last executing test programs:

12m22.417093601s ago: executing program 32 (id=191):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x300000, 0x300000, 0x8}) (fail_nth: 7)

12m10.508676099s ago: executing program 33 (id=232):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r2, 0x0, 0x0)
recvfrom$packet(r4, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x11, 0x18, 0x0, 0x1, 0xdd, 0x6, @local}, 0x14)
r5 = socket(0x2d, 0x2, 0x0)
bind$xdp(r5, &(0x7f0000000000)={0x2d, 0x3, 0x0, 0xc}, 0x10)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11m13.366247317s ago: executing program 34 (id=362):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
chdir(0x0)
inotify_init()
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x181000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x3000c11, 0x0)
chown(0x0, 0x0, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x1c0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000082f5d008a5043530c21e000000010902ae0101000000000904"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

11m10.431062485s ago: executing program 35 (id=363):
r0 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0xf58, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r0, 0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x25000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30fb00f6", @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf25440000000c009900010000004c00000008000d00ff00000008000c0064000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c)
listen(r1, 0x50)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000080)={'?\x00', 0x0, 0x6, 0x3, 0x6000, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", '\a\x00', '\x00', "0001ffff", ["00dfff001100", "00fffffffe09ddffe2000800", "0012e200fee7c12d9ed206da"]})

11m7.073083899s ago: executing program 36 (id=366):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x42001, 0x0) (async)
r1 = epoll_create1(0x80000)
epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x9000000) (async)
unshare(0x40400)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x100}, &(0x7f0000002040)=0x8) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)

9m2.85787052s ago: executing program 37 (id=483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0x8, 0x4, 0x0, 0x400000008000], 0x1, 0x3c4210})
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087d1e38310000000000010902240001000080050904008101030003000921021047012228000905810340"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401e7f0000"], 0x0, 0x0, 0x0, 0x0}, 0x0)

8m31.896710287s ago: executing program 8 (id=679):
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2c0905)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x22800, 0x1)
mkdirat(r0, &(0x7f00000001c0)='./bus/file0\x00', 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0xf0, 0x18, 0x1, 0x70bd27, 0x100, {{@in=@loopback, @in6=@mcast1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in=@loopback, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x806, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x2400c804}, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000000)=ANY=[], 0x119)
mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x7, 0x12, r2, 0x0)
pread64(r1, &(0x7f0000000500)=""/196, 0xc4, 0xa0000000000000)

8m31.826110839s ago: executing program 8 (id=680):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x22203, 0x0)
ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0xce, 0x0, 0x1000}, {0x11a, 0x0, 0x47ffffffffffffd}]}) (async)
sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000340)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001580)="e3", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48009)

8m31.771972339s ago: executing program 8 (id=681):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x3, 0x8})
syz_usb_connect(0x7, 0xad, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x24, 0x32, 0x4b, 0x0, 0x1608, 0x1a01, 0x64c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0xa, 0xff, 0xb0, 0x1, "", [{{0x9, 0x4, 0xdf, 0x1, 0x3, 0x46, 0x43, 0xb2, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "eb8e"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x5, 0xa8}, {0x6, 0x24, 0x1a, 0x100, 0x18}, [@acm={0x4, 0x24, 0x2, 0xc}, @obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7, 0x97}, @obex={0x5, 0x24, 0x15, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x4, 0x1df, 0xb0}, {0x6, 0x24, 0x1a, 0x6, 0x9963ed8010d6fd6}}], [{{0x9, 0x5, 0x6, 0x3, 0x20, 0xc0, 0x1, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x9}]}}, {{0x9, 0x5, 0x84, 0x10, 0x400, 0xd, 0x50, 0x2}}, {{0x9, 0x5, 0xf, 0x14, 0x20, 0x7, 0xfe, 0x2}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x0, 0x4, 0x10, 0x5e}, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x15555555555556e3, [{0x49, 0x0}, {0xaf, &(0x7f00000023c0)=@string={0xaf, 0x3, "c5c9b2b1d0a696b468672bb1bfef3dabc1b42a39f87cb226cf8aa9efe948a9b252bcf901ff4ca4cc8e6a3158e5c90d842799057476e83b5bf4a7ae30e8599cf3a1ace36b3aaffd99068be2bc3530d381be0b145b725bd0c69fd097a34e18f9446511e0e9bb67545e47556d47a1d5216d9518b6505157f81dc753722112b29ab2e5814ba9c32eea8b9fac3070b4023b5c76a5e7de3f44e1c003482f90e26bb2be0279c4d8e1643f847a0a5558fa"}}, {0xdc, &(0x7f00000024c0)=@string={0xdc, 0x3, "82805ec0b009e49e78a6f67b8c0975ee01ae8b560a190de5a7ac4c79f899fc2530a2db8bd5dfca6760febec0adeaaa142d02cf28ff44a7aeba663e9bafcf997fbaf48d2f3577697dd60633a2246f45ffd93379e4fe9204f184378b1222fc086335087265d17bd1c9be1ed849739b31716896864726e13f334660451d55a05a52bdb555b03557e8a8c6f5f20f703675eaec58beebe9f4060518c0cf36060da486447e1037fe20f6efaab3666050bd2c24761ad314f83bd106521687ec75e9296e1aade1e82b2123516c5561cc218e41b8bba506b2c7bf4b7810d9"}}]})

8m31.192892733s ago: executing program 8 (id=684):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket(0x15, 0x5, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1})
socket$inet6(0x10, 0x5, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@gid}]})
r5 = fsopen(&(0x7f00000001c0)='iso9660\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)
ioctl(r4, 0x8b22, &(0x7f0000000040))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x181402, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x300801, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246)

8m30.939856783s ago: executing program 8 (id=685):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030c2000000007000000000000020009001000000053fc89e19e000000030006003c0000000200100000000000000000000000000002000100000000000000060300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)

8m30.442000036s ago: executing program 8 (id=687):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc)
splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x1})
sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000)

8m30.320042798s ago: executing program 38 (id=687):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc)
splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x1})
sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000)

5m10.758409069s ago: executing program 9 (id=1772):
memfd_create(0x0, 0x3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0xfffffe74, 0x100)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x40047452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r3, 0xd22800e99f4927f3}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x4020)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000023, 0x0, 0x500}]})

5m10.318122555s ago: executing program 9 (id=1776):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)

5m10.144128307s ago: executing program 9 (id=1778):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (rerun: 32)
pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa)

5m9.943603271s ago: executing program 9 (id=1783):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10001, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x0, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_read(r2, 0x80, 0x54, &(0x7f0000000140)=""/84)
syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x13, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="5024280000002804b7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r4)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
fcntl$getflags(r5, 0x1)
ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f00000000c0)=0x18)

5m8.086463878s ago: executing program 9 (id=1793):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1, 0x0, 0x2}, 0xfe}, 0x18)
name_to_handle_at(r2, &(0x7f0000000300)='./mnt\x00', &(0x7f00000000c0)=@reiserfs_4={0x10, 0x4, {0x0, 0x8, 0x5, 0x2}}, &(0x7f0000000100), 0x1400)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0)

5m6.937761312s ago: executing program 9 (id=1799):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e0000001100810001010000000202002d1f00"/34, 0x2e}]}, 0x4044804)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f00fc"], 0x4)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

5m6.800335468s ago: executing program 39 (id=1799):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e0000001100810001010000000202002d1f00"/34, 0x2e}]}, 0x4044804)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f00fc"], 0x4)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

4m36.383317519s ago: executing program 2 (id=1975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x10004091)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffbbbbbbbbbbbb86dd"], 0x2b9)

4m36.034155814s ago: executing program 2 (id=1977):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)}, 0x0)

4m35.999889026s ago: executing program 2 (id=1978):
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x22f6, 0x40)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0))
clock_getres(0x3f810b8481b537e9, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x5bb, 0x1, 0x0, 0xdd9f83, 0x0, 0x3, 0x9, 0x7, 0x5, 0x722, 0x6, 0x7, 0x75e, 0x4, 0x14, {0x400000, 0x6fd8e84b}, 0xff, 0xed}})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)

4m35.865738441s ago: executing program 2 (id=1979):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10001, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x0, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_read(r2, 0x80, 0x54, &(0x7f0000000140)=""/84)
syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x13, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="5024280000002804b7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r4)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x1)
ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f00000000c0)=0x18)

4m34.196542961s ago: executing program 2 (id=1991):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(r0, &(0x7f00000002c0)=""/231, 0xe7)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = fanotify_init(0xf00, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000002f80)={0x2020}, 0x2020)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4m33.448010877s ago: executing program 2 (id=1993):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
dup(r0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0})

4m33.262088639s ago: executing program 40 (id=1993):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
dup(r0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0})

4m8.869913268s ago: executing program 1 (id=2084):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6261746164760068000380080003800400018021000400168e61c980c444b4043713eac521765bf9faa584a4a40fa48aa7f1c5fd000000300003802c00018008000100fb1300000800010040000000080001000200000004000300040003000600020025000000080002"], 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x48001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000280)=""/59, 0x5e)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0xc004}, 0x28000040)

4m8.374187722s ago: executing program 1 (id=2087):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{0x0, 0x2c}], 0x1}, 0x0)

4m8.195520908s ago: executing program 1 (id=2089):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
poll(&(0x7f0000000040)=[{r2, 0x8006}], 0x1, 0xfffffff9)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001540)="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", 0x631}], 0x1}}], 0x1, 0xc084)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="9665c1f4b90b53210e4c0f78ac7e", 0xe}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6a}}], 0x30}, 0x4c081)

4m8.08895734s ago: executing program 1 (id=2090):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10001, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x0, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_read(r2, 0x80, 0x54, &(0x7f0000000140)=""/84)
syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x13, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="5024280000002804b7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x1)
ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f00000000c0)=0x18)

4m6.439265757s ago: executing program 1 (id=2094):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)=ANY=[])
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x1, 0x4, 0xc, 'syz1\x00', 0x9})
r3 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8)
read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0xb6, <r4=>0x0})
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000000c0)={0x0, r4})

4m5.080557217s ago: executing program 1 (id=2097):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="0c000000010001", 0x7)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

4m4.719925375s ago: executing program 41 (id=2097):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="0c000000010001", 0x7)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

3m5.197528026s ago: executing program 5 (id=2362):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x2c}}, 0x4000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r4 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x2c}}, 0x90)

3m4.900310663s ago: executing program 5 (id=2363):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080003400000000b080003400000000008000140000000010800014000000017080001400000000b080001400000001208000240000080090800024000000012e5636b243b4b6aea31ed5fa33586ac35373fd3bbfe9ef71df0826aa4ab03bf5e7cdf15ad8987697b60cc60f9f4deeeeb7cb0c07a186118acf2be4d7ca7dce9831507377ce41f95f4d899547f2a580943b86e6f74fdb08822f90ef7b4c3"], 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
poll(&(0x7f0000000040)=[{r2, 0x8006}], 0x1, 0xfffffff9)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001540)="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", 0x631}], 0x1}}], 0x1, 0xc084)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="9665c1f4b90b53210e4c0f78ac7e", 0xe}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6a}}], 0x30}, 0x4c081)

3m4.841396206s ago: executing program 5 (id=2365):
fanotify_init(0x6ef6d01700eba346, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
lsetxattr$security_ima(0x0, &(0x7f0000000140), 0x0, 0x3a, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x12a}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc810)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x30, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x25, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0x82}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x840a5d9063aa014f, 0x4, 0x0, 0x10, 0xff, 0x2}, 0x12, &(0x7f0000000200)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x81, 0x3}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc6e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', 0x40480, 0x5a)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)

3m4.07635409s ago: executing program 5 (id=2368):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10001, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x0, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_read(r2, 0x80, 0x54, &(0x7f0000000140)=""/84)
syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x1)
ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f00000000c0)=0x18)

3m2.339682718s ago: executing program 5 (id=2381):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x1d, 0x6, 0x10fe)
sendmmsg$inet(r1, 0x0, 0x0, 0x40408d4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x1, 0xdfe}, {0x5, 0x7}]}})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3m1.383760822s ago: executing program 5 (id=2388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000200000000000500010006000000"], 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0)
r6 = dup2(r5, r5)
connect$inet(r6, &(0x7f0000000740)={0x2, 0x4e21, @remote}, 0x10)
setrlimit(0x40000000000008, 0x0)
r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x68100)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20114820}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000106031000000000000000000a0000080500010007000009c1df0feddaa731e07d6b00d95539ce2605fda8eaa99977f2f814c18d284ca38309238ea744eb41de0d7b70744dde837772f7f432feaf2cf0a0d84523a2bbada9c2015c572d8bef3c4bb3c3295d45187ebdd25b7440c9097cc460875c15b01363"], 0x1c}}, 0x8810)
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x1, [0x3, 0x7, 0xa5, 0x7ff, 0x8], [0x8db, 0x0, 0x7, 0xb24, 0x401, 0x0, 0x5, 0xf7b, 0x2, 0x5, 0xffffffff, 0x401, 0x2, 0x10, 0x4, 0x1, 0x4, 0x8, 0x1, 0x5, 0x3, 0x7, 0xf2ae, 0x5, 0x2, 0x2, 0xff, 0x9, 0xa04, 0x2, 0x0, 0xffff, 0x10000, 0x4, 0x8, 0x80000000, 0x3, 0x6, 0x2, 0xfffffffffffffe01, 0x3, 0x1, 0x8, 0x6, 0xc6, 0x1, 0xf, 0x5, 0xe, 0x7, 0x9, 0xffffffffffffffff, 0xc446, 0x8000000000000000, 0x3, 0x87, 0x8, 0xc4bf, 0x1, 0x4, 0x3, 0x4, 0x10f2, 0xd6c, 0x5f, 0x81, 0x6, 0xf, 0x2, 0x3ff, 0x200000000000000, 0x9, 0x3, 0x100000001, 0x6, 0x4, 0xed01, 0xe, 0x4, 0x0, 0x7f, 0xffffc00000000000, 0x8, 0x8000000000000001, 0x2a, 0xf, 0x8, 0x0, 0xfffffffffffffff9, 0x1, 0x4, 0x8, 0x40, 0x2, 0x4, 0x8, 0x2, 0x1, 0x4c6, 0x5, 0x7, 0x0, 0x4, 0x0, 0xff00000000, 0x1, 0x5, 0x7, 0x1, 0x4, 0xa0a7, 0x125c, 0x80000001, 0xc5e, 0x4, 0xffffffffffffffff, 0x6, 0x1, 0x80000000, 0x100, 0x7fffffffffffffff]})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xc9)

