_loop+0x35/0x90
[  888.277131][T14205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.283046][T14205] RIP: 0033:0x7f20db980809
[  888.287482][T14205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  888.307109][T14205] RSP: 002b:00007f20dc7ba058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  888.315547][T14205] RAX: ffffffffffffffda RBX: 00007f20dbb45fa0 RCX: 00007f20db980809
[  888.323545][T14205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  888.331541][T14205] RBP: 00007f20dc7ba0a0 R08: 0000000000000000 R09: 0000000000000000
[  888.339536][T14205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.347526][T14205] R13: 0000000000000000 R14: 00007f20dbb45fa0 R15: 00007ffe88148ba8
[  888.355530][T14205]  </TASK>
[  888.376156][   T25] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  888.386709][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.394841][   T25] usb 7-1: Product: syz
[  888.406075][   T25] usb 7-1: Manufacturer: syz
[  888.412869][   T25] usb 7-1: SerialNumber: syz
[  888.438609][   T25] usb 7-1: config 0 descriptor??
[  889.780557][   T25] usb 7-1: Firmware version (0.0) predates our first public release.
[  889.788973][   T25] usb 7-1: Please update to version 0.2 or newer
[  891.209791][   T25] usb 7-1: USB disconnect, device number 3
[  891.775602][T14241] i2c i2c-0: Invalid block write size 34
[  892.192870][ T5851] Bluetooth: Frame is too long (len 12, expected len 10)
[  892.412286][ T5851] Bluetooth: Unexpected continuation frame (len 18)
[  894.840160][T14245] Bluetooth: hci5: command tx timeout
[  895.276597][T10613] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  897.868155][T14283] overlay: ./file0 is not a directory
[  898.529497][T14314] FAULT_INJECTION: forcing a failure.
[  898.529497][T14314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  898.666548][T14314] CPU: 1 UID: 0 PID: 14314 Comm: syz.7.2185 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  898.677031][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  898.687117][T14314] Call Trace:
[  898.690524][T14314]  <TASK>
[  898.693491][T14314]  dump_stack_lvl+0x241/0x360
[  898.698231][T14314]  ? __pfx_dump_stack_lvl+0x10/0x10
[  898.703457][T14314]  ? __pfx__printk+0x10/0x10
[  898.708077][T14314]  ? __pfx_lock_release+0x10/0x10
[  898.713124][T14314]  should_fail_ex+0x3b0/0x4e0
[  898.717833][T14314]  _copy_from_user+0x2f/0xc0
[  898.722447][T14314]  __sys_bpf+0x1a4/0x810
[  898.726715][T14314]  ? __pfx___sys_bpf+0x10/0x10
[  898.731513][T14314]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  898.737511][T14314]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  898.743889][T14314]  ? do_syscall_64+0x100/0x230
[  898.748677][T14314]  __x64_sys_bpf+0x7c/0x90
[  898.753114][T14314]  do_syscall_64+0xf3/0x230
[  898.757631][T14314]  ? clear_bhb_loop+0x35/0x90
[  898.762335][T14314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.768257][T14314] RIP: 0033:0x7fc841180809
[  898.772696][T14314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  898.792359][T14314] RSP: 002b:00007fc841fc9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  898.800809][T14314] RAX: ffffffffffffffda RBX: 00007fc841345fa0 RCX: 00007fc841180809
[  898.808810][T14314] RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 0000000000000000
[  898.816893][T14314] RBP: 00007fc841fc90a0 R08: 0000000000000000 R09: 0000000000000000
[  898.824981][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  898.832976][T14314] R13: 0000000000000001 R14: 00007fc841345fa0 R15: 00007ffdf8175138
[  898.840988][T14314]  </TASK>
[  899.246841][T14321] FAULT_INJECTION: forcing a failure.
[  899.246841][T14321] name failslab, interval 1, probability 0, space 0, times 0
[  899.266019][T14321] CPU: 0 UID: 0 PID: 14321 Comm: syz.7.2188 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  899.276489][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  899.286572][T14321] Call Trace:
[  899.289862][T14321]  <TASK>
[  899.292793][T14321]  dump_stack_lvl+0x241/0x360
[  899.297479][T14321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  899.302677][T14321]  ? __pfx__printk+0x10/0x10
[  899.307272][T14321]  ? fs_reclaim_acquire+0x93/0x130
[  899.312407][T14321]  ? __pfx___might_resched+0x10/0x10
[  899.317704][T14321]  should_fail_ex+0x3b0/0x4e0
[  899.322474][T14321]  should_failslab+0xac/0x100
[  899.327239][T14321]  __kmalloc_noprof+0xdd/0x4c0
[  899.331996][T14321]  ? kstrtouint_from_user+0x128/0x190
[  899.337366][T14321]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  899.343216][T14321]  tomoyo_realpath_from_path+0xcf/0x5e0
[  899.348785][T14321]  tomoyo_path_number_perm+0x236/0x860
[  899.354333][T14321]  ? __lock_acquire+0x1397/0x2100
[  899.359359][T14321]  ? tomoyo_path_number_perm+0x206/0x860
[  899.364994][T14321]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  899.371085][T14321]  ? __fget_files+0x2a/0x410
[  899.375677][T14321]  ? __fget_files+0x2a/0x410
[  899.380279][T14321]  security_file_ioctl+0xc6/0x2a0
[  899.385305][T14321]  __se_sys_ioctl+0x46/0x170
[  899.389898][T14321]  do_syscall_64+0xf3/0x230
[  899.394402][T14321]  ? clear_bhb_loop+0x35/0x90
[  899.399085][T14321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.404973][T14321] RIP: 0033:0x7fc841180809
[  899.409384][T14321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  899.428998][T14321] RSP: 002b:00007fc841fc9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  899.437419][T14321] RAX: ffffffffffffffda RBX: 00007fc841345fa0 RCX: 00007fc841180809
[  899.445403][T14321] RDX: 0000000000000000 RSI: 000000000000227b RDI: 0000000000000003
[  899.453380][T14321] RBP: 00007fc841fc90a0 R08: 0000000000000000 R09: 0000000000000000
[  899.461360][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  899.469351][T14321] R13: 0000000000000000 R14: 00007fc841345fa0 R15: 00007ffdf8175138
[  899.477355][T14321]  </TASK>
[  899.536204][T14321] ERROR: Out of memory at tomoyo_realpath_from_path.
[  899.573699][T14323] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  901.236059][ T5888] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  901.244993][T14349] FAULT_INJECTION: forcing a failure.
[  901.244993][T14349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.282757][T14349] CPU: 1 UID: 0 PID: 14349 Comm: syz.6.2198 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  901.293323][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  901.303411][T14349] Call Trace:
[  901.306711][T14349]  <TASK>
[  901.309661][T14349]  dump_stack_lvl+0x241/0x360
[  901.314371][T14349]  ? __pfx_dump_stack_lvl+0x10/0x10
[  901.319680][T14349]  ? __pfx__printk+0x10/0x10
[  901.324306][T14349]  ? snprintf+0xda/0x120
[  901.328583][T14349]  should_fail_ex+0x3b0/0x4e0
[  901.333298][T14349]  _copy_to_user+0x31/0xb0
[  901.337743][T14349]  simple_read_from_buffer+0xca/0x150
[  901.343146][T14349]  proc_fail_nth_read+0x1e9/0x250
[  901.348214][T14349]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  901.353876][T14349]  ? rw_verify_area+0x55e/0x6f0
[  901.358756][T14349]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  901.364333][T14349]  vfs_read+0x1fc/0xb70
[  901.368532][T14349]  ? __pfx___mutex_lock+0x10/0x10
[  901.373581][T14349]  ? __pfx_vfs_read+0x10/0x10
[  901.378292][T14349]  ? __fget_files+0x2a/0x410
[  901.382911][T14349]  ? __fget_files+0x395/0x410
[  901.387613][T14349]  ? __fget_files+0x2a/0x410
[  901.392237][T14349]  ksys_read+0x18f/0x2b0
[  901.396510][T14349]  ? __pfx_ksys_read+0x10/0x10
[  901.401304][T14349]  ? do_syscall_64+0x100/0x230
[  901.406207][T14349]  ? do_syscall_64+0xb6/0x230
[  901.410909][T14349]  do_syscall_64+0xf3/0x230
[  901.415436][T14349]  ? clear_bhb_loop+0x35/0x90
[  901.420141][T14349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.426070][T14349] RIP: 0033:0x7f45b9d7f21c
[  901.430521][T14349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48
[  901.450161][T14349] RSP: 002b:00007f45baae9050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  901.458621][T14349] RAX: ffffffffffffffda RBX: 00007f45b9f45fa0 RCX: 00007f45b9d7f21c
[  901.466633][T14349] RDX: 000000000000000f RSI: 00007f45baae90b0 RDI: 0000000000000004
[  901.474628][T14349] RBP: 00007f45baae90a0 R08: 0000000000000000 R09: 0000000000000000
[  901.476167][ T5888] usb 1-1: Using ep0 maxpacket: 8
[  901.482604][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  901.482622][T14349] R13: 0000000000000000 R14: 00007f45b9f45fa0 R15: 00007fff2e88b548
[  901.482650][T14349]  </TASK>
[  901.579140][ T5888] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  901.586204][   T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  901.601526][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  901.652214][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  901.696096][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  901.742203][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  901.767122][   T25] usb 8-1: Using ep0 maxpacket: 16
[  901.774391][   T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  901.775942][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.785111][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  901.845516][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  901.895980][   T25] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  901.922834][   T25] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  902.063403][ T5888] usb 1-1: GET_CAPABILITIES returned 0
[  902.072510][ T5888] usbtmc 1-1:16.0: can't read capabilities
[  902.169172][   T25] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  902.178469][   T25] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  902.186688][   T25] usb 8-1: Manufacturer: syz
[  902.845589][T14361] 9pnet_fd: Insufficient options for proto=fd
[  902.871571][   T25] usb 8-1: config 0 descriptor??
[  902.919429][T14345] FAULT_INJECTION: forcing a failure.
[  902.919429][T14345] name failslab, interval 1, probability 0, space 0, times 0
[  902.996162][T14345] CPU: 0 UID: 0 PID: 14345 Comm: syz.0.2196 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  903.006655][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  903.016741][T14345] Call Trace:
[  903.020047][T14345]  <TASK>
[  903.023021][T14345]  dump_stack_lvl+0x241/0x360
[  903.027729][T14345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  903.032987][T14345]  ? __pfx__printk+0x10/0x10
[  903.037605][T14345]  ? fs_reclaim_acquire+0x93/0x130
[  903.042751][T14345]  ? __pfx___might_resched+0x10/0x10
[  903.048165][T14345]  should_fail_ex+0x3b0/0x4e0
[  903.052888][T14345]  should_failslab+0xac/0x100
[  903.057593][T14345]  __kmalloc_noprof+0xdd/0x4c0
[  903.062389][T14345]  ? kstrtouint_from_user+0x128/0x190
[  903.067791][T14345]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  903.073549][T14345]  tomoyo_realpath_from_path+0xcf/0x5e0
[  903.079156][T14345]  tomoyo_path_number_perm+0x236/0x860
[  903.084645][T14345]  ? __lock_acquire+0x1397/0x2100
[  903.089710][T14345]  ? tomoyo_path_number_perm+0x206/0x860
[  903.095371][T14345]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  903.101413][T14345]  ? __fget_files+0x2a/0x410
[  903.106213][T14345]  ? __fget_files+0x2a/0x410
[  903.110833][T14345]  security_file_ioctl+0xc6/0x2a0
[  903.115925][T14345]  __se_sys_ioctl+0x46/0x170
[  903.120546][T14345]  do_syscall_64+0xf3/0x230
[  903.125071][T14345]  ? clear_bhb_loop+0x35/0x90
[  903.129774][T14345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.135700][T14345] RIP: 0033:0x7f2f19b80809
[  903.140140][T14345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  903.159773][T14345] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  903.168218][T14345] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  903.176213][T14345] RDX: 0000000020000040 RSI: 0000000040045b0a RDI: 0000000000000004
[  903.184210][T14345] RBP: 00007f2f1aa120a0 R08: 0000000000000000 R09: 0000000000000000
[  903.192204][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  903.200196][T14345] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  903.208208][T14345]  </TASK>
[  903.259025][T14345] ERROR: Out of memory at tomoyo_realpath_from_path.
[  903.265586][   T29] audit: type=1326 audit(1732864644.628:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4c980809 code=0x7ffc0000
[  903.306667][T10633] usb 1-1: USB disconnect, device number 31
[  903.346785][T14371] FAULT_INJECTION: forcing a failure.