3m0.786351917s ago: executing program 42 (id=2388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000200000000000500010006000000"], 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0)
r6 = dup2(r5, r5)
connect$inet(r6, &(0x7f0000000740)={0x2, 0x4e21, @remote}, 0x10)
setrlimit(0x40000000000008, 0x0)
r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x68100)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20114820}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000106031000000000000000000a0000080500010007000009c1df0feddaa731e07d6b00d95539ce2605fda8eaa99977f2f814c18d284ca38309238ea744eb41de0d7b70744dde837772f7f432feaf2cf0a0d84523a2bbada9c2015c572d8bef3c4bb3c3295d45187ebdd25b7440c9097cc460875c15b01363"], 0x1c}}, 0x8810)
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x1, [0x3, 0x7, 0xa5, 0x7ff, 0x8], [0x8db, 0x0, 0x7, 0xb24, 0x401, 0x0, 0x5, 0xf7b, 0x2, 0x5, 0xffffffff, 0x401, 0x2, 0x10, 0x4, 0x1, 0x4, 0x8, 0x1, 0x5, 0x3, 0x7, 0xf2ae, 0x5, 0x2, 0x2, 0xff, 0x9, 0xa04, 0x2, 0x0, 0xffff, 0x10000, 0x4, 0x8, 0x80000000, 0x3, 0x6, 0x2, 0xfffffffffffffe01, 0x3, 0x1, 0x8, 0x6, 0xc6, 0x1, 0xf, 0x5, 0xe, 0x7, 0x9, 0xffffffffffffffff, 0xc446, 0x8000000000000000, 0x3, 0x87, 0x8, 0xc4bf, 0x1, 0x4, 0x3, 0x4, 0x10f2, 0xd6c, 0x5f, 0x81, 0x6, 0xf, 0x2, 0x3ff, 0x200000000000000, 0x9, 0x3, 0x100000001, 0x6, 0x4, 0xed01, 0xe, 0x4, 0x0, 0x7f, 0xffffc00000000000, 0x8, 0x8000000000000001, 0x2a, 0xf, 0x8, 0x0, 0xfffffffffffffff9, 0x1, 0x4, 0x8, 0x40, 0x2, 0x4, 0x8, 0x2, 0x1, 0x4c6, 0x5, 0x7, 0x0, 0x4, 0x0, 0xff00000000, 0x1, 0x5, 0x7, 0x1, 0x4, 0xa0a7, 0x125c, 0x80000001, 0xc5e, 0x4, 0xffffffffffffffff, 0x6, 0x1, 0x80000000, 0x100, 0x7fffffffffffffff]})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xc9)

1m32.363046332s ago: executing program 0 (id=2814):
syz_open_dev$midi(&(0x7f0000000840), 0x401, 0x20000)
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="04030b08c80000000000000002fb8001a4cf527899968a9d87ceb6e0dc26d934d9148961e0462bb47df9ff2c302a8477e05f124c1301ecc84f2a25f97e3540ac7ada4746db913b4c53441ce19d8f51de04f4aa60e39f7a9cba237153ad3cac75acbf7659d47e922b3f5799f411ade815b20e62e05364c657110a4df2cbdcdae88e6c7cdf5ba840171994260be9c437c925a88d25b53a88457919ecd7de61aa7d6f65dc62f056054c657ec40e388c0066aa4b7349056dbb35b0414f319dcc06ae3fdb70b157dfc489c1f18e01b71db0c5b555feb0f601"], 0xe)
rmdir(0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000880)="638ecc904f1eb231a4fb247ebc5171e33e06f5692541b91d1b080775f4fcc2685d747dd7430b55b54300068bcf8aef5f5be704c8fe43b5ff9dbdc478874e6ee7d2a714f5ee3a35eef132c55c505c27a0a959e4d4a3e4b6274ca43c74eb3fba5bd454d4209e4bf4362850259d82282ba0474a7ca26d7a11ad90196459fbbcba51fdddedd7a2760682914c11581727d9fa895391", 0x93}, {&(0x7f0000001c80)="cb0dc1f4802acd6e93a4a7c3931ba486f31556e687b9fa75914856299b4aa0c841df1128780fd827a73e4eb0ca0438a4bf1a34333715d2419ad82ddf16f2eec99d0226a40185324d40e33ba071b8f35b29d9303f172ca08533fb29eaf2ed6145342fa657a92e506f2167d9dfd43065b3fcb986e86a344f997af9329a42c689583c9778da37d86dd18556dd08232277c82096e9c79d5782c1a41067d74ad2f3b086d0cb253bac501fe664d9d0a7e17e4c5dbbd2f464471d3fa0289353a9b8c541b3ce847cd04d2b073c03c7838ebee92c46976e7758b96dea6bea8558ccb5", 0xde}, {&(0x7f0000000a40)="0838151975c8a721aad688f6f77db5c1ec3ecc65b89e189d58e04ebcf2cb4cd7ea210be8cc7b897a873635c93dd08937a08c541fc0816762a5528fd84629066747791c3d98c348685c2530122ab61da79c87524092a3fe3290038579f0adc5ca7454bc78b12fbe19793ad85c8558ca2c8e592cf06704f65b796f3c061c0367a42f47eb75c86ef0b6d0c7309931c8d1f78b0e6ae16a1fdf71", 0x98}, {&(0x7f0000000b00)="a589856463f3bac4b93843d01c68b93f02bbc700946268db0f77fa0f46e592f3ec96cf86b8655979f99ec1e011623ae5fabc6c9af98c580d9183136e94740ebf94ba9cac037437dd3819a9f6d303b660e3f8d7777357c9a8fb8c9f9ceb7b0abcecb4ffa24961a076ed4cb62f53c95f033010c0d566db093fa0e8ffb8077d91da50f43b32b45eaa0344ed060cff7000f544ab2d013ac91ce7673929a32a24e11b0a6c2287b18444c8c90aff3bc236f926b077921e3d90979fbac0c0efe9b0a6a2d37fa4c8ca37b5ecac3c4e5e4f2f6ef05d1b66b3475bc0661490d808b9a2cccbe96f6423d8ed82d956bed6979b033c0357aba2f77dfb15cea4703dff390df9637a3af909b109b48679b991c61dbf894e8fdd2e447e9726f2da8c7adda84948d031f0856403ba076a6041c53bf3828603abe0f1f960e8a571a69a23f4db3a4c2cd25c02a1c9a0e4023be2f334d56e53e2eff96d9965895da21287b324ef059ef9276c50140eec320181685d24f3c9832edf647d1f3833293ece6f0e5b40baa0a9d624c146a5310144ebf107e61ce04d39bbce4199ee87520e4b622da73492c3a9ae09ede0cfbf45ec34934166a6f1a76fdaf498681f1ffb9d8236f56b26488fc6dc2f282b2775a5b0158367e299bf389d9a503565b409031ba44a54ecb6307e2be328683d9e6967a933901a5390f0d89509b9f99cc46442a299d825383ced93144a81b20a3ef718536768b8a55c5e3e0b8d3057a1a6395bf5191db8c4572045023f3ca2f9b9d2549fa3094b9357e322a45689bbb1f25ce6f8d2643821b463be8d1faf479628a7d41a39158adac5a36be65e9a2ef92cd70ac66c5ac1640d59f8f96c755dd18c1f4e16db5558d08da944a0b5ee6ce57677c741797b78a40a85bc6fc4afea358592ad23dc8f501fbd7b9f9b6642bebad3fe3f93c8ff5f9c5a2a9fe1f3587b440d25658a28f55800abebf2a6a28681603899684078d4302ce1b0ae9424d996e2cabf96e8ea39664834854cc0d69c058f0630b44699143b6f5f2b9a8892d583eac35f0d4808aa56535cb726c3d61029a306ba51cee35c334478710be3022c41aa20082d0bac9913e86f3614438cdc9ff09ad596d2142757a1560301128b31f822d85b250731677b08f4c511a21ea5f0ea547a3968307b12043623ae0b14baad949f74363db6a8fcd324f1661638c2a6c4923e76798b7714c3e7bf06e52057a3df02e15e847ffe21df2496a887d69abadb69b31129a355330019d57976913a526f9f7ee228833eb76b269089674fb6a84b1e2a0453bdff832b5a09a771f768e3875ab7007b75bb33340aae0d8fda61f2e0cd6ac87712dc19480649e51a13f39a904d6b9ae9a9d6f823f564df8df9a1f9cf15f4fe6458f894a703d52e22e497e3aac10775a037a1fb584fad645657d36e7171166d58ab35528be62061d5cdc3f1f9624ca7866224c2d93520e1e6d79b9460ca1ba6b042a2043931fffcf073b408c7654086ab567c0af1618ea19b62c197ad2cdc77c9528554323973f0f5cb87e38e54bb236cf84acfa3f40fb9b7c50e5671f9e116d015dbe138c0b706b197ebcce4bcaa92dde1431d712226cb941677f84a185ed677a138c378006a99e8c3799373aebd53b533eee98ae43c7acf004cec44cc8676b58dbb5f6ccfe51da917974dd0f2f3453d6847da48cec5f0050c2562105f657d6dd63720418e02a7790538327f001c81a4cc6aaca6f14bea9a087fd8110714ac1464227a03a8b1d3a43ce4d77e62c317daf3a8185122a3709465a352b6a8009b3d9f963d5583ef8e58aed2177b97d7a1964e0336fe76d9c6035b4e242a93ca8d205a9250a38ae4b405bf6e7d5f20600490e9a9eb38bf7dc0d38d78440ef71a861fc092eb6a1cfb173470e5ab5b0c39258074a9d9b1e95f37c705f52aea49a58a07c82b8f471400f2bbe306b9767a27ecc36928c4516fd5fa928e37db67ba527da60538e57374243857c50e9ad1a53d6607df1c40b83e120cb88db464e8ede726833145f31fae92478e8aaee08bb802c32c5d898e835d35fb566bbd5cdf0f686cd0b57d0bc208d5ab105db00565f1bde9fd6cf71645d837897e14bf139b32124525f9006bc57c6bc17bd55aef778fea3d30521c8ea1933119235ae52ff6a86617d4da77d4735bca1467fd482aac6da97c10f9d3cb4704907f69b9a0b3e5e6604eb472684c3c475bf3daf6f5de71952eb437f653b546086971aea6b93e93541ec55c897e51ee0ded9fa56a702205166cbbbec0bceb3b1781516e08df571d717a92d0b5c634bfd14a35048af6ee8d36f12cec2b8b05c567f5e6ca567867839221d72f656d62f5516cc56e4796fe41a741fed3220f29470116bf9b185dbcc6ae1d06b98d334f7a2c2f07d83f7143b8a411531ece00e9e72e674a0d9de020d96ccfd2d8083fc24f3b63e7934138a21889a1464d13d2ee2ee8d369c18856fa1dc4c8358b362f7016b0711f4df7a832c25986c77813e38a4f02f63ac2c7c19ebbfe059fcaebb1885d87b1da31baa8b522e9eea4801cb4bfa2394bcf218d60598a12eb1652471a155a4aac0a84a1ec20b30168041b1e1e0f3e8732f6fb5acf07e6864242185971565ef8dc0eae927e38a0566bf8b805a2cf74927e820448bc26cb06b1a95a55fe126e2aa6d90041205beef41310e1d4ecc5ab99984e9053ae208158c411867f7c2f90a91cfaa638d4d887e496b2c1d851a62172113f52e68ba5f55b2e61bf660d7a4642184a3081c3b8c900d39d7b6267e438da63f60ccd6a5b8c5e2e181c4a5e47fde821232e1356579b0059923b01cd91322536f575ca1da05d6b06474b86f9456352212a2fd02228a05b2acf14a876e8ae28bc2aad025c9020a97f09f8be060338e24985c571a84c57bdc132fd547a35e593830846ee1788c48a56be5afd2877c878e45b2dd192c54b47fce882495e5fed92d42a1e43b58853c6478dfd1b8ae48ba949adcc55494696d0c3729434e713e99012ff6893c274e1076d40d32fd9162a3ea6e6804d7369937482c2a32e204616ffaa0f93a1f405424e43c7834920280d078c724486321fb6b00cfb08d934c337fa1bcaa16076672ca5aaf33b402940b40f11b6aac30990bb6216ec227b514991c89487520fd8e12a4393a452429627b5830f688003bbf7927e8a1b44a85023aef3cfeb7aa77adae9bcd888f8a964c2e29eeaa43d0bc85e479e69da6a5bb040477912bc428c8ce9d6bd61e35d48f7f114dd2f95691e45153431fd9ed8f9a7ee32a02d5722a69182b8268f9a3a3c16ca70497a164a7f912f1266d1a3d22cec565f9be1a5e383cbb08a137d871eb2b9740f5fb12222c67677e1d98dbfa1e1a6dae681e40c758df405449c6f8d5d46bd459a9b6a43ba1149e45ecfacee5c88ef7c4f750ec873e1a6fd7b7f8bd40abd437b90c2092eb07fc1a707aa535ee6a1585eb03ffe87cc138d19a5f8f22555792f93bb1308ca5d1f9817be989e62f8de0f9dd2339216fe67e9d5966d0c7141208dc07437a294c8726bc7d63d5475783f0742c04dd1a0bb2f243d4f578f119ac1d7e0cdcaed76244e7f01bf806e9a6049508635f4de3d8ac8b0bdba7500294078d5f68360c3423e064555eaaa5add46c42c30cb77d33c62d37ad273634a1ae93640a5d753c45b6b78fd2c8211b9cb9c07ce48efa63fefe0671fef9a18ad1d2acb7150a981c6107506ab6c0bb4e3922f959a689dcc895f247e57972161e3867ea7e4dfbd3006a97d1dda4cc306ce6ce2d87ba2d81ea3b132d1990e6fb48d06eb84ffb7f434d13b9906a6f24477680e1e681d310d64ed28726607146d4e38507a7086e408faeccadd165a24e9696a865a3d8d1923ce13715e1f94791f2bd87192d2f439dc7919136372d07d4a182fafa06266a4c01e473536bd78ad161904d8be996814494cc01626ee4edaed5b5297eacf850fdae8958fd69bb6aca76973aada8a8a059547ab880093586c20d16222a592c167be18e7165216e870997e4ead1fddebe2b3dadf54401ecb0c50fe7f8fc23959ef98a63f3e02e552e7e85b99b17400cab1e7da4a7cfaa8c6678e04f31878da0cb9c9bb3d099d02f081296d9841da2786ae45cd62f37d6a938bc91effbb7f25951680ea87294f0e9f927353a008a9f8a2eceb5234ed31c401ab7440585f33d8db5f53d5dab4be65b73106c2ff86c0d8dc2d90bf870feee9dde8edfb0ed932214b6c66ec066257d21c9fc059f6c8cd178228b58e11ce82a703f348cc1a35fa814e44afea418df40a6f4cfcd5ed3a6ce3ddf767ca4cf7b4f7657f586978ea7917f8185348d48c2ab407f4d3e080a7111a634023e2b3f2af6eb2744545cb6c88ea285c38285daaefea68efd92c43a4423352359f61acb088bedebeadedf3c7ec261fab30857a9b83645c1a63e00f19519a1927b9861c638d82e7126757f6fafbc586ffa5c518d544ab6681dd8e2d34904ed090198dfe7b10e358da2b834ade0607575225190ac4c7f83c07ef1339e8f1bfca6d694445f2a14d3b22a42c1e3d10774192922a42145550b39bc4225d822ba42884e019e64fbb6ad1c2e6ea542f1c5a407afa1a1eab8d4680fe4ad0828c811600089d6c95837f311fdfa68ec6d8a148b95b465840449f1cb672a7d5d306bafa3942788025db949bfcb4c364e30ba28a15eb5b54f2bf5ebc0bd2ce90baf35b00fb00134012b2a385d8f15d3e67dae49f34860f3653111143e7d2a01db75e3e7d2404d6513bc01cc067b30809dce306a9d71253e696e26d016bf5d7b2c6b261543b69f8f09ba18ad23f4a75b678fae9d6a9f3104f15f2fe432f8f7bdb01d18585ca1c46504e19699d1786523fb0d3c651b68fa800a35192f853f1597a306abcf1e90b2c056e4ae292058d066ea3fb224baf6313a88348d8f434247e3ede933dda29286cdda63dbd1bb8419fb83ad65c375df2401e238452abecfb2f7e2b2e56a30986475c0e9c1621d2491d4a8c01b2172c81f22596e4921fc4923347976fd14435a5ad7a467108a0c82ab2003506de95598d185235e4414bcc0376c2eba3e37fb7a6aae263e1a83ba5f9cedd6aec14a76d61ec19a26a84bf25994a540734f267c7e9142104d6b91437309eba53b1e08cc2d3ee17df30cb8b0c6388f54349c7e4a03edca0de4bdad281c35e4f9c3fc9596d8eb1cd7dc65591c7122af65e8a154c17ccd6c341c561b0b874d447488abcade20245a3fb3e03d28cf1b396e3f206188755f055b12c0f71b600df4c411d90db9d1990a7a1f2ae3fac686d1588f4953b7368e9300c10cbc0069c7c7539da58c4daceee85b3ebe8249c95cfcdeccb242dc877803e993367aa86187e7a5d3136aef62ea05120d5945228c15d56337ec17c8496c538183731ce4269bf5284a8e713d6c8cff08f9bc2bc3c8d4d108360ab071939a7fea2f14f120db2edcaf108fe24f9b1c1c98ef127293aefca5069ec0315af0ace829d229ca39fcb27102da87dabc20d425465a4f36f87df0571c00dab1acf3b5414f373cbc83fd0c86c01e6d3dcd0fc93cf603c07e6a54f541943f840c55a80cfc37f214b2e83255091d1422949d326022ad45309498358928ba58608e0b1b854816417fe6a8595fb8f79ea9cde2bdb3c87381e2d7a668eb2a5fea372cc44960a2c482bc5ed89221fe61071ca3e2f83b8ff230a54fb4f81787d46be6023e1201f3c9e1c8800abefd580a1b21cdbbd7178238f2c2bba9bdf92afe41a231fb922340e9c036799e02e2f015255ca70df983f4981f02c66f3c0a89de6c282103b43a5762d4db6", 0x1000}], 0x4, &(0x7f0000001b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x48}}], 0x2, 0x20004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x401, 0x280000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x47c200, 0x92)
fcntl$notify(r4, 0x402, 0x22)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x40000000)
close(r5)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f00000000c0)={{0x75, 0x47}, 'port0\x00', 0x0, 0x50, 0x2, 0xffff, 0x6, 0xffff8000, 0x0, 0x0, 0x3, 0x7})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x400009}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={r9, 0x4}, 0x8)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYRES8=r4, @ANYRES16=r10, @ANYBLOB="00022bbd7000fcdbdf25010000000000000001410000001800fbffffff130000000b7564703a73797a3100000000", @ANYRESHEX=r1], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4004040)
ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000006c0)={0x5, &(0x7f0000000240)=""/161, &(0x7f0000000640)=[{0x1ff, 0x35, 0x7, &(0x7f0000000300)=""/53}, {0x8, 0x48, 0x3, &(0x7f0000000340)=""/72}, {0xffffffff, 0xef, 0x6, &(0x7f00000003c0)=""/239}, {0x5, 0xd1, 0x7fff, &(0x7f00000004c0)=""/209}, {0xe, 0x0, 0x4, &(0x7f0000000600)}]})
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)
syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="041c0500c8000a0004e170c7ce7a57c6c3aaf033e84707"], 0x8)