[  903.346785][T14371] name failslab, interval 1, probability 0, space 0, times 0
[  903.397818][   T29] audit: type=1326 audit(1732864644.708:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fed4c980809 code=0x7ffc0000
[  903.407263][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.8.2204 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  903.419478][   T29] audit: type=1326 audit(1732864644.708:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4c980809 code=0x7ffc0000
[  903.429805][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  903.429820][T14371] Call Trace:
[  903.429828][T14371]  <TASK>
[  903.429836][T14371]  dump_stack_lvl+0x241/0x360
[  903.429870][T14371]  ? __pfx_dump_stack_lvl+0x10/0x10
[  903.451916][   T29] audit: type=1326 audit(1732864644.718:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed4c97f170 code=0x7ffc0000
[  903.461402][T14371]  ? __pfx__printk+0x10/0x10
[  903.461434][T14371]  ? kmem_cache_alloc_noprof+0x48/0x380
[  903.461455][T14371]  ? __pfx___might_resched+0x10/0x10
[  903.461477][T14371]  ? audit_filter+0x10fb/0x1180
[  903.461499][T14371]  should_fail_ex+0x3b0/0x4e0
[  903.461527][T14371]  should_failslab+0xac/0x100
[  903.461546][T14371]  ? audit_log_start+0x15e/0xa30
[  903.461566][T14371]  kmem_cache_alloc_noprof+0x70/0x380
[  903.461589][T14371]  audit_log_start+0x15e/0xa30
[  903.461620][T14371]  ? __pfx_audit_log_start+0x10/0x10
[  903.461643][T14371]  ? migrate_enable+0x395/0x510
[  903.461664][T14371]  ? __pfx_migrate_enable+0x10/0x10
[  903.461684][T14371]  ? __pfx___cant_migrate+0x10/0x10
[  903.461715][T14371]  audit_seccomp+0x63/0x1f0
[  903.461741][T14371]  __seccomp_filter+0xb38/0x1fe0
[  903.461764][T14371]  ? __pfx_lock_release+0x10/0x10
[  903.461789][T14371]  ? vfs_write+0x730/0xd30
[  903.461818][T14371]  ? __pfx___seccomp_filter+0x10/0x10
[  903.461838][T14371]  ? __mutex_unlock_slowpath+0x21e/0x790
[  903.461860][T14371]  ? __pfx_vfs_write+0x10/0x10
[  903.461884][T14371]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  903.461903][T14371]  ? __fget_files+0x2a/0x410
[  903.465204][   T29] audit: type=1326 audit(1732864644.718:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed4c97f2bf code=0x7ffc0000
[  903.468106][T14371]  ? __fget_files+0x2a/0x410
[  903.468142][T14371]  ? __secure_computing+0x125/0x370
[  903.641229][T14371]  syscall_trace_enter+0xa8/0x150
[  903.646480][T14371]  do_syscall_64+0xcc/0x230
[  903.651015][T14371]  ? clear_bhb_loop+0x35/0x90
[  903.655727][T14371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.661648][T14371] RIP: 0033:0x7fed4c980809
[  903.666089][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  903.685728][T14371] RSP: 002b:00007fed4d6be058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0
[  903.694191][T14371] RAX: ffffffffffffffda RBX: 00007fed4cb45fa0 RCX: 00007fed4c980809
[  903.702286][T14371] RDX: 0000000000000063 RSI: 0000000000000004 RDI: 00007fed4d69d000
[  903.710290][T14371] RBP: 00007fed4d6be0a0 R08: 0000000000000000 R09: 0000000000000000
[  903.718294][T14371] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  903.726293][T14371] R13: 0000000000000000 R14: 00007fed4cb45fa0 R15: 00007fffc19162e8
[  903.734314][T14371]  </TASK>
[  903.737461][    C1] vkms_vblank_simulate: vblank timer overrun
[  903.796387][   T25] rc_core: IR keymap rc-hauppauge not found
[  903.802476][   T25] Registered IR keymap rc-empty
[  903.808107][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.829920][T14371] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  903.856140][T14371] audit: out of memory in audit_log_start
[  903.866948][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.876252][   T29] audit: type=1326 audit(1732864645.248:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fed4c97f21c code=0x7ffc0000
[  903.898019][   T29] audit: type=1326 audit(1732864645.248:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed4c97f2bf code=0x7ffc0000
[  903.917504][   T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  903.920038][   T29] audit: type=1326 audit(1732864645.248:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14370 comm="syz.8.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed4c97f46a code=0x7ffc0000
[  904.035581][   T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input13
[  904.036564][ T5919] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  904.216273][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.236480][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.263082][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.296049][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.316794][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.336209][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.345332][T14387] FAULT_INJECTION: forcing a failure.
[  904.345332][T14387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  904.360082][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.370548][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.6.2208 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  904.381002][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  904.391090][T14387] Call Trace:
[  904.394385][T14387]  <TASK>
[  904.397334][T14387]  dump_stack_lvl+0x241/0x360
[  904.402046][T14387]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.407268][T14387]  ? __pfx__printk+0x10/0x10
[  904.411886][T14387]  ? __pfx_lock_release+0x10/0x10
[  904.416939][T14387]  should_fail_ex+0x3b0/0x4e0
[  904.421650][T14387]  _copy_from_user+0x2f/0xc0
[  904.426269][T14387]  __sys_bpf+0x1a4/0x810
[  904.430532][T14387]  ? __pfx___sys_bpf+0x10/0x10
[  904.435322][T14387]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  904.441324][T14387]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  904.447673][T14387]  ? do_syscall_64+0x100/0x230
[  904.452464][T14387]  __x64_sys_bpf+0x7c/0x90
[  904.456905][T14387]  do_syscall_64+0xf3/0x230
[  904.461434][T14387]  ? clear_bhb_loop+0x35/0x90
[  904.466136][T14387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.472075][T14387] RIP: 0033:0x7f45b9d80809
[  904.476506][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.496137][T14387] RSP: 002b:00007f45baae9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  904.504576][T14387] RAX: ffffffffffffffda RBX: 00007f45b9f45fa0 RCX: 00007f45b9d80809
[  904.512568][T14387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  904.520561][T14387] RBP: 00007f45baae90a0 R08: 0000000000000000 R09: 0000000000000000
[  904.528556][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.536547][T14387] R13: 0000000000000001 R14: 00007f45b9f45fa0 R15: 00007fff2e88b548
[  904.544555][T14387]  </TASK>
[  904.547854][    C1] vkms_vblank_simulate: vblank timer overrun
[  904.586339][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.628932][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.657981][   T25] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  904.687769][   T25] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[  904.710467][   T25] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  904.735800][   T25] usb 8-1: USB disconnect, device number 4
[  904.767280][T14391] FAULT_INJECTION: forcing a failure.
[  904.767280][T14391] name failslab, interval 1, probability 0, space 0, times 0
[  904.809216][ T5919] usb 4-1: Using ep0 maxpacket: 16
[  904.829682][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  904.844933][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  904.878444][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.8.2209 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  904.888913][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  904.898990][T14391] Call Trace:
[  904.902283][T14391]  <TASK>
[  904.905230][T14391]  dump_stack_lvl+0x241/0x360
[  904.909938][T14391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.915155][T14391]  ? __pfx__printk+0x10/0x10
[  904.919774][T14391]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  904.925775][T14391]  ? __pfx___might_resched+0x10/0x10
[  904.931084][T14391]  should_fail_ex+0x3b0/0x4e0
[  904.935790][T14391]  should_failslab+0xac/0x100
[  904.940492][T14391]  kmem_cache_alloc_node_noprof+0x77/0x380
[  904.946319][T14391]  ? __alloc_skb+0x1c3/0x440
[  904.950926][T14391]  __alloc_skb+0x1c3/0x440
[  904.955360][T14391]  ? __pfx___alloc_skb+0x10/0x10
[  904.960318][T14391]  ? netlink_autobind+0xd6/0x2f0
[  904.965273][T14391]  ? netlink_autobind+0x2b0/0x2f0
[  904.970315][T14391]  netlink_sendmsg+0x638/0xcb0
[  904.975099][T14391]  ? mark_lock+0x9a/0x360
[  904.979460][T14391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.984776][T14391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.990077][T14391]  __sock_sendmsg+0x221/0x270
[  904.994788][T14391]  sock_write_iter+0x2d7/0x3f0
[  904.999581][T14391]  ? __pfx_sock_write_iter+0x10/0x10
[  905.004910][T14391]  do_iter_readv_writev+0x600/0x880
[  905.010139][T14391]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  905.015890][T14391]  ? bpf_lsm_file_permission+0x9/0x10
[  905.021276][T14391]  ? security_file_permission+0x74/0x280
[  905.026940][T14391]  ? rw_verify_area+0x1c3/0x6f0
[  905.031818][T14391]  vfs_writev+0x376/0xba0
[  905.036177][T14391]  ? __pfx_lock_acquire+0x10/0x10
[  905.041219][T14391]  ? __pfx_vfs_writev+0x10/0x10
[  905.046102][T14391]  ? __pfx_vfs_write+0x10/0x10
[  905.050890][T14391]  ? __fget_files+0x2a/0x410
[  905.055505][T14391]  ? __fget_files+0x395/0x410
[  905.060209][T14391]  ? __fget_files+0x2a/0x410
[  905.064838][T14391]  do_writev+0x1b6/0x360
[  905.069110][T14391]  ? __pfx_do_writev+0x10/0x10
[  905.073898][T14391]  ? do_syscall_64+0x100/0x230
[  905.078716][T14391]  ? do_syscall_64+0xb6/0x230
[  905.083417][T14391]  do_syscall_64+0xf3/0x230
[  905.088117][T14391]  ? clear_bhb_loop+0x35/0x90
[  905.092813][T14391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.098723][T14391] RIP: 0033:0x7fed4c980809
[  905.103160][T14391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  905.122811][T14391] RSP: 002b:00007fed4d6be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  905.131434][T14391] RAX: ffffffffffffffda RBX: 00007fed4cb45fa0 RCX: 00007fed4c980809
[  905.139444][T14391] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000c
[  905.147524][T14391] RBP: 00007fed4d6be0a0 R08: 0000000000000000 R09: 0000000000000000
[  905.155529][T14391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.163540][T14391] R13: 0000000000000000 R14: 00007fed4cb45fa0 R15: 00007fffc19162e8
[  905.171565][T14391]  </TASK>
[  905.287968][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  905.297325][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.351046][T14396] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2211'.
[  905.361015][ T5919] usb 4-1: Product: syz
[  905.367494][ T5919] usb 4-1: Manufacturer: syz
[  905.386122][ T5919] usb 4-1: SerialNumber: syz
[  905.764912][T14399] 9pnet_fd: Insufficient options for proto=fd
[  905.783331][ T5919] usb 4-1: 0:2 : does not exist
[  905.804552][ T5919] usb 4-1: USB disconnect, device number 21
[  905.959645][T14407] random: crng reseeded on system resumption
[  906.076897][T14404] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  906.167447][T13967] udevd[13967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  906.210147][   T25] libceph: connect (1)[c::]:6789 error -101
[  906.226479][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  906.295206][   T25] libceph: connect (1)[c::]:6789 error -101
[  906.317590][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  906.493948][   T25] libceph: connect (1)[c::]:6789 error -101
[  906.516087][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  906.600008][   T25] libceph: connect (1)[c::]:6789 error -101
[  906.617902][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  907.035797][ T5889] libceph: connect (1)[c::]:6789 error -101
[  907.043852][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  907.302899][T14407] FAULT_INJECTION: forcing a failure.
[  907.302899][T14407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  907.566368][ T5889] libceph: connect (1)[c::]:6789 error -101
[  907.572669][T14407] CPU: 1 UID: 0 PID: 14407 Comm: syz.0.2216 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  907.583126][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  907.593302][T14407] Call Trace:
[  907.596604][T14407]  <TASK>
[  907.599558][T14407]  dump_stack_lvl+0x241/0x360
[  907.604270][T14407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  907.609482][T14407]  ? __pfx__printk+0x10/0x10
[  907.614117][T14407]  ? __pfx_lock_release+0x10/0x10
[  907.619177][T14407]  should_fail_ex+0x3b0/0x4e0
[  907.623896][T14407]  _copy_from_user+0x2f/0xc0
[  907.628519][T14407]  copy_msghdr_from_user+0xae/0x680
[  907.633755][T14407]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  907.639593][T14407]  ? __fget_files+0x2a/0x410
[  907.644304][T14407]  ? __fget_files+0x2a/0x410
[  907.648929][T14407]  __sys_sendmsg+0x209/0x350
[  907.653619][T14407]  ? __pfx_lock_release+0x10/0x10
[  907.658684][T14407]  ? __pfx___sys_sendmsg+0x10/0x10
[  907.663848][T14407]  ? __pfx_vfs_write+0x10/0x10
[  907.668681][T14407]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  907.675039][T14407]  ? do_syscall_64+0x100/0x230
[  907.679848][T14407]  ? do_syscall_64+0xb6/0x230
[  907.684555][T14407]  do_syscall_64+0xf3/0x230
[  907.689094][T14407]  ? clear_bhb_loop+0x35/0x90
[  907.693804][T14407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.699731][T14407] RIP: 0033:0x7f2f19b80809
[  907.704174][T14407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  907.723813][T14407] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  907.732269][T14407] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  907.740273][T14407] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000f
[  907.748363][T14407] RBP: 00007f2f1aa120a0 R08: 0000000000000000 R09: 0000000000000000
[  907.756369][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  907.764372][T14407] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  907.772407][T14407]  </TASK>
[  907.806104][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  909.065400][T14416] ceph: No mds server is up or the cluster is laggy
[  909.252646][ T5889] libceph: connect (1)[c::]:6789 error -101
[  909.263000][ T5918] libceph: connect (1)[c::]:6789 error -101
[  909.291691][ T5918] libceph: mon0 (1)[c::]:6789 connect error
[  909.340324][T14411] ceph: No mds server is up or the cluster is laggy
[  909.392977][ T5918] libceph: connect (1)[c::]:6789 error -101
[  909.399378][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  909.417233][ T5918] libceph: mon0 (1)[c::]:6789 connect error
[  910.518092][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  910.518110][   T29] audit: type=1326 audit(1732864651.888:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  910.536646][T14462] 9pnet_fd: Insufficient options for proto=fd
[  910.606121][   T29] audit: type=1326 audit(1732864651.928:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  910.726090][   T29] audit: type=1326 audit(1732864651.928:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  910.767596][T14467] sd 0:0:1:0: device reset
[  910.778983][   T29] audit: type=1326 audit(1732864651.928:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  910.806006][T10417] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  910.861657][   T29] audit: type=1326 audit(1732864651.928:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  910.947832][   T29] audit: type=1326 audit(1732864651.928:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  911.036660][T10417] usb 7-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92
[  911.045760][T10417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.060206][   T29] audit: type=1326 audit(1732864652.058:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  911.104497][T10417] usb 7-1: Product: syz
[  911.119113][T10417] usb 7-1: Manufacturer: syz
[  911.123767][T10417] usb 7-1: SerialNumber: syz
[  911.162419][T10417] usb 7-1: config 0 descriptor??