1m32.228126788s ago: executing program 0 (id=2815):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000022700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000006780)={{0x12, 0x1, 0x250, 0xda, 0xd6, 0xf5, 0x20, 0xb95, 0x2791, 0xd3ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x40, 0x3, "", [{{0x9, 0x4, 0xe5, 0x3, 0x0, 0x2, 0x6, 0x0, 0x4}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x6827}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x400a}}, {0x67, &(0x7f00000000c0)=@string={0x67, 0x3, "6bde3031688a38d933eeecc95e51e32297a031f060b7a17ce9cb55b4754c1d87946383e660d23540b1ce72f0431f087aa86309658c0019d76f34a481db2b6b2e947670edb366982121d544a131f5b470a2e24b55630d081b880390928e0593c300ef1f4506"}}, {0xa1, &(0x7f0000000340)=@string={0xa1, 0x3, "0e3fd6c033f1aae4d6bdea7fc307378c03dea7f801c47b02241f6b7a19aeda8661678797ac943c57e112008dc9b57733236c24ea3549a2f2f1cd0883f1111970bfdd5abbb2ae3df816a0287b4eaca37788508aa3a4bc320bfd1884e65c97ee4943ed8150c1ae3fdad87bfc321a7854b9c91c1092a697325d920e6f4e6430b52f4b6f2cf1bd465eb6c060053679859188437ffbad0c6c778c0b3d734a96abbf"}}, {0x5, &(0x7f0000000180)=@string={0x5, 0x3, "302dc6"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x25, &(0x7f0000000400)=ANY=[@ANYBLOB="2503bdda00002f5717d8c818d4c21fb277296f0f4b26922b410073ec000000000000000000052c6b435579ede313bd1f94200a1f2befb742eab18a47a97c732684592aac46cc1ca3f32f2746c0ba20be559e27c604929b3c858f89be20b36a8f8f03f09ab5ad11f44dcec43f232de1984349fa29e5a39bfcf3a7194c959e624a2c4989b237a44131ba9576433cd014aef9d157a2e11862811df1021e0cb37bb74af621ba0e980810004f7d1f4ccafba52be54accb8270d81ed29e50367e3930ff0dba1ecbb7cdc80290aa95577d977"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}]})

1m32.044066781s ago: executing program 0 (id=2816):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd)

1m30.564684166s ago: executing program 0 (id=2824):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000400)='#/.+/\'!{%\\\x00\\\x05h\xebw\x04\xbb\xae\x8c\xb8\xfez\x1cX0\xe6Q\x15\x05\xa0\xc6\xc8\xdf\x8cs)-82\xe2\\\a\x8e\x0f\x16\xb7\xc2\xad\xb8\xcd\xb4\x92\xbb\xa3\x02v\xd8\xf6\x83\x12\xf5\xda\xc8\xd2\x99<\xafJ3!\x00\x00\x00\x00\x00\xc4\xf2\xaby\xb0~&l\xf1\x1a\x81P\xe6\x94k\xdf\xaa\xb5\x04v\xb6a\x89\x9f\x93\x92\xfcW\xfb$M\xf3iL\xb3\x9f\x1a\xef\x05\xea\xca\xca\x8fmm\xad\xc0B\xe0\x90\x1a\x8d\xea\xa4\xa9dS\x899\xbb\xd5\xfa8\xd1\xea\xb0Z$\xd0e\xb0\xf1\xe7\x86\x1cbE;', 0xffde)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='exofs\x00', 0x1002401, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
write$dsp(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x918, 0x1, 0xc, 0x4}, {0x7, 0x43, 0x3, 0x7}, {0x4, 0x7, 0x7, 0x8}]})

1m30.427942132s ago: executing program 0 (id=2826):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840)
r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0)
close(r7)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x28, r9, 0x5eae78d9c54e9d1f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r13=>0x0})
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040050}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', <r14=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c805}, 0x8088)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r15=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x3c, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
getuid()

1m25.184132925s ago: executing program 0 (id=2855):
r0 = socket$kcm(0x2, 0x3, 0x2)
close(r0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xac141410}, 0x10, 0x0, 0x0, 0x0, 0xa00}, 0x0)

1m24.915916074s ago: executing program 43 (id=2855):
r0 = socket$kcm(0x2, 0x3, 0x2)
close(r0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xac141410}, 0x10, 0x0, 0x0, 0x0, 0xa00}, 0x0)

4.773822229s ago: executing program 6 (id=3230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400010004000000000000000a0000000100000014000100ff010000000000000000000000000001140002"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'wlan0\x00', @random="0100b5201000"})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0], 0xac}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sigaltstack(&(0x7f0000000200)={&(0x7f0000000100)=""/243, 0x80000003, 0xf3}, &(0x7f0000000400)={&(0x7f0000000300)=""/225, 0x0, 0xe1})

4.578430637s ago: executing program 6 (id=3232):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080003400000000b080003400000000008000140000000010800014000000017080001400000000b080001400000001208000240000080090800024000000012e5636b243b4b6aea31ed5fa33586ac35373fd3bbfe9ef71df0826aa4ab03bf5e7cdf15ad8987697b60cc60f9f4deeeeb7cb0c07a186118acf2be4d7ca7dce9831507377ce41f95f4d899547f2a580943b86e6f74fdb08822f90ef7b4c3baf9d698319e472734350fff2ddd42d4789f30167e80e0636857e09eddfc"], 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
poll(&(0x7f0000000040)=[{r2, 0x8006}], 0x1, 0xfffffff9)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001540)="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", 0x319}], 0x1}}], 0x1, 0xc084)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="9665c1f4b90b53210e4c0f78ac7e", 0xe}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6a}}], 0x30}, 0x4c081)