[  911.171100][   T29] audit: type=1326 audit(1732864652.058:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14456 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x7ffc0000
[  911.202373][T10417] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029
[  911.509166][T14464] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2228'.
[  911.726278][T10417] gspca_sn9c20x: Write register 1000 failed -110
[  911.736391][T14485] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2234'.
[  911.745476][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2234'.
[  911.755169][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2234'.
[  912.004348][T10417] gspca_sn9c20x: Device initialization failed
[  912.056933][T10417] gspca_sn9c20x 7-1:0.0: probe with driver gspca_sn9c20x failed with error -110
[  912.933192][T14503] 9pnet_fd: Insufficient options for proto=fd
[  914.178047][T10417] usb 7-1: USB disconnect, device number 4
[  914.365591][T14521] Invalid source name
[  914.876964][T10613] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  915.069280][T10613] usb 1-1: Using ep0 maxpacket: 32
[  915.106330][T10613] usb 1-1: config 0 has an invalid interface number: 9 but max is 0
[  915.127100][T10613] usb 1-1: config 0 has no interface number 0
[  915.176651][T10613] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  915.185757][T10613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.214831][T10613] usb 1-1: Product: syz
[  915.235091][T10613] usb 1-1: Manufacturer: syz
[  915.245225][T10613] usb 1-1: SerialNumber: syz
[  915.276866][T10613] usb 1-1: config 0 descriptor??
[  915.298918][T10613] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  915.347001][T14531] No source specified
[  915.514478][T10613] gspca_topro: reg_w err -71
[  915.570265][T10613] gspca_topro: Sensor soi763a
[  915.632099][T10613] usb 1-1: USB disconnect, device number 32
[  915.664187][T14536] binder: 14534:14536 ioctl 541b 0 returned -22
[  916.459039][T14547] 9pnet_fd: Insufficient options for proto=fd
[  919.766047][T14573] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  919.776943][T14572] IPVS: stopping master sync thread 14573 ...
[  919.897028][T14577] Invalid source name
[  920.836692][T14572] sctp: [Deprecated]: syz.3.2259 (pid 14572) Use of struct sctp_assoc_value in delayed_ack socket option.
[  920.836692][T14572] Use struct sctp_sack_info instead
[  921.016905][T14588] siw: device registration error -23
[  922.791635][T14599] 9pnet_fd: Insufficient options for proto=fd
[  923.201686][T14609] xt_TCPMSS: Only works on TCP SYN packets
[  923.223117][T14609] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  923.249362][T14609] CIFS mount error: No usable UNC path provided in device string!
[  923.249362][T14609] 
[  923.259784][T14609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  924.153518][T14605] FAULT_INJECTION: forcing a failure.
[  924.153518][T14605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  924.183254][T14605] CPU: 1 UID: 0 PID: 14605 Comm: syz.3.2267 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  924.193816][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  924.203890][T14605] Call Trace:
[  924.207184][T14605]  <TASK>
[  924.210133][T14605]  dump_stack_lvl+0x241/0x360
[  924.214830][T14605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  924.220043][T14605]  ? __pfx__printk+0x10/0x10
[  924.224664][T14605]  ? __pfx_lock_release+0x10/0x10
[  924.229804][T14605]  should_fail_ex+0x3b0/0x4e0
[  924.234515][T14605]  _copy_from_user+0x2f/0xc0
[  924.239125][T14605]  __sys_bpf+0x1a4/0x810
[  924.243378][T14605]  ? __pfx___sys_bpf+0x10/0x10
[  924.248164][T14605]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  924.254167][T14605]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  924.260606][T14605]  ? do_syscall_64+0x100/0x230
[  924.265400][T14605]  __x64_sys_bpf+0x7c/0x90
[  924.269861][T14605]  do_syscall_64+0xf3/0x230
[  924.274372][T14605]  ? clear_bhb_loop+0x35/0x90
[  924.279074][T14605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.284980][T14605] RIP: 0033:0x7f20db980809
[  924.289415][T14605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  924.309052][T14605] RSP: 002b:00007f20dc7ba058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  924.317590][T14605] RAX: ffffffffffffffda RBX: 00007f20dbb45fa0 RCX: 00007f20db980809
[  924.325600][T14605] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 0000000000000000
[  924.333612][T14605] RBP: 00007f20dc7ba0a0 R08: 0000000000000000 R09: 0000000000000000
[  924.341616][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.349638][T14605] R13: 0000000000000000 R14: 00007f20dbb45fa0 R15: 00007ffe88148ba8
[  924.357657][T14605]  </TASK>
[  924.360728][    C1] vkms_vblank_simulate: vblank timer overrun
[  925.006936][T10613] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  925.196828][T10613] usb 7-1: Using ep0 maxpacket: 8
[  925.250447][T10613] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  925.396030][T10613] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  925.463416][T10613] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  925.485668][T10613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.502483][T10613] usb 7-1: config 0 descriptor??
[  925.694942][T14629] lo speed is unknown, defaulting to 1000
[  926.541634][T14629] lo speed is unknown, defaulting to 1000
[  927.346135][ T5919] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  927.356222][T14631] tmpfs: Bad value for 'mpol'
[  927.510993][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.523693][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  927.595072][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  927.595207][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  927.595249][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.638011][ T5919] usb 4-1: config 0 descriptor??
[  927.704366][T10613] usbhid 7-1:0.0: can't add hid device: -71
[  927.704673][T10613] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  927.711872][T10613] usb 7-1: USB disconnect, device number 5
[  928.670904][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.679000][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.687234][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.695405][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.703417][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.711423][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.720079][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.728589][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.736763][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.747427][ T5919] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  928.762959][ T5919] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  929.178445][ T5919] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  929.238498][ T5919] usb 4-1: USB disconnect, device number 22
[  929.521100][T14660] 9pnet_fd: Insufficient options for proto=fd
[  929.588217][T14662] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2279'.
[  929.718601][T14665] overlay: ./file0 is not a directory
[  929.749698][T14667] FAULT_INJECTION: forcing a failure.