4.577170325s ago: executing program 7 (id=3233):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x10844, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e20, 0x3, 'lc\x00', 0x2, 0x660f537e, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0)
write(r2, &(0x7f0000000780)='2', 0x1)

4.447592427s ago: executing program 6 (id=3234):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
ppoll(&(0x7f0000000180)=[{r1, 0x540}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

4.380575559s ago: executing program 7 (id=3235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)

4.142779836s ago: executing program 7 (id=3237):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
getresuid(&(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000380))
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78010000210010002dbd7000ffdbdf2564010100000000000000000000000000fe8000000000000000000000000000bb4e2400004e2200000200800001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05292a20"], 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r12 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r13=>0x0, &(0x7f0000000040)=<r14=>0x0, &(0x7f0000000140)=<r15=>0x0)
syz_io_uring_submit(r13, r14, r15, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x101})
syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x210000, 0x0, 0x334e8b, 0x200000a00000})
r16 = dup(r5)
ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)

3.489825082s ago: executing program 6 (id=3239):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/211)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)

3.488379219s ago: executing program 7 (id=3240):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000440)=0x2, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0xf5fd7bebf2cd487, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xb65ac99a8a32ab37}, 0x0)
syz_usb_disconnect(r0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0xa, 0x4, "6cc31a52"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.213637962s ago: executing program 6 (id=3243):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_READ_BER(r2, 0x80046f46, &(0x7f00000003c0))
r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
write$input_event(r3, &(0x7f0000000140)={{r4, r5/1000+60000}, 0x4, 0x3, 0x7}, 0x18)
ftruncate(r3, 0x8008976)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

3.000548409s ago: executing program 4 (id=3245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)

2.984462342s ago: executing program 4 (id=3246):
r0 = userfaultfd(0x801)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3487029373"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg$unix(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000700)=""/277, 0x115}, {&(0x7f0000003100)=""/4080, 0xff0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001cc0)=""/208, 0xd0}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/135, 0x87}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f0000003000)=""/175, 0xaf}, {0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/123, 0x7b}], 0x9}}], 0x2, 0x0, 0x0)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
syz_clone3(&(0x7f0000000440)={0x321105100, &(0x7f0000000000), 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.705938502s ago: executing program 6 (id=3249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x2, 0x2f8, 0x9a, &(0x7f00000001c0)="9a7bd6f884f8a7f2c88040d720f9725f06a9bacac09048ebacd45fb5bd05fb9b42ac82ef2ea354e8bcb8860a05fa7fada4c15c6009771c503b091ddc4da98a0b51226ede42e0df9d6e5e123973bde530122dd14b21991cc97dac7b6e7f036f"}, {0x1, 0x610, 0x6, &(0x7f0000000240)="61a9400f5c6cc4c4e5bd525085d28d18c664cddd83ad20059149348e339b0edee2543b247072befdcd8fccb84e9fc0220daf9e45a54f3196177733527cdcfcf0a068c8e899ebb90edca4b89ea2314fe669c1ac2c8c44c1e7a1d48590d68483b236bfe4ab59741d2254e1570943d1e1f8b63673f2597c71a7e142a92a51939baafe337ed7be31b1dcaeec3840bd9065ee2c277f48fb5a5983ee601f56f4e9e5d3084842298f8ccf64ce7a1c96a2adb3dea23caf1b3922723d0cacd27c0c11ab1d0862"}, {0x2, 0x560, 0xa, &(0x7f0000000340)="f305f0acf881fcca714b728ed8b893db85ade9eae4bdd64c37b13084d743e7d70a07c11ab7256e5679bd52e10239aca74f0dfcd9aaa77cf4961530878406bce86ddf17187d01d827c42018755aee1a3d248164b2c0e6f658480985442d245bdf67118cee8c6dc380f2df18561d55df4c0a458bf7f1b811ce42296aae543069769d3c5187b032e3d7c395ed74fa67c8933b226ea379ec0bd2dd389d6068f6204658f1c608816637ea11bc678b"}, {0x3, 0x188, 0x1, &(0x7f0000000400)="804be2bf194460a9d8a6051b7adef1dae82715299dc8237b0ffb6064278478b73f91a1213ea685bad268d4d84febd52603"}, {0x2, 0x3a0, 0xfffffa05, &(0x7f0000000480)="337b585a4aa29d45a2c751786548e546e1220811638056172e575ca56de28cb09ecc7888517d4aa2ed81c5d282aa00111b2ad8720fe6fed5ef54d1fc2a7dff9038ac1c1f368103b361a9c94021909a511430e1fd651ee5f96b609260a6929f8364b75a42f80113546d0d395cad87a937412c6d4d"}, {0x0, 0x670, 0x8, &(0x7f0000000540)="4cce20925dd51ec0169212b6ac98be4c7418a029131bc001132d2c6118a61bc37e7d54076b6c396e47d974827c6138c77f34c7b7c90a074c284f426063406a99c9806a81b2eb782d70ec4b8801dd4b63e682a9d418812229ce91d7d6ca54683cf79c34e9b85bfd3bf1c76005ea00f9d8f5bdb630582ea607fb796a13818a9124a263eb192c5bda26a370282a8efbc9f1b928606bbc16ebb091c96c210f4dd3bfcbd4a70078fdfb49535e607180eb313d475a2aba631a35045ceddf9c9cfef5f5e70cbdeda7e583bb040737cff60c"}, {0x1, 0x300, 0xc000, &(0x7f0000000640)="a270d51db1c17f184a7d446469ebbb16e8df1a3ce9ea5f75ce5314d2f6ffb0ff7e4e50d10634a4922ca3d0694a416535c3e45a247cfefff2cdc516bf259bdcc1428876ae1c5152aec5cb6602bad7c65e8caf995dc92641860e6aeea68bff26a7"}, {0x0, 0x2d8, 0x7, &(0x7f00000006c0)="3222aa97c394eb613fa997e68987d9898d7e46bd463fc18c7c8af262ccfa456dce5547ca796d8618c4f45c381f52ccf3826010e0ce7297e434e99abd98052de9bdfa17f0c35ab55ddb2508638a6c8b37d36ff7d4a33f5c96fe12c6"}, {0x2, 0x4e8, 0x0, &(0x7f0000000740)="07f63bbe9a111faa1590891df838fb7c0fb04ff9779d570fc73532def6b0afbe746736ea9ef111bc7d50e3913c89b377f9dfffbe1fe96e87ca7206f02b35e019dcbeb860d11407b8339e395d65ded66b244751fe14e3112a89728e354fa6f589758f5720cffa83ed8255fa655dd8dda8c833ef55b0103accbebea7a65ca887b1e50e6c5e05861f8f21a085b1adb237347ae3bbf297ddcd2c94f46678b5"}, {0x2, 0x738, 0x40, &(0x7f0000000800)="e7595a818e8fb71ec3e5a160304dd39bd1e4d9c0870bcdd1ba9cb404ba0195d897977c9f305c39dd1dfc469782877a817176452d8b4b1253ec8b49d79bbaf2a1a9bcc07fc0cca39e913189adc7546a5319b387766c2e534b7b8708f013b457c74f024437901972a30ffd9a42739bda89713c2310588267d8da4d703128a3c7517d78943b932306f5d58746b2be89f3906fffc86d4f448a95529ac7f0f5a72c3fc21b4ed43eb952be7308233d46e621a0fed26ff6493956dec57f82b3d3ff101f798671f43d770d8044423e6d92e215d39a6e2e94c4581e289ffb6253d0c7f141357700bbc19a97"}, {0x0, 0x718, 0xff, &(0x7f0000000900)="45377fe95642d1c77e1874c05600ed05c42e9e553a9d6afb3757fb9e73a829e2d130aae009cc89b00763eb2499fa5e94731e51320e57c906a3ab4601bb7f66b7a5fc5bd19365095779ba2c1e3d155dd885d623329bdbc615d755e17838e16a493c09b22f7099d69f58030e1fe4c19fcc4b6ac866729e487a8a5123952639e7e778212bd70ba93ce7583c8b8c9de42699ff3661e6f145658544a11f786b90d90f924e5ade6e2b1a12a380deb9eebce83004f93ab9279d48d5868a06c6d65553a46ccd76b5cfce24571cb4e43d306834044decfae915532db66c51c410cc9dca690330c6"}, {0x3, 0x660, 0x9, &(0x7f0000000a00)="0c71f9c1173e3a1894de7572ccd128e84e12f8aed855e86b21077cfd03d05951e768356a3266d1892dd93291eedbf50f0de90ab4ba9ae44520d08966893a84f83a88132e5074cc305aaf0b75b713b781f8aaf7495e7f67f9dc11cdced1fc5eebdaecc85f923cecd8cbc1d1f2553a37d0a5d6aaf1c99a5f54573899210e534c358ce6fc2cbeb68717d55a08f407efd469dfb70cfd142a54254b48b4d27d8e3c20fe93c121275159cf5ff1f86fa0b5c7daf8eb31d2a1435f9c324c8635afa539e83be2cd16d9998b35853f19c4"}, {0x1, 0x618, 0x1ff, &(0x7f0000000b00)="62c35ede1019168d453106fc2637bc010cbfd601867f0bbf9c667ac3634a8f8bd1cc4ea969502591c4c4a8ef16735ee40c5a329bb22d11f79386348452ebbc3af24f85fbe75e327234494925e32f87c040413eec33fc3bd0d960fa95e24b02d18d512ec6d6ff2b3f2cbb56a5dfb8e33669573212e0d116dfda33b904af43064d467e91cff6b901f83763439598314c6b38cd33b5e779607189750d1d83acca9e7c06429abbca6fa44f5d0e7ea58946f1ea15f6f87c8ea27b93755b8372a6ed6efe5f69"}, {0x1, 0x4c0, 0xfffffffa, &(0x7f0000000c00)="9266920176cca28c708d62828e6191453f0dcae917cff2726e8eca6599bf247d292f8b0cd00807fec012ac605c4bc300b3c0a356442c52d6068b7abdb6451728e707fffe8984a76754c4545704a5e81b1f6356df3f6ec7a8cc6a73fe1c712cd4a653d8b030277ae569307566cb422c096377e67ff05d7a2c97d4217e3b000f68a8bcd7c0f82bd03c9d4c7aec0eb501e4823ecb678499dadd"}, {0x2, 0xa0, 0xae0, &(0x7f0000000cc0)="dd18774651bc1a2bbe233e83d9922e1e144b4ee2"}, {0xaa0042b6aec6ab84, 0x340, 0x6, &(0x7f0000000d00)="d94e1fce659d142f4f3c921f1a1d1de392d75aff3af7b53eb97972155084c57e2a3f33a32f4e2ff0d02c6f0e31808fbcf2ef60a6b5337e1ca481b5e161398e4753a2c1e58b3c174bb58cf67e407ecad65fde794959245381b7cc7c0fb2a19309988dd2c2e502feba"}]})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
syz_open_dev$sndpcmc(0x0, 0x8000000000000001, 0x1)
gettid()
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x80015b12, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45000)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000100), 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x84880)
bind$tipc(r7, &(0x7f0000000f40)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)

2.579129414s ago: executing program 4 (id=3250):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x0, 0x5, 0xf7, '\x00', 0x8000000000000001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.503377781s ago: executing program 4 (id=3257):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_READ_BER(r2, 0x80046f46, &(0x7f00000003c0))
r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
write$input_event(r3, &(0x7f0000000140)={{r4, r5/1000+60000}, 0x4, 0x3, 0x7}, 0x18)
ftruncate(r3, 0x8008976)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

1.346912772s ago: executing program 3 (id=3258):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x2000000, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)

1.251888074s ago: executing program 3 (id=3259):
prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async)
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x480000)
ioctl$OTPSELECT(r0, 0x80044d0d, &(0x7f0000000040)=0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async, rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async, rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000080)={0x8, 0x3, 0x9, 0x4, 0x25fd, 0x10, 0x2})
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async, rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (rerun: 64)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='totmaps\x00') (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000140)={0xc, r2}) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async, rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async, rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async, rerun: 32)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (rerun: 32)
r3 = socket$inet6(0xa, 0x4, 0x5e)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000380)={{<r4=>r1, &(0x7f0000000180)='^\'@*}!/%.[}\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x101, 0x4]}, {0x0, 0x6, 0x97fa, 0x80}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}, {[0x9, 0x0, 0x5, 0x5]}, 0x6, 0xe1, &(0x7f0000000280)=""/225})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x43c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x27f}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c004}, 0x4008011)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000580)={0x1, 0x100, 0x4}) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000005c0)={{0x2f, @broadcast, 0x4e23, 0x2, 'wrr\x00', 0xa, 0x1fe0e92a, 0x11}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0x8}}, 0x44) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)

1.238020153s ago: executing program 3 (id=3260):
mkdir(&(0x7f0000000540)='./file0\x00', 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(0x0, 0xee00, r0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0xffff)

1.121019719s ago: executing program 3 (id=3261):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080003400000000b080003400000000008000140000000010800014000000017080001400000000b080001400000001208000240000080090800024000000012e5636b243b4b6aea31ed5fa33586ac35373fd3bbfe9ef71df0826aa4ab03bf5e7cdf15ad8987697b60cc60f9f4deeeeb7cb0c07a186118acf2be4d7ca7dce9831507377ce41f95f4d899547f2a580943b86e6f74fdb08822f90ef7b4c3baf9d698319e472734350fff2ddd42d4789f30167e80e0636857e09eddfc"], 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
poll(&(0x7f0000000040)=[{r2, 0x8006}], 0x1, 0xfffffff9)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001540)="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", 0x4a5}], 0x1}}], 0x1, 0xc084)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="9665c1f4b90b53210e4c0f78ac7e", 0xe}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6a}}], 0x30}, 0x4c081)

1.105233459s ago: executing program 4 (id=3262):
setns(0xc9, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
chmod(&(0x7f0000000040)='.\x00', 0x35e)
mkdir(&(0x7f0000000000)='./file1\x00', 0x6) (async)
mkdir(&(0x7f0000000000)='./file1\x00', 0x6)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00')
pipe(&(0x7f0000000140)) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) (async)
r4 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x2)
fchdir(r5) (async)
fchdir(r5)
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000100140000006000000000282900fe"], 0xfdef)

1.027655193s ago: executing program 3 (id=3263):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)

944.169906ms ago: executing program 3 (id=3264):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)

571.884386ms ago: executing program 4 (id=3265):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
openat(r0, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x1ff, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x3, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x1, 0x91, 0x4, 0x4, 0x546, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x40, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4, 0x4], [0x9, 0x40, 0x6, 0x9, 0x80004, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x7, 0x1191ab42, 0xda, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x20000001, 0x1, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x8000, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18c, 0x1000, 0x2, 0x5], [0x7, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0xbb14, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x5, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x7, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0xffff, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}}, 0x0)
close(0x3)
pipe2(0x0, 0x84880)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

358.127915ms ago: executing program 7 (id=3266):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x10)
write(r1, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x5f05, 0x0, 0x6, 0x1, 0xb, "e3eae32392390d3d6595f4303041a743803c15"}) (async)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

0s ago: executing program 7 (id=3267):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='secret=YWJjZGVmZ2g=\x00')
r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x1c3000)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='r:_y_probe ./file0:0', 0x14) (fail_nth: 8)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f00000001c0))
syz_open_dev$evdev(&(0x7f0000000080), 0x302, 0xd4282)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0)

kernel console output (not intermixed with test programs):