[  929.749698][T14667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  929.816111][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.0.2281 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  929.826599][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  929.836690][T14667] Call Trace:
[  929.840012][T14667]  <TASK>
[  929.842966][T14667]  dump_stack_lvl+0x241/0x360
[  929.847676][T14667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  929.852909][T14667]  ? __pfx__printk+0x10/0x10
[  929.857675][T14667]  ? __pfx_lock_release+0x10/0x10
[  929.862743][T14667]  should_fail_ex+0x3b0/0x4e0
[  929.867502][T14667]  _copy_from_user+0x2f/0xc0
[  929.872129][T14667]  copy_msghdr_from_user+0xae/0x680
[  929.877372][T14667]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  929.883207][T14667]  ? __fget_files+0x2a/0x410
[  929.887833][T14667]  ? __fget_files+0x2a/0x410
[  929.892451][T14667]  __sys_sendmsg+0x209/0x350
[  929.897061][T14667]  ? __pfx_lock_release+0x10/0x10
[  929.902106][T14667]  ? __pfx___sys_sendmsg+0x10/0x10
[  929.907260][T14667]  ? __pfx_vfs_write+0x10/0x10
[  929.912077][T14667]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  929.918433][T14667]  ? do_syscall_64+0x100/0x230
[  929.923243][T14667]  ? do_syscall_64+0xb6/0x230
[  929.927946][T14667]  do_syscall_64+0xf3/0x230
[  929.932472][T14667]  ? clear_bhb_loop+0x35/0x90
[  929.937174][T14667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  929.943095][T14667] RIP: 0033:0x7f2f19b80809
[  929.947530][T14667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  929.967257][T14667] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  929.975735][T14667] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  929.983732][T14667] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  929.991729][T14667] RBP: 00007f2f1aa120a0 R08: 0000000000000000 R09: 0000000000000000
[  929.999726][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  930.007724][T14667] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  930.015736][T14667]  </TASK>
[  931.803981][ T5153] Bluetooth: hci6: command 0x0405 tx timeout
[  931.828600][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  931.846215][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  931.895990][ T5919] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  932.052534][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  932.056053][ T5918] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  932.084101][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.114607][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  932.158741][ T5919] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  932.176026][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.187198][ T5919] usb 1-1: config 0 descriptor??
[  932.256651][T14692] siw: device registration error -23
[  932.610447][T14677] input: syz1 as /devices/virtual/input/input14
[  932.652806][ T5918] usb 4-1: Using ep0 maxpacket: 32
[  932.657966][ T5919] hid-udraw 0003:20D6:CB17.0007: unknown main item tag 0x0
[  932.667943][ T5919] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0007/input/input15
[  932.676732][ T5918] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  932.691131][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.703326][ T5918] usb 4-1: config 0 descriptor??
[  932.718615][ T5918] gspca_main: sunplus-2.14.0 probing 041e:400b
[  932.763775][ T5919] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0007/input/input16
[  932.814187][ T5919] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0007/input/input17
[  932.864477][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.877852][ T5919] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0007/input/input18
[  932.892354][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.964255][T14703] 9pnet_fd: Insufficient options for proto=fd
[  932.978113][ T5919] hid-udraw 0003:20D6:CB17.0007: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0
[  933.111272][ T5919] usb 1-1: USB disconnect, device number 33
[  933.434242][ T5918] gspca_sunplus: reg_r err -71
[  933.440699][ T5918] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  933.459594][ T5918] usb 4-1: USB disconnect, device number 23
[  933.829788][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2293'.
[  933.846489][T14711] virtio-fs: tag <(null)> not found
[  933.916215][ T5153] Bluetooth: hci3: command 0x0406 tx timeout
[  934.272265][ T5888] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  934.450895][ T5888] usb 7-1: config index 0 descriptor too short (expected 30767, got 47)
[  934.488199][ T5888] usb 7-1: config 36 has too many interfaces: 185, using maximum allowed: 32
[  934.618575][ T5888] usb 7-1: config 36 has an invalid interface number: 243 but max is 184
[  934.753364][ T5888] usb 7-1: config 36 has 1 interface, different from the descriptor's value: 185
[  934.816454][ T5888] usb 7-1: config 36 has no interface number 0
[  934.822712][ T5888] usb 7-1: config 36 interface 243 has no altsetting 0
[  934.855258][ T5888] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba
[  934.864740][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.873215][ T5888] usb 7-1: Product: syz
[  934.877661][ T5888] usb 7-1: Manufacturer: syz
[  934.882284][ T5888] usb 7-1: SerialNumber: syz
[  934.926448][T14729] FAULT_INJECTION: forcing a failure.
[  934.926448][T14729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  934.939690][T14729] CPU: 0 UID: 0 PID: 14729 Comm: syz.0.2296 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  934.950153][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  934.960235][T14729] Call Trace:
[  934.963528][T14729]  <TASK>
[  934.966476][T14729]  dump_stack_lvl+0x241/0x360
[  934.971176][T14729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  934.976376][T14729]  ? __pfx__printk+0x10/0x10
[  934.980980][T14729]  ? __pfx_lock_release+0x10/0x10
[  934.986007][T14729]  should_fail_ex+0x3b0/0x4e0
[  934.990689][T14729]  _copy_from_user+0x2f/0xc0
[  934.995278][T14729]  copy_msghdr_from_user+0xae/0x680
[  935.000483][T14729]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  935.006286][T14729]  ? __fget_files+0x2a/0x410
[  935.010875][T14729]  ? __fget_files+0x2a/0x410
[  935.015468][T14729]  __sys_sendmsg+0x209/0x350
[  935.020060][T14729]  ? __pfx_lock_release+0x10/0x10
[  935.025082][T14729]  ? __pfx___sys_sendmsg+0x10/0x10
[  935.030199][T14729]  ? __pfx_vfs_write+0x10/0x10
[  935.034982][T14729]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  935.041305][T14729]  ? do_syscall_64+0x100/0x230
[  935.046067][T14729]  ? do_syscall_64+0xb6/0x230
[  935.050741][T14729]  do_syscall_64+0xf3/0x230
[  935.055241][T14729]  ? clear_bhb_loop+0x35/0x90
[  935.059914][T14729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.066671][T14729] RIP: 0033:0x7f2f19b80809
[  935.071080][T14729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  935.090690][T14729] RSP: 002b:00007f2f1aa12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  935.099109][T14729] RAX: ffffffffffffffda RBX: 00007f2f19d45fa0 RCX: 00007f2f19b80809
[  935.107080][T14729] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  935.115045][T14729] RBP: 00007f2f1aa120a0 R08: 0000000000000000 R09: 0000000000000000
[  935.123012][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  935.130976][T14729] R13: 0000000000000000 R14: 00007f2f19d45fa0 R15: 00007ffe4a8eb4b8
[  935.139040][T14729]  </TASK>
[  935.388364][T14719] mkiss: ax0: crc mode is auto.
[  935.863940][   T29] audit: type=1326 audit(1732864677.228:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.0.2300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f19b80809 code=0x0
[  935.913885][   T29] audit: type=1326 audit(1732864677.278:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.0.2300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f2f19bb28e5 code=0x0
[  937.377172][T14753] 9pnet_fd: Insufficient options for proto=fd
[  937.488309][T14686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  937.500665][T14686] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  937.511563][T14686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  937.527033][T14686] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  937.537749][T14686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  937.547851][T14686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  939.056101][T14245] Bluetooth: hci5: command 0x0406 tx timeout
[  939.100273][ T5888] qmi_wwan 7-1:36.243: skipping garbage
[  939.106305][ T5888] qmi_wwan 7-1:36.243: bogus CDC Union: master=0, slave=1
[  939.116201][ T5888] qmi_wwan 7-1:36.243: probe with driver qmi_wwan failed with error -22
[  939.128956][ T5888] usb 7-1: USB disconnect, device number 6
[  939.141784][T14754] lo speed is unknown, defaulting to 1000
[  939.169763][T14754] lo speed is unknown, defaulting to 1000
[  940.306839][ T5153] Bluetooth: hci7: command tx timeout
[  940.996112][T14797] hub 6-0:1.0: USB hub found
[  941.001872][T14797] hub 6-0:1.0: 1 port detected
[  941.531483][   T30] INFO: task syz.4.1944:13403 blocked for more than 143 seconds.
[  941.555939][   T30]       Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  941.566010][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  941.589911][T14754] chnl_net:caif_netlink_parms(): no params data found
[  941.595867][   T30] task:syz.4.1944      state:D stack:22384 pid:13403 tgid:13397 ppid:5848   flags:0x00004006
[  941.636015][   T30] Call Trace:
[  941.639360][   T30]  <TASK>
[  941.642315][   T30]  __schedule+0x17fb/0x4be0
[  941.663552][   T30]  ? __pfx___schedule+0x10/0x10
[  941.668612][   T30]  ? __pfx_lock_release+0x10/0x10
[  941.676259][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  941.685953][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  941.692315][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  941.715992][   T30]  ? schedule+0x90/0x320
[  941.722388][   T30]  schedule+0x14b/0x320
[  941.745999][   T30]  schedule_preempt_disabled+0x13/0x30
[  941.795958][   T30]  __mutex_lock+0x7e7/0xee0
[  941.800541][   T30]  ? __mutex_lock+0x5ef/0xee0
[  941.805631][   T30]  ? odev_release+0x4b/0x70
[  942.031091][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  942.036567][   T30]  ? __pfx_call_rcu+0x10/0x10
[  942.065729][   T30]  odev_release+0x4b/0x70
[  942.077869][   T30]  ? __pfx_odev_release+0x10/0x10
[  942.082952][   T30]  __fput+0x23c/0xa50
[  942.087697][   T30]  task_work_run+0x24f/0x310
[  942.092351][   T30]  ? __pfx_task_work_run+0x10/0x10
[  942.106476][   T30]  ? switch_task_namespaces+0xe4/0x110
[  942.112011][   T30]  do_exit+0xa2f/0x28e0
[  942.125402][   T30]  ? __pfx_do_exit+0x10/0x10
[  942.130389][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  942.135796][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  942.146116][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  942.152598][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  942.165940][   T30]  do_group_exit+0x207/0x2c0
[  942.170587][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  942.175821][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  942.193816][   T30]  get_signal+0x16b2/0x1750
[  942.201208][   T30]  ? __pfx_get_signal+0x10/0x10
[  942.214360][   T30]  arch_do_signal_or_restart+0x96/0x860
[  942.220672][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  942.227312][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  942.233336][   T30]  ? syscall_exit_to_user_mode+0xa3/0x340
[  942.239620][   T30]  syscall_exit_to_user_mode+0xce/0x340
[  942.246242][   T30]  do_syscall_64+0x100/0x230
[  942.250866][   T30]  ? clear_bhb_loop+0x35/0x90
[  942.255565][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.262222][   T30] RIP: 0033:0x7f5d13b80809
[  942.266956][   T30] RSP: 002b:00007f5d148d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  942.275406][   T30] RAX: fffffffffffffe00 RBX: 00007f5d13d46168 RCX: 00007f5d13b80809
[  942.283929][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d13d46168
[  942.300083][   T30] RBP: 00007f5d13d46160 R08: 0000000000000000 R09: 0000000000000000
[  942.317005][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d13d4616c
[  942.325019][   T30] R13: 0000000000000000 R14: 00007ffe1bad0720 R15: 00007ffe1bad0808
[  942.342752][   T30]  </TASK>
[  942.350854][   T30] 
[  942.350854][   T30] Showing all locks held in the system:
[  942.426001][   T30] 1 lock held by khungtaskd/30:
[  942.430909][   T30]  #0: ffffffff8e93c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  942.450778][ T5153] Bluetooth: hci7: command tx timeout
[  942.576045][   T30] 3 locks held by kworker/u8:2/35:
[  942.581284][   T30]  #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  942.634055][   T30]  #1: ffffffff8e93c560 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590
[  942.662632][   T30]  #2: ffff888055ba0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd9/0x480
[  942.696021][   T30] 3 locks held by kworker/1:1/47:
[  942.701207][   T30] 2 locks held by getty/5592:
[  942.725953][   T30]  #0: ffff8880352710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  942.735808][   T30]  #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  942.790068][   T30] 2 locks held by kworker/1:5/5889:
[  942.795333][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  942.816363][   T30]  #1: ffffc900041c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  942.836602][   T30] 1 lock held by syz.0.344/7327:
[  942.841596][   T30]  #0: ffffffff8fcd5c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  942.850857][   T30] 1 lock held by syz.4.1944/13403:
[  942.865939][   T30]  #0: ffffffff8fc265c8 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x4b/0x70
[  942.875355][   T30] 1 lock held by syz.5.1956/13441:
[  942.901061][   T30] 3 locks held by syz.5.1956/13442:
[  942.906461][   T30] 1 lock held by syz.1.2021/13701:
[  942.911592][   T30]  #0: ffffffff8fc265c8 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x59/0xa0
[  942.932122][   T30] 1 lock held by syz-executor/14754:
[  942.942007][   T30]  #0: ffffffff8e941af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  942.958953][   T30] 1 lock held by syz.6.2309/14796:
[  942.964520][   T30]  #0: ffffffff8e941af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830
[  942.982044][   T30] 1 lock held by syz.3.2313/14801:
[  942.987572][   T30]  #0: ffffffff8fcd5c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  943.001124][   T30] 
[  943.003493][   T30] =============================================
[  943.003493][   T30] 
[  943.153203][   T30] NMI backtrace for cpu 1
[  943.157582][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  943.167743][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  943.177800][   T30] Call Trace:
[  943.181079][   T30]  <TASK>
[  943.184004][   T30]  dump_stack_lvl+0x241/0x360
[  943.188683][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  943.193876][   T30]  ? __pfx__printk+0x10/0x10
[  943.198482][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  943.203432][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  943.208886][   T30]  ? _printk+0xd5/0x120
[  943.213050][   T30]  ? __pfx__printk+0x10/0x10
[  943.217645][   T30]  ? __wake_up_klogd+0xcc/0x110
[  943.222495][   T30]  ? __pfx__printk+0x10/0x10
[  943.227094][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  943.232113][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  943.238114][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  943.244107][   T30]  watchdog+0xff6/0x1040
[  943.248353][   T30]  ? watchdog+0x1ea/0x1040
[  943.252775][   T30]  ? __pfx_watchdog+0x10/0x10
[  943.257458][   T30]  kthread+0x2f0/0x390
[  943.261528][   T30]  ? __pfx_watchdog+0x10/0x10
[  943.266200][   T30]  ? __pfx_kthread+0x10/0x10