family 0 port 6081 - 0
[  690.929955][   T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.929992][   T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  691.213841][ T5604] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  691.361393][T14181] Bluetooth: hci4: command tx timeout
[  691.457436][ T5604] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  691.459650][ T5604] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  691.459677][ T5604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.459696][ T5604] usb 6-1: Product: syz
[  691.459710][ T5604] usb 6-1: Manufacturer: syz
[  691.459724][ T5604] usb 6-1: SerialNumber: syz
[  691.749024][ T5604] r8152-cfgselector 6-1: Unknown version 0x0000
[  691.749051][ T5604] r8152-cfgselector 6-1: config 0 descriptor??
[  691.992058][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.030457][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.173219][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.189443][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.333599][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.333617][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.346030][ T5604] r8152-cfgselector 6-1: USB disconnect, device number 21
[  692.582401][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.582422][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.935249][T15306] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2338'.
[  692.950374][T15306] validate_nla: 1 callbacks suppressed
[  692.950390][T15306] netlink: 'syz.3.2338': attribute type 4 has an invalid length.
[  693.094534][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2363'.
[  693.175201][T15315] openvswitch: netlink: Flow actions attr not present in new flow.
[  693.186353][T15315] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  693.238365][T15317] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  693.300270][T15321] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  693.350252][T15322] openvswitch: netlink: Flow key attr not present in new flow.
[  693.436781][T14181] Bluetooth: hci4: command tx timeout
[  693.457940][T15320] openvswitch: netlink: Flow key attr not present in new flow.
[  694.458911][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'.
[  694.507443][ T5701] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  694.612434][T15346] netlink: 'syz.4.2374': attribute type 11 has an invalid length.
[  694.658339][ T5701] usb 6-1: config index 0 descriptor too short (expected 45, got 28)
[  694.658367][ T5701] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[  694.658414][ T5701] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  694.661071][ T5701] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  694.661096][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.661115][ T5701] usb 6-1: Product: syz
[  694.661128][ T5701] usb 6-1: Manufacturer: syz
[  694.661142][ T5701] usb 6-1: SerialNumber: syz
[  694.765792][ T5701] rtl8150 6-1:1.0: couldn't find required endpoints
[  694.765954][ T5701] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  695.039210][ T5763] usb 6-1: USB disconnect, device number 22
[  695.610074][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.643306][T14176] do_umount: task=syz-executor[14176] propagate_mount_busy()!=0
[  695.643473][T14176] do_umount: task=syz-executor[14176] propagate_mount_busy()!=0
[  695.679720][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.733777][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.792728][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'.
[  695.964928][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2384'.
[  697.272740][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2391'.
[  697.721537][T12129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  697.739709][ T5604] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  697.816889][T12129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  697.818673][T12129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  697.823393][T12129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  697.852369][T12129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  697.939453][ T5604] usb 4-1: config index 0 descriptor too short (expected 45, got 28)
[  697.939483][ T5604] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  697.939527][ T5604] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  697.944533][ T5604] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  697.944562][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.944582][ T5604] usb 4-1: Product: syz
[  697.944594][ T5604] usb 4-1: Manufacturer: syz
[  697.944610][ T5604] usb 4-1: SerialNumber: syz
[  698.303757][ T5604] rtl8150 4-1:1.0: couldn't find required endpoints
[  698.304029][ T5604] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  698.512036][ T5589] usb 4-1: USB disconnect, device number 62
[  698.561407][ T1227] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.306366][ T1227] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.578241][T15386] wlan0 speed is unknown, defaulting to 1000
[  699.802951][ T1227] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.199828][ T1227] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.316745][T12129] Bluetooth: hci0: command tx timeout
[  700.605569][T15386] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.605889][T15386] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.606191][T15386] bridge_slave_0: entered allmulticast mode
[  700.613136][T15386] bridge_slave_0: entered promiscuous mode
[  700.652672][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'.
[  700.751041][T15386] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.752996][T15386] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.753295][T15386] bridge_slave_1: entered allmulticast mode
[  700.762599][T15386] bridge_slave_1: entered promiscuous mode
[  700.868991][T15431] sctp: [Deprecated]: syz.7.2400 (pid 15431) Use of struct sctp_assoc_value in delayed_ack socket option.
[  700.868991][T15431] Use struct sctp_sack_info instead
[  701.040653][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.089329][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  701.262385][T15386] team0: Port device team_slave_0 added
[  701.272917][T15386] team0: Port device team_slave_1 added
[  701.408622][T15386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  701.408633][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.408648][T15386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  701.412147][T15386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.412156][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.412171][T15386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.567392][ T1227] bridge_slave_1: left allmulticast mode
[  701.567416][ T1227] bridge_slave_1: left promiscuous mode
[  701.567591][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.619230][  T199] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  701.668232][ T1227] bridge_slave_0: left allmulticast mode
[  701.668256][ T1227] bridge_slave_0: left promiscuous mode
[  701.668416][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.788161][  T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  701.788194][  T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64
[  701.788221][  T199] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  701.788234][  T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.791197][  T199] usb 4-1: config 0 descriptor??
[  701.794780][T15439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  702.018246][  T199] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  702.296295][  T823] usb 4-1: USB disconnect, device number 63
[  702.296307][    C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  702.396538][T12129] Bluetooth: hci0: command tx timeout
[  702.817407][ T1227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.878497][ T1227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.920060][ T1227] bond0 (unregistering): Released all slaves
[  702.942712][T15386] hsr_slave_0: entered promiscuous mode
[  702.944248][T15386] hsr_slave_1: entered promiscuous mode
[  702.945212][T15386] debugfs: 'hsr0' already exists in 'hsr'
[  702.945236][T15386] Cannot create hsr debugfs directory
[  703.510292][ T5710] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  703.688781][ T5710] usb 4-1: device descriptor read/64, error -71
[  703.926688][ T5710] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  704.056601][ T5710] usb 4-1: device descriptor read/64, error -71
[  704.189176][ T5710] usb usb4-port1: attempt power cycle
[  704.477856][T12129] Bluetooth: hci0: command tx timeout
[  704.547456][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17
[  704.566929][ T5710] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  704.594688][ T5710] usb 4-1: device descriptor read/8, error -71
[  704.826924][ T5710] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  704.848725][ T5710] usb 4-1: device descriptor read/8, error -71
[  704.876624][ T1227] hsr_slave_0: left promiscuous mode
[  704.916564][ T1227] hsr_slave_1: left promiscuous mode
[  704.917712][ T1227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  704.917731][ T1227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.984557][ T5710] usb usb4-port1: unable to enumerate USB device
[  704.992001][ T1227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  704.992027][ T1227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  705.212729][ T1227] veth1_macvtap: left promiscuous mode
[  705.212797][ T1227] veth0_macvtap: left promiscuous mode
[  705.241878][ T1227] veth1_vlan: left promiscuous mode
[  705.242085][ T1227] veth0_vlan: left promiscuous mode
[  705.507411][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2408'.
[  706.207276][ T1227] team0 (unregistering): Port device team_slave_1 removed
[  706.247288][ T1227] team0 (unregistering): Port device team_slave_0 removed
[  706.556958][T12129] Bluetooth: hci0: command tx timeout
[  707.046668][ T5710] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  707.071083][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18
[  707.199412][ T5710] usb 4-1: config index 0 descriptor too short (expected 45, got 28)
[  707.199440][ T5710] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  707.199883][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  707.202319][ T5710] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  707.202346][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.202367][ T5710] usb 4-1: Product: syz
[  707.202380][ T5710] usb 4-1: Manufacturer: syz
[  707.202391][ T5710] usb 4-1: SerialNumber: syz
[  707.309124][ T5710] rtl8150 4-1:1.0: couldn't find required endpoints
[  707.309336][ T5710] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  707.509309][ T5710] usb 4-1: USB disconnect, device number 68
[  707.864562][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19
[  708.007917][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'.
[  708.280957][T15522] netlink: 'syz.4.2417': attribute type 1 has an invalid length.
[  708.372095][T15522] netlink: 'syz.4.2417': attribute type 29 has an invalid length.
[  708.449305][ T5710] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  708.452775][T15521] netlink: 'syz.4.2417': attribute type 5 has an invalid length.
[  708.600753][ T5710] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf
[  708.600782][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.600801][ T5710] usb 4-1: Product: syz
[  708.600816][ T5710] usb 4-1: Manufacturer: syz
[  708.600838][ T5710] usb 4-1: SerialNumber: syz
[  708.712570][ T5710] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  708.712672][ T5710] dvb-usb: bulk message failed: -22 (3/0)
[  708.740911][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  708.741919][ T5710] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  708.741966][ T5710] usb 4-1: media controller created
[  708.784860][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  708.891838][ T5710] DVB: Unable to find symbol mt352_attach()
[  708.891855][ T5710] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  708.892937][ T5710] dvb-usb: bulk message failed: -22 (3/0)
[  708.910149][ T5710] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  708.936781][ T5710] usb 4-1: USB disconnect, device number 69
[  709.082922][T15534] FAULT_INJECTION: forcing a failure.
[  709.082922][T15534] name failslab, interval 1, probability 0, space 0, times 0
[  709.082957][T15534] CPU: 1 UID: 0 PID: 15534 Comm: syz.7.2420 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  709.082986][T15534] Tainted: [L]=SOFTLOCKUP
[  709.082993][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  709.083005][T15534] Call Trace:
[  709.083012][T15534]  <TASK>
[  709.083020][T15534]  dump_stack_lvl+0xe8/0x150
[  709.083049][T15534]  should_fail_ex+0x467/0x600
[  709.083077][T15534]  should_failslab+0xa8/0x100
[  709.083102][T15534]  __kmalloc_cache_noprof+0xa1/0x670
[  709.083130][T15534]  ? __trace_uprobe_create+0x7d3/0xe40
[  709.083158][T15534]  ? __trace_uprobe_create+0x7d3/0xe40
[  709.083189][T15534]  __trace_uprobe_create+0x7d3/0xe40
[  709.083227][T15534]  ? __pfx___trace_uprobe_create+0x10/0x10
[  709.083255][T15534]  ? __kmalloc_noprof+0x436/0x790
[  709.083282][T15534]  ? argv_split+0x18d/0x400
[  709.083300][T15534]  ? argv_split+0x18d/0x400
[  709.083325][T15534]  ? argv_split+0x378/0x400
[  709.083350][T15534]  trace_probe_create+0xce/0x130
[  709.083377][T15534]  ? __pfx___trace_uprobe_create+0x10/0x10
[  709.083405][T15534]  ? __pfx_trace_probe_create+0x10/0x10
[  709.083429][T15534]  ? lockdep_hardirqs_on+0x7a/0x110
[  709.083448][T15534]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  709.083468][T15534]  ? mutex_lock_nested+0x152/0x1d0
[  709.083492][T15534]  ? dyn_event_create+0x20/0x70
[  709.083518][T15534]  dyn_event_create+0x4f/0x70
[  709.083539][T15534]  create_or_delete_trace_uprobe+0x65/0xa0
[  709.083561][T15534]  trace_parse_run_command+0x1f3/0x380
[  709.083593][T15534]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  709.083614][T15534]  ? __pfx_probes_write+0x10/0x10
[  709.083633][T15534]  vfs_write+0x29f/0xbb0
[  709.083665][T15534]  ? __pfx_vfs_write+0x10/0x10
[  709.083691][T15534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  709.083711][T15534]  ? lockdep_hardirqs_on+0x7a/0x110
[  709.083729][T15534]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  709.083755][T15534]  ? mutex_lock_nested+0x152/0x1d0
[  709.083778][T15534]  ? fdget_pos+0x252/0x320
[  709.083806][T15534]  ksys_write+0x156/0x270
[  709.083832][T15534]  ? __pfx_ksys_write+0x10/0x10
[  709.083865][T15534]  do_syscall_64+0x17b/0x530
[  709.083885][T15534]  ? irqentry_exit+0x10f/0x8f0
[  709.083903][T15534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.083924][T15534]  ? clear_bhb_loop+0x40/0x90
[  709.083949][T15534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.083968][T15534] RIP: 0033:0x7fafbd06e019
[  709.083987][T15534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.084004][T15534] RSP: 002b:00007fafbb2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  709.084026][T15534] RAX: ffffffffffffffda RBX: 00007fafbd2f5fa0 RCX: 00007fafbd06e019
[  709.084041][T15534] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004
[  709.084053][T15534] RBP: 00007fafbb2c6090 R08: 0000000000000000 R09: 0000000000000000
[  709.084066][T15534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.084077][T15534] R13: 00007fafbd2f6038 R14: 00007fafbd2f5fa0 R15: 00007ffce9e32f38
[  709.084111][T15534]  </TASK>
[  709.498133][ T5710] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  709.678302][T15544] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  710.201732][T15553] wlan0 speed is unknown, defaulting to 1000
[  710.217446][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20
[  710.985855][T15386] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  711.043611][T15386] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  711.177416][T15386] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  711.222366][T15386] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  711.224738][T15386] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  711.266015][T15386] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  711.271537][T15386] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  711.325082][T15386] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  711.865373][T15386] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.983915][T15386] 8021q: adding VLAN 0 to HW filter on device team0
[  712.025879][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.026041][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.121780][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.121943][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.193140][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2425'.
[  713.182072][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.938896][T15386] veth0_vlan: entered promiscuous mode
[  714.069128][T15386] veth1_vlan: entered promiscuous mode
[  714.208405][T15386] veth0_macvtap: entered promiscuous mode
[  714.233676][T15386] veth1_macvtap: entered promiscuous mode
[  714.282089][T15386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.357158][T15386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  714.385552][ T3348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.394265][ T1474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.401285][ T1474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.402597][ T1474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.669702][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.669721][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.800551][T15687] binder_alloc: 15686: binder_alloc_buf size 24560 failed, no address space
[  715.800574][T15687] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  715.902789][T15687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  715.947492][ T2354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.947517][ T2354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.964381][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'.
[  716.624586][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.651640][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.362375][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'.
[  717.682996][T15751] openvswitch: netlink: Key 25 has unexpected len 12 expected 16
[  718.034088][T15767] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  718.034110][T15767] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  718.295648][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'.
[  718.491583][T15783] 9p: Bad value for 'wfdno'
[  718.499615][T15783] netlink: 'syz.3.2455': attribute type 8 has an invalid length.
[  719.106552][ T5710] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  719.263114][ T5710] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  719.263145][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.295924][ T5710] usb 4-1: config 0 descriptor??
[  719.335138][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.338539][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.546877][ T5710] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  719.547354][ T5710] [drm:udl_init] *ERROR* Selecting channel failed
[  719.789355][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2462'.
[  719.882766][ T5710] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  719.882793][ T5710] [drm] Initialized udl on minor 2
[  720.043725][T15837] block2mtd: device name too long
[  720.046063][T15838] block2mtd: device name too long
[  720.060182][T15837] netlink: 4456 bytes leftover after parsing attributes in process `syz.7.2463'.
[  720.218336][ T5710] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  720.388801][ T5710] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  720.604543][ T5710] usb 4-1: USB disconnect, device number 70