[  943.270791][   T30]  ret_from_fork+0x4b/0x80
[  943.275206][   T30]  ? __pfx_kthread+0x10/0x10
[  943.279797][   T30]  ret_from_fork_asm+0x1a/0x30
[  943.284571][   T30]  </TASK>
[  943.291257][   T30] Sending NMI from CPU 1 to CPUs 0:
[  943.297119][    C0] NMI backtrace for cpu 0
[  943.297133][    C0] CPU: 0 UID: 0 PID: 14802 Comm: syz.7.2311 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  943.297152][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  943.297162][    C0] RIP: 0010:__lock_acquire+0xe8d/0x2100
[  943.297184][    C0] Code: 00 eb cf 49 89 fd 48 c7 c7 00 8f 80 8e 48 89 ee e8 b8 6d 7f 03 4c 89 ef eb 8a 89 d8 25 ff 1f 00 00 c1 eb 03 81 e3 00 60 00 00 <09> c3 4c 89 f0 48 c1 e8 20 29 c3 89 c1 c1 c1 04 31 d9 44 01 f0 41
[  943.297197][    C0] RSP: 0018:ffffc9001b52f5b0 EFLAGS: 00000006
[  943.297213][    C0] RAX: 0000000000000021 RBX: 0000000000004000 RCX: ffffffff9a3f5903
[  943.297225][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000
[  943.297236][    C0] RBP: ffff888027e3e4e0 R08: ffffffff942ee887 R09: 1ffffffff285dd10
[  943.297249][    C0] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: ffff888027e3da00
[  943.297261][    C0] R13: ffff888027e3da00 R14: ffffffffffffffff R15: 0000000000000001
[  943.297273][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  943.297287][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  943.297298][    C0] CR2: 0000001b33d09ff8 CR3: 000000007d218000 CR4: 00000000003526f0
[  943.297313][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  943.297323][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  943.297334][    C0] Call Trace:
[  943.297340][    C0]  <NMI>
[  943.297346][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  943.297366][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  943.297383][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  943.297409][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  943.297432][    C0]  ? nmi_handle+0x14f/0x5a0
[  943.297449][    C0]  ? nmi_handle+0x2a/0x5a0
[  943.297467][    C0]  ? __lock_acquire+0xe8d/0x2100
[  943.297483][    C0]  ? default_do_nmi+0x63/0x160
[  943.297503][    C0]  ? exc_nmi+0x123/0x1f0
[  943.297521][    C0]  ? end_repeat_nmi+0xf/0x53
[  943.297544][    C0]  ? __lock_acquire+0xe8d/0x2100
[  943.297561][    C0]  ? __lock_acquire+0xe8d/0x2100
[  943.297578][    C0]  ? __lock_acquire+0xe8d/0x2100
[  943.297595][    C0]  </NMI>
[  943.297600][    C0]  <TASK>
[  943.297611][    C0]  lock_acquire+0x1ed/0x550
[  943.297624][    C0]  ? mod_memcg_page_state+0x97/0x800
[  943.297648][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  943.297672][    C0]  mod_memcg_page_state+0xb8/0x800
[  943.297690][    C0]  ? mod_memcg_page_state+0x97/0x800
[  943.297709][    C0]  ? mod_memcg_page_state+0x97/0x800
[  943.297729][    C0]  ? __pfx_mod_memcg_page_state+0x10/0x10
[  943.297753][    C0]  vfree+0x17c/0x2e0
[  943.297773][    C0]  kcov_close+0x28/0x50
[  943.297787][    C0]  ? __pfx_kcov_close+0x10/0x10
[  943.297802][    C0]  __fput+0x23c/0xa50
[  943.297826][    C0]  task_work_run+0x24f/0x310
[  943.297847][    C0]  ? __pfx_task_work_run+0x10/0x10
[  943.297880][    C0]  ? do_exit+0xa2a/0x28e0
[  943.297897][    C0]  ? do_exit+0xa2a/0x28e0
[  943.297914][    C0]  do_exit+0xa2f/0x28e0
[  943.297933][    C0]  ? __pfx_do_exit+0x10/0x10
[  943.297949][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  943.297973][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  943.297991][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  943.298007][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  943.298031][    C0]  do_group_exit+0x207/0x2c0
[  943.298047][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  943.298069][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  943.298093][    C0]  get_signal+0x16b2/0x1750
[  943.298119][    C0]  ? __pfx_get_signal+0x10/0x10
[  943.298142][    C0]  arch_do_signal_or_restart+0x96/0x860
[  943.298165][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  943.298186][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  943.298208][    C0]  ? syscall_exit_to_user_mode+0xa3/0x340
[  943.298232][    C0]  syscall_exit_to_user_mode+0xce/0x340
[  943.298256][    C0]  do_syscall_64+0x100/0x230
[  943.298272][    C0]  ? clear_bhb_loop+0x35/0x90
[  943.298291][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.298308][    C0] RIP: 0033:0x7fc841180809
[  943.298321][    C0] Code: Unable to access opcode bytes at 0x7fc8411807df.
[  943.298329][    C0] RSP: 002b:00007fc841f87058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  943.298346][    C0] RAX: fffffffffffffffc RBX: 00007fc841346160 RCX: 00007fc841180809
[  943.298359][    C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  943.298369][    C0] RBP: 00007fc8411f393e R08: 0000000000000000 R09: 0000000000000000
[  943.298379][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  943.298389][    C0] R13: 0000000000000001 R14: 00007fc841346160 R15: 00007ffdf8175138
[  943.298406][    C0]  </TASK>
[  943.790100][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  943.797007][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  943.807272][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  943.817353][   T30] Call Trace:
[  943.820658][   T30]  <TASK>
[  943.823601][   T30]  dump_stack_lvl+0x241/0x360
[  943.828311][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  943.833527][   T30]  ? __pfx__printk+0x10/0x10
[  943.838140][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  943.844147][   T30]  ? vscnprintf+0x5d/0x90
[  943.848502][   T30]  panic+0x349/0x880
[  943.852423][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  943.858596][   T30]  ? __pfx_panic+0x10/0x10
[  943.863043][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  943.868439][   T30]  ? __irq_work_queue_local+0x137/0x410
[  943.874005][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  943.879392][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  943.885569][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  943.891750][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  943.897927][   T30]  watchdog+0x1035/0x1040
[  943.902281][   T30]  ? watchdog+0x1ea/0x1040
[  943.906721][   T30]  ? __pfx_watchdog+0x10/0x10
[  943.911415][   T30]  kthread+0x2f0/0x390
[  943.915500][   T30]  ? __pfx_watchdog+0x10/0x10
[  943.920193][   T30]  ? __pfx_kthread+0x10/0x10
[  943.924803][   T30]  ret_from_fork+0x4b/0x80
[  943.929230][   T30]  ? __pfx_kthread+0x10/0x10
[  943.933835][   T30]  ret_from_fork_asm+0x1a/0x30
[  943.938730][   T30]  </TASK>
[  943.941910][   T30] Kernel Offset: disabled
[  943.946313][   T30] Rebooting in 86400 seconds..