[  720.677697][ T5604] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  721.212706][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'.
[  721.303188][T15869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.310616][T15869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.365585][T15872] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  721.425851][   T37] audit: type=1800 audit(1785833121.252:637): pid=15873 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.7.2473" name="file0" dev="overlay" ino=2347 res=0 errno=0
[  721.905859][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.906329][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.357412][T12129] Bluetooth: hci0: command 0x0c1a tx timeout
[  723.585905][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.587534][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.305463][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'.
[  724.541594][T15932] loop5: detected capacity change from 0 to 7
[  724.604978][T15929] netlink: zone id is out of range
[  724.604992][T15929] netlink: zone id is out of range
[  724.605000][T15929] netlink: zone id is out of range
[  724.605008][T15929] netlink: zone id is out of range
[  724.998568][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.000013][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.033125][T15932] Dev loop5: unable to read RDB block 7
[  725.033151][T15932]  loop5: unable to read partition table
[  725.033616][T15932] loop5: partition table beyond EOD, truncated
[  725.035621][T15932] loop_reread_partitions: partition scan of loop5 (í|:î�ñG53¤ð‰DÇ‚‘òxx=¯íehÞ#·]ǛYµž,±Ò>—‡ÚßqE%|ýÁ ­) failed (rc=-5)
[  725.068280][T15931] Flush: task=syz.3.2496[15931] dev=loop5 state=2
[  725.156790][T15931] Teardown: task=syz.3.2496[15931] dev=loop5 state=2
[  725.466613][ T5763] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  725.627956][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2502'.
[  725.630721][ T5763] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  725.630754][ T5763] usb 4-1: config 0 has no interface number 0
[  725.630797][ T5763] usb 4-1: config 0 interface 41 has no altsetting 0
[  725.633478][ T5763] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  725.633503][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.633523][ T5763] usb 4-1: Product: syz
[  725.633536][ T5763] usb 4-1: Manufacturer: syz
[  725.633551][ T5763] usb 4-1: SerialNumber: syz
[  725.704779][ T5763] usb 4-1: config 0 descriptor??
[  725.740756][T15948] binder: 15947:15948 ioctl c0306201 200000000100 returned -14
[  725.903641][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'.
[  725.905434][T15954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  725.905484][T15954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  726.104366][T15962] input: syz0 as /devices/virtual/input/input70
[  726.521461][ T5763] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  726.968667][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.978393][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.080304][T15972] sg_write: data in/out 44544/136 bytes for SCSI command 0x0-- guessing data in;
[  727.080304][T15972]    program syz.0.2509 not setting count and/or reply_len properly
[  727.771750][ T5763] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  727.773266][ T5763] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  727.801917][ T5763] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  727.811968][ T5763] usb 4-1: USB disconnect, device number 71
[  728.008351][T15982] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2513'.
[  728.168026][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.168570][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.372584][T16007] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2523'.
[  729.476707][ T5763] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  729.634553][ T5763] usb 4-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40
[  729.634640][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.634661][ T5763] usb 4-1: Product: syz
[  729.634675][ T5763] usb 4-1: Manufacturer: syz
[  729.634690][ T5763] usb 4-1: SerialNumber: syz
[  729.850236][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.856794][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.914058][T16012] tipc: Started in network mode
[  729.914076][T16012] tipc: Node identity _:, cluster identity 4711
[  729.914124][T16012] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  729.994537][ T5763] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  730.020244][ T5763] usb 4-1: USB disconnect, device number 72
[  730.050389][ T8172] udevd[8172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  730.156033][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.165155][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.553737][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'.
[  731.213695][T16046] netlink: 432 bytes leftover after parsing attributes in process `syz.7.2538'.
[  731.416537][ T5604] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  731.569287][ T5604] usb 4-1: Using ep0 maxpacket: 8
[  731.577831][ T5604] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  731.577858][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.577878][ T5604] usb 4-1: Product: syz
[  731.577892][ T5604] usb 4-1: Manufacturer: syz
[  731.577906][ T5604] usb 4-1: SerialNumber: syz
[  731.591487][ T5604] usb 4-1: config 0 descriptor??
[  731.607605][ T5604] gspca_main: se401-2.14.0 probing 047d:5003
[  731.628037][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  731.680217][T16055] overlayfs: unescaped trailing colons in lowerdir mount option.
[  732.020977][ T5604] gspca_se401: Wrong descriptor type
[  732.242857][ T5604] usb 4-1: USB disconnect, device number 73
[  732.688849][   T37] audit: type=1800 audit(1785833132.522:638): pid=16084 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.2543" name="id" dev="configfs" ino=69295 res=0 errno=0
[  732.849089][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.849716][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.853318][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'.
[  733.967186][ T5604] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  734.072882][T16106] Flush: task=syz.7.2549[16106] dev=loop5 state=2
[  734.139249][ T5604] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  734.139277][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.139297][ T5604] usb 4-1: config 0 has no interface number 0
[  734.139441][ T5604] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  734.139469][ T5604] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  734.139490][ T5604] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  734.142907][ T5604] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  734.142930][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.142941][ T5604] usb 4-1: Product: syz
[  734.142948][ T5604] usb 4-1: Manufacturer: syz
[  734.142955][ T5604] usb 4-1: SerialNumber: syz
[  734.151094][T16106] Teardown: task=syz.7.2549[16106] dev=loop5 state=2
[  734.279368][ T5604] usb 4-1: config 0 descriptor??
[  734.690412][ T5604] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71
[  734.718648][ T5604] usb 4-1: USB disconnect, device number 74
[  735.900868][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2564'.
[  737.718762][ T5589] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  737.919777][ T5589] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  737.919831][ T5589] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  737.921662][ T5589] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  737.921690][ T5589] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  737.921712][ T5589] usb 4-1: Manufacturer: syz
[  737.921727][ T5589] usb 4-1: SerialNumber: syz
[  738.202190][ T5589] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  738.214050][ T5589] usb 4-1: USB disconnect, device number 75
[  738.901682][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.908707][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.997422][ T5701] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  739.153999][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  739.154036][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  739.157109][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  739.157136][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  739.157156][ T5701] usb 4-1: SerialNumber: syz
[  739.176097][ T5701] cdc_ether 4-1:1.0: missing cdc header descriptor
[  739.180565][ T5701] usb-storage 4-1:1.0: USB Mass Storage device detected
[  739.186971][ T5701] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  739.217108][ T5701] scsi host1: usb-storage 4-1:1.0
[  739.423146][T16245] input: syz0 as /devices/virtual/input/input78
[  739.569954][T16250] binder: 16249:16250 ioctl 3b83 200000000040 returned -22
[  741.084420][T16287] ubi: mtd0 is already attached to ubi8
[  741.833826][T16294] wlan0 speed is unknown, defaulting to 1000
[  741.874047][ T5701] usb 4-1: USB disconnect, device number 76
[  743.098031][T16344] FAULT_INJECTION: forcing a failure.
[  743.098031][T16344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  743.098054][T16344] CPU: 0 UID: 0 PID: 16344 Comm: syz.0.2595 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  743.098070][T16344] Tainted: [L]=SOFTLOCKUP
[  743.098074][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  743.098080][T16344] Call Trace:
[  743.098085][T16344]  <TASK>
[  743.098090][T16344]  dump_stack_lvl+0xe8/0x150
[  743.098109][T16344]  should_fail_ex+0x467/0x600
[  743.098136][T16344]  _copy_to_user+0x31/0xb0
[  743.098157][T16344]  simple_read_from_buffer+0xe1/0x170
[  743.098182][T16344]  proc_fail_nth_read+0x1be/0x230
[  743.098205][T16344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  743.098229][T16344]  ? rw_verify_area+0x250/0x4d0
[  743.098245][T16344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  743.098256][T16344]  vfs_read+0x219/0xa90
[  743.098272][T16344]  ? __pfx_vfs_read+0x10/0x10
[  743.098284][T16344]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  743.098296][T16344]  ? lockdep_hardirqs_on+0x7a/0x110
[  743.098306][T16344]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  743.098316][T16344]  ? mutex_lock_nested+0x152/0x1d0
[  743.098329][T16344]  ? fdget_pos+0x252/0x320
[  743.098343][T16344]  ksys_read+0x156/0x270
[  743.098356][T16344]  ? __pfx_ksys_read+0x10/0x10
[  743.098373][T16344]  do_syscall_64+0x17b/0x530
[  743.098383][T16344]  ? irqentry_exit+0x10f/0x8f0
[  743.098393][T16344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.098403][T16344]  ? clear_bhb_loop+0x40/0x90
[  743.098416][T16344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.098427][T16344] RIP: 0033:0x7f9e85d1e84e
[  743.098437][T16344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  743.098446][T16344] RSP: 002b:00007f9e83fb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  743.098458][T16344] RAX: ffffffffffffffda RBX: 00007f9e83fb66c0 RCX: 00007f9e85d1e84e
[  743.098465][T16344] RDX: 000000000000000f RSI: 00007f9e83fb60a0 RDI: 0000000000000004
[  743.098472][T16344] RBP: 00007f9e83fb6090 R08: 0000000000000000 R09: 0000000000000000
[  743.098478][T16344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  743.098484][T16344] R13: 00007f9e85fe6038 R14: 00007f9e85fe5fa0 R15: 00007fff419241f8
[  743.098500][T16344]  </TASK>
[  743.522688][T16146] Bluetooth: (null): Too short H5 packet
[  743.632085][T16146] Bluetooth: (null): Invalid header checksum
[  743.664551][T16146] Bluetooth: (null): Invalid header checksum
[  743.731707][T16148] Bluetooth: (null): Invalid header checksum
[  743.846253][T16148] Bluetooth: (null): Invalid header checksum
[  744.023752][T16146] Bluetooth: (null): Invalid header checksum
[  744.128052][   T57] Bluetooth: (null): Invalid header checksum
[  744.656548][  T199] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  744.822652][  T199] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  744.822680][  T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.822698][  T199] usb 4-1: Product: syz
[  744.822710][  T199] usb 4-1: Manufacturer: syz
[  744.822722][  T199] usb 4-1: SerialNumber: syz
[  744.829248][  T199] usb 4-1: config 0 descriptor??
[  744.878847][  T199] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  746.579411][  T199] gspca_sunplus: reg_r err -71
[  746.579499][  T199] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  746.600985][  T199] usb 4-1: USB disconnect, device number 77
[  747.168776][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'.
[  747.168946][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2610'.
[  747.169956][T16428] 9pnet_virtio: no channels available for device 127.0.0.1
[  747.283889][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  747.411239][T16431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  749.286682][ T5589] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  749.436584][ T5589] usb 4-1: Using ep0 maxpacket: 32
[  749.440234][ T5589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  749.440285][ T5589] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  749.440312][ T5589] usb 4-1: config 0 interface 0 has no altsetting 0
[  749.448038][ T5589] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  749.448066][ T5589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.448085][ T5589] usb 4-1: Product: syz
[  749.448098][ T5589] usb 4-1: Manufacturer: syz
[  749.448113][ T5589] usb 4-1: SerialNumber: syz
[  749.524643][ T5589] usb 4-1: config 0 descriptor??
[  749.538594][ T5589] gs_usb 4-1:0.0: Required endpoints not found
[  749.554336][ T8172] Flush: task=udevd[8172] dev=loop5 state=2
[  749.679865][ T8172] Teardown: task=udevd[8172] dev=loop5 state=2
[  749.736740][T16495] netlink: 'syz.4.2623': attribute type 83 has an invalid length.
[  749.944507][T16503] FAULT_INJECTION: forcing a failure.
[  749.944507][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.944543][T16503] CPU: 1 UID: 0 PID: 16503 Comm: syz.0.2625 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.944570][T16503] Tainted: [L]=SOFTLOCKUP
[  749.944578][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.944591][T16503] Call Trace:
[  749.944598][T16503]  <TASK>
[  749.944607][T16503]  dump_stack_lvl+0xe8/0x150
[  749.944636][T16503]  should_fail_ex+0x467/0x600
[  749.944665][T16503]  _copy_from_user+0x2d/0xb0
[  749.944684][T16503]  lo_ioctl+0x769/0x1fe0
[  749.944718][T16503]  ? __pfx_lo_ioctl+0x10/0x10
[  749.944742][T16503]  ? ktime_get+0x45/0x220
[  749.944772][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.944793][T16503]  ? ktime_get+0x1f5/0x220
[  749.944823][T16503]  ? lapic_next_event+0x11/0x20
[  749.944859][T16503]  ? clockevents_program_event+0x491/0x630
[  749.944892][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.944920][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.944947][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.944971][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.944991][T16503]  ? lock_acquire+0x115/0x350
[  749.945031][T16503]  ? lock_acquire+0x115/0x350
[  749.945067][T16503]  ? lock_acquire+0x115/0x350
[  749.945105][T16503]  ? is_bpf_text_address+0x26/0x2b0
[  749.945133][T16503]  ? is_bpf_text_address+0x292/0x2b0
[  749.945154][T16503]  ? is_bpf_text_address+0x26/0x2b0
[  749.945178][T16503]  ? kernel_text_address+0xa5/0xe0
[  749.945208][T16503]  ? __kernel_text_address+0xd/0x30
[  749.945236][T16503]  ? unwind_get_return_address+0x4d/0x90
[  749.945266][T16503]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  749.945295][T16503]  ? arch_stack_walk+0xfb/0x150
[  749.945340][T16503]  ? stack_trace_save+0xa9/0x100
[  749.945367][T16503]  ? __pfx_stack_trace_save+0x10/0x10
[  749.945394][T16503]  ? kasan_save_track+0x4f/0x80
[  749.945425][T16503]  ? stack_depot_save_flags+0x33/0x800
[  749.945450][T16503]  ? __lock_acquire+0x6df/0x2e40
[  749.945472][T16503]  ? kasan_save_track+0x4f/0x80
[  749.945498][T16503]  ? kasan_save_track+0x3e/0x80
[  749.945523][T16503]  ? kasan_save_free_info+0x40/0x50
[  749.945544][T16503]  ? __kasan_slab_free+0x5c/0x80
[  749.945571][T16503]  ? kfree+0x1c5/0x6c0
[  749.945594][T16503]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  749.945617][T16503]  ? security_file_ioctl+0xb9/0x260
[  749.945638][T16503]  ? __se_sys_ioctl+0x47/0x170
[  749.945667][T16503]  ? __asan_memset+0x22/0x50
[  749.945692][T16503]  ? blk_get_meta_cap+0x19d/0x780
[  749.945728][T16503]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  749.945768][T16503]  ? blkdev_common_ioctl+0x14b7/0x3250
[  749.945796][T16503]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  749.945823][T16503]  ? kasan_quarantine_put+0xbb/0x1f0
[  749.945865][T16503]  ? tomoyo_path_number_perm+0x219/0x5f0
[  749.945894][T16503]  ? do_vfs_ioctl+0x1184/0x1550
[  749.945956][T16503]  ? __pfx_lo_ioctl+0x10/0x10
[  749.945982][T16503]  blkdev_ioctl+0x5e6/0x750
[  749.946006][T16503]  ? __pfx_blkdev_ioctl+0x10/0x10
[  749.946025][T16503]  ? __fget_files+0x3a8/0x420
[  749.946045][T16503]  ? __fget_files+0x2a/0x420
[  749.946068][T16503]  ? bpf_lsm_file_ioctl+0x9/0x20
[  749.946098][T16503]  ? __pfx_blkdev_ioctl+0x10/0x10
[  749.946119][T16503]  __se_sys_ioctl+0xff/0x170
[  749.946146][T16503]  do_syscall_64+0x17b/0x530
[  749.946166][T16503]  ? irqentry_exit+0x10f/0x8f0
[  749.946183][T16503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.946202][T16503]  ? clear_bhb_loop+0x40/0x90
[  749.946220][T16503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.946234][T16503] RIP: 0033:0x7f9e85d5e019
[  749.946249][T16503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.946261][T16503] RSP: 002b:00007f9e83fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  749.946277][T16503] RAX: ffffffffffffffda RBX: 00007f9e85fe5fa0 RCX: 00007f9e85d5e019
[  749.946287][T16503] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003
[  749.946297][T16503] RBP: 00007f9e83fb6090 R08: 0000000000000000 R09: 0000000000000000
[  749.946306][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.946314][T16503] R13: 00007f9e85fe6038 R14: 00007f9e85fe5fa0 R15: 00007fff419241f8
[  749.946336][T16503]  </TASK>
[  750.427215][T16518] netlink: 'syz.0.2629': attribute type 27 has an invalid length.
[  750.810684][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'.
[  751.199018][T16542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2632'.
[  751.798165][T16542] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  752.064567][ T5701] usb 4-1: USB disconnect, device number 78
[  752.313534][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.318457][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.542991][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.545025][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.244029][T16603] netlink: 'syz.0.2645': attribute type 10 has an invalid length.
[  753.249727][T16603] 8021q: adding VLAN 0 to HW filter on device team0
[  753.251695][T16603] bond0: (slave team0): Enslaving as an active interface with an up link
[  754.049286][T16614] openvswitch: netlink: Message has 8 unknown bytes.
[  754.163934][T16616] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2651'.
[  754.163967][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'.
[  754.919688][T16629] netlink: 'syz.3.2654': attribute type 1 has an invalid length.
[  755.874760][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2658'.
[  755.874811][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2658'.
[  756.129667][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2659'.
[  756.296966][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'.
[  756.806712][ T5763] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  756.968938][ T5763] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  756.968966][ T5763] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[  756.971380][ T5763] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  756.971408][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.971429][ T5763] usb 4-1: Product: syz
[  756.971443][ T5763] usb 4-1: Manufacturer: syz
[  756.971458][ T5763] usb 4-1: SerialNumber: syz
[  757.029511][ T5763] usb 4-1: config 0 descriptor??
[  757.036370][ T5763] gspca_main: sunplus-2.14.0 probing 055f:c630
[  757.713461][T16702] IPVS: Error connecting to the multicast addr
[  758.625781][T16716] syzkaller1: entered promiscuous mode
[  758.625808][T16716] syzkaller1: entered allmulticast mode
[  758.714550][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'.
[  758.872942][T16730] openvswitch: netlink: Multiple metadata blocks provided
[  759.067807][T16736] tmpfs: Bad value for 'mpol'
[  759.084427][T16736] msr: Write to unrecognized MSR 0x0 by syz.4.2672 (pid: 16736), tainting CPU_OUT_OF_SPEC.
[  759.084449][T16736] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  759.242380][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'.
[  759.956076][ T5841] usb 4-1: USB disconnect, device number 79
[  760.033063][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'.
[  763.731869][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2686'.
[  763.777867][T16835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2687'.
[  763.903359][T16843] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2688'.
[  763.911517][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'.
[  764.338026][T16861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.338580][T16861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.343561][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'.
[  764.913880][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  764.989274][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.989816][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.995643][T16869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2701'.
[  764.995657][T16869] openvswitch: netlink: Flow key attr not present in new flow.
[  765.156617][ T5763] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  765.326570][ T5763] usb 4-1: Using ep0 maxpacket: 8
[  765.329114][ T5763] usb 4-1: unable to get BOS descriptor or descriptor too short
[  765.332383][ T5763] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  765.332409][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.332428][ T5763] usb 4-1: Product: syz
[  765.332440][ T5763] usb 4-1: Manufacturer: syz
[  765.332448][ T5763] usb 4-1: SerialNumber: syz
[  765.576695][T16863] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2698'.
[  765.593464][T16863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  765.623647][ T5763] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  765.624158][ T5763] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  765.648416][T16871] syzkaller1: entered promiscuous mode
[  765.648438][T16871] syzkaller1: entered allmulticast mode
[  765.669480][ T5763] usb 4-1: USB disconnect, device number 80
[  765.979398][T16873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.979971][T16873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.201088][T16873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.201726][T16873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.250965][T16875] netlink: 'syz.3.2704': attribute type 2 has an invalid length.
[  766.250980][T16875] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2704'.
[  767.123445][T16883] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  767.123466][T16883] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  767.162871][T16884] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  767.162892][T16884] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  767.352734][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2709'.
[  767.571193][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.572664][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.587272][T16897] openvswitch: netlink: Multiple metadata blocks provided
[  768.416614][  T199] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  768.486305][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.490680][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.579924][  T199] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  768.579956][  T199] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  768.579976][  T199] usb 4-1: Product: syz
[  768.579990][  T199] usb 4-1: SerialNumber: syz
[  768.583550][  T199] usb 4-1: config 0 descriptor??
[  768.618437][  T199] hso 4-1:0.0: Not our interface
[  768.772949][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.772970][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2717'.
[  768.773708][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.773723][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2717'.
[  768.774288][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.774303][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2717'.
[  768.774841][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.774856][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2717'.
[  768.787949][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.788510][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.790942][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.791512][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  768.792035][T16910] netlink: 'syz.4.2717': attribute type 10 has an invalid length.
[  769.264183][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  769.264716][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.801744][T16928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.802405][T16928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.218457][ T5604] usb 4-1: USB disconnect, device number 81
[  771.686660][ T5604] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  771.866510][ T5604] usb 4-1: Using ep0 maxpacket: 32
[  771.868321][ T5604] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  771.868351][ T5604] usb 4-1: config 0 interface 0 has no altsetting 0
[  771.871557][ T5604] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  771.871583][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.871603][ T5604] usb 4-1: Product: syz
[  771.871617][ T5604] usb 4-1: Manufacturer: syz
[  771.871632][ T5604] usb 4-1: SerialNumber: syz
[  771.922922][ T5604] usb 4-1: config 0 descriptor??
[  771.948512][ T5604] gs_usb 4-1:0.0: Required endpoints not found
[  772.076772][T16964] __nla_validate_parse: 62 callbacks suppressed
[  772.076792][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'.
[  772.570134][T16982] NILFS (loop4): device size too small
[  774.360586][ T5841] usb 4-1: USB disconnect, device number 82
[  774.531802][T17018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  775.436039][T17017] syz.3.2738 (17017): drop_caches: 2
[  775.817056][ T5763] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  775.984438][ T5763] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30
[  775.984492][ T5763] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  775.984519][ T5763] usb 4-1: config 1 interface 0 has no altsetting 0
[  776.005931][ T5763] usb 4-1: string descriptor 0 read error: -22
[  776.006072][ T5763] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40
[  776.006095][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.153184][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.153766][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.166591][T17044] openvswitch: netlink: Multiple metadata blocks provided
[  776.264753][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.279256][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.459091][ T5763] usbhid 4-1:1.0: can't add hid device: -71
[  776.459207][ T5763] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  776.483262][ T5763] usb 4-1: USB disconnect, device number 83
[  776.974293][T17069] fuse: Unknown parameter 'g	'
[  777.082964][T17074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.084482][T17074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.154802][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'.
[  777.794349][T17099] openvswitch: netlink: Multiple metadata blocks provided
[  778.099292][T17110] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  778.421259][T17118] Invalid source name
[  778.732225][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.732762][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.326842][ T5763] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  779.369375][T17150] Invalid logical block size (16777216)
[  779.488650][ T5763] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  779.488678][ T5763] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[  779.488698][ T5763] usb 4-1: config 220 has no interface number 2
[  779.488772][ T5763] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  779.488798][ T5763] usb 4-1: config 220 interface 0 has no altsetting 0
[  779.488816][ T5763] usb 4-1: config 220 interface 76 has no altsetting 0
[  779.488834][ T5763] usb 4-1: config 220 interface 1 has no altsetting 0
[  779.492551][ T5763] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  779.492576][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.492592][ T5763] usb 4-1: Product: syz
[  779.492604][ T5763] usb 4-1: Manufacturer: syz
[  779.492615][ T5763] usb 4-1: SerialNumber: syz
[  779.806169][ T5763] usb 4-1: selecting invalid altsetting 0
[  779.825021][ T5763] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  779.825054][ T5763] uvcvideo 4-1:220.0: No valid video chain found.
[  779.853557][ T5763] usb 4-1: selecting invalid altsetting 0
[  779.853590][ T5763] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  779.874411][ T5763] usb 4-1: USB disconnect, device number 84
[  783.156534][ T5841] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  783.281942][T17245] validate_nla: 56 callbacks suppressed
[  783.281960][T17245] netlink: 'syz.0.2796': attribute type 10 has an invalid length.
[  783.307445][ T5841] usb 4-1: Using ep0 maxpacket: 8
[  783.309439][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  783.309473][ T5841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  783.309486][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.314972][ T5841] usb 4-1: config 0 descriptor??
[  783.425460][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'.
[  783.458865][T17251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.461509][T17251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.603117][ T5841] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  784.067581][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2805'.
[  784.373174][T17280] FAULT_INJECTION: forcing a failure.
[  784.373174][T17280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  784.373212][T17280] CPU: 1 UID: 0 PID: 17280 Comm: syz.0.2807 Tainted: G S           L      syzkaller #0 PREEMPT_{RT,(full)} 
[  784.373241][T17280] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  784.373249][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  784.373261][T17280] Call Trace:
[  784.373269][T17280]  <TASK>
[  784.373278][T17280]  dump_stack_lvl+0xe8/0x150
[  784.373307][T17280]  should_fail_ex+0x467/0x600
[  784.373336][T17280]  _copy_from_iter+0x1d3/0x1660
[  784.373370][T17280]  ? __lock_acquire+0x6df/0x2e40
[  784.373391][T17280]  ? __pfx__copy_from_iter+0x10/0x10
[  784.373421][T17280]  ? do_raw_spin_lock+0x12b/0x2f0
[  784.373456][T17280]  tun_get_user+0x259/0x4380
[  784.373477][T17280]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  784.373509][T17280]  ? reacquire_held_locks+0x117/0x1a0
[  784.373531][T17280]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  784.373564][T17280]  ? __pfx_tun_get_user+0x10/0x10
[  784.373591][T17280]  ? rt_spin_unlock+0x157/0x200
[  784.373621][T17280]  ? rt_spin_unlock+0x163/0x200
[  784.373650][T17280]  ? save_netdev_trace_buffer+0x4ae/0x5e0
[  784.373678][T17280]  ? ref_tracker_alloc+0x353/0x4c0
[  784.373703][T17280]  ? tun_get+0x157/0x2f0
[  784.373721][T17280]  ? tun_chr_write_iter+0x63/0x210
[  784.373740][T17280]  ? vfs_write+0x61e/0xbb0
[  784.373763][T17280]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  784.373794][T17280]  ? tun_get+0x1c/0x2f0
[  784.373819][T17280]  ? tun_get+0x1c/0x2f0
[  784.373839][T17280]  ? tun_get+0x1c/0x2f0
[  784.373864][T17280]  tun_chr_write_iter+0x119/0x210
[  784.373888][T17280]  vfs_write+0x61e/0xbb0
[  784.373920][T17280]  ? __pfx_vfs_write+0x10/0x10
[  784.373953][T17280]  ? __fget_files+0x2a/0x420
[  784.373981][T17280]  ksys_write+0x156/0x270
[  784.374002][T17280]  ? preempt_schedule_thunk+0x16/0x40
[  784.374022][T17280]  ? __pfx_ksys_write+0x10/0x10
[  784.374051][T17280]  do_syscall_64+0x17b/0x530
[  784.374071][T17280]  ? irqentry_exit+0x10f/0x8f0
[  784.374088][T17280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.374108][T17280]  ? clear_bhb_loop+0x40/0x90
[  784.374130][T17280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.374149][T17280] RIP: 0033:0x7f9e85d5e019
[  784.374168][T17280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.374186][T17280] RSP: 002b:00007f9e83fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  784.374208][T17280] RAX: ffffffffffffffda RBX: 00007f9e85fe5fa0 RCX: 00007f9e85d5e019
[  784.374223][T17280] RDX: 00000000000002b9 RSI: 0000200000000780 RDI: 0000000000000003
[  784.374236][T17280] RBP: 00007f9e83fb6090 R08: 0000000000000000 R09: 0000000000000000
[  784.374249][T17280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  784.374261][T17280] R13: 00007f9e85fe6038 R14: 00007f9e85fe5fa0 R15: 00007fff419241f8
[  784.374292][T17280]  </TASK>
[  784.704770][T17281] syzkaller1: entered promiscuous mode
[  784.704785][T17281] syzkaller1: entered allmulticast mode
[  785.160131][T17291] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2810'.
[  785.263229][T17291] syzkaller1: entered promiscuous mode
[  785.263253][T17291] syzkaller1: entered allmulticast mode
[  786.210753][ T5763] usb 4-1: USB disconnect, device number 85
[  786.281151][T17310] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16)
[  787.215668][ T5763] IPVS: starting estimator thread 0...
[  787.326622][T17330] IPVS: using max 8 ests per chain, 19200 per kthread
[  787.567919][T17339] loop5: detected capacity change from 0 to 7
[  787.570435][T17339] Dev loop5: unable to read RDB block 7
[  787.570462][T17339]  loop5: AHDI p1 p2
[  787.570481][T17339] loop5: partition table partially beyond EOD, truncated
[  787.570694][T17339] loop5: p1 size 150995456 extends beyond EOD, truncated
[  788.338661][T17364] binder: 17363:17364 ioctl c0306201 200000000640 returned -22
[  788.365522][T17338] Flush: task=syz.0.2826[17338] dev=loop5 state=2
[  788.446704][T17338] Teardown: task=syz.0.2826[17338] dev=loop5 state=2
[  788.459630][T17367] netlink: 'syz.7.2834': attribute type 10 has an invalid length.
[  788.459649][T17367] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2834'.
[  790.528121][T17344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  791.012800][T17394] FAULT_INJECTION: forcing a failure.
[  791.012800][T17394] name failslab, interval 1, probability 0, space 0, times 0
[  791.012835][T17394] CPU: 0 UID: 0 PID: 17394 Comm: syz.4.2844 Tainted: G S           L      syzkaller #0 PREEMPT_{RT,(full)} 
[  791.012868][T17394] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  791.012875][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  791.012888][T17394] Call Trace:
[  791.012896][T17394]  <TASK>
[  791.012905][T17394]  dump_stack_lvl+0xe8/0x150
[  791.012944][T17394]  should_fail_ex+0x467/0x600
[  791.012975][T17394]  should_failslab+0xa8/0x100
[  791.012997][T17394]  __kmalloc_noprof+0xfb/0x790
[  791.013025][T17394]  ? kernfs_fop_write_iter+0x158/0x540
[  791.013051][T17394]  ? kernfs_fop_write_iter+0x158/0x540
[  791.013085][T17394]  kernfs_fop_write_iter+0x158/0x540
[  791.013115][T17394]  vfs_write+0x61e/0xbb0
[  791.013148][T17394]  ? __pfx_vfs_write+0x10/0x10
[  791.013174][T17394]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  791.013196][T17394]  ? lockdep_hardirqs_on+0x7a/0x110
[  791.013217][T17394]  ? mutex_lock_nested+0x152/0x1d0
[  791.013243][T17394]  ? fdget_pos+0x252/0x320
[  791.013276][T17394]  ksys_write+0x156/0x270
[  791.013302][T17394]  ? __pfx_ksys_write+0x10/0x10
[  791.013335][T17394]  do_syscall_64+0x17b/0x530
[  791.013355][T17394]  ? irqentry_exit+0x10f/0x8f0
[  791.013373][T17394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.013393][T17394]  ? clear_bhb_loop+0x40/0x90
[  791.013416][T17394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.013436][T17394] RIP: 0033:0x7f888eeae019
[  791.013454][T17394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.013471][T17394] RSP: 002b:00007f888d106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  791.013490][T17394] RAX: ffffffffffffffda RBX: 00007f888f135fa0 RCX: 00007f888eeae019
[  791.013504][T17394] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006
[  791.013517][T17394] RBP: 00007f888d106090 R08: 0000000000000000 R09: 0000000000000000
[  791.013529][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.013540][T17394] R13: 00007f888f136038 R14: 00007f888f135fa0 R15: 00007ffc07d491f8
[  791.013572][T17394]  </TASK>
[  791.264732][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  791.265180][ T5763] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  791.265446][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  791.386616][ T5763] usb 4-1: device descriptor read/64, error -32
[  791.569222][T17411] netlink: 'syz.4.2851': attribute type 10 has an invalid length.
[  791.569242][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2851'.
[  791.570389][T17411] FAULT_INJECTION: forcing a failure.
[  791.570389][T17411] name failslab, interval 1, probability 0, space 0, times 0
[  791.570420][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.4.2851 Tainted: G S           L      syzkaller #0 PREEMPT_{RT,(full)} 
[  791.570448][T17411] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  791.570456][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  791.570468][T17411] Call Trace:
[  791.570476][T17411]  <TASK>
[  791.570484][T17411]  dump_stack_lvl+0xe8/0x150
[  791.570512][T17411]  should_fail_ex+0x467/0x600
[  791.570540][T17411]  should_failslab+0xa8/0x100
[  791.570559][T17411]  kmem_cache_alloc_node_noprof+0xac/0x660
[  791.570591][T17411]  ? __alloc_skb+0x1d7/0x7a0
[  791.570613][T17411]  ? __alloc_skb+0x1d7/0x7a0
[  791.570645][T17411]  __alloc_skb+0x1d7/0x7a0
[  791.570671][T17411]  team_nl_send_port_list_get+0x151/0x960
[  791.570692][T17411]  ? notifier_call_chain+0x3aa/0x3d0
[  791.570722][T17411]  ? __pfx_team_nl_send_multicast+0x10/0x10
[  791.570749][T17411]  ? netdev_lower_state_changed+0xc4/0x140
[  791.570777][T17411]  ? __pfx_team_nl_send_port_list_get+0x10/0x10
[  791.570807][T17411]  __team_port_change_send+0x2f7/0x560
[  791.570834][T17411]  ? __pfx___team_port_change_send+0x10/0x10
[  791.570859][T17411]  ? ipvlan_device_event+0x143/0xe60
[  791.570892][T17411]  ? __asan_memset+0x22/0x50
[  791.570917][T17411]  ? macvtap_device_event+0xd1/0x400
[  791.570948][T17411]  ? __pfx_ipvlan_device_event+0x10/0x10
[  791.570975][T17411]  team_port_change_check+0x82/0x1d0
[  791.571005][T17411]  team_device_event+0x153/0x570
[  791.571033][T17411]  notifier_call_chain+0x1a5/0x3d0
[  791.571064][T17411]  __dev_notify_flags+0x2d9/0x510
[  791.571088][T17411]  ? lockdep_hardirqs_on+0x7a/0x110
[  791.571113][T17411]  ? __pfx___dev_notify_flags+0x10/0x10
[  791.571134][T17411]  ? __dev_change_flags+0x5f1/0x820
[  791.571165][T17411]  ? __pfx___dev_change_flags+0x10/0x10
[  791.571190][T17411]  ? netif_set_alias+0x12f/0x1e0
[  791.571217][T17411]  netif_change_flags+0xde/0x1b0
[  791.571246][T17411]  do_setlink+0xdd6/0x4670
[  791.571269][T17411]  ? __wake_up_klogd+0xe6/0x120
[  791.571297][T17411]  ? __pfx_vprintk_emit+0x10/0x10
[  791.571326][T17411]  ? __pfx_do_setlink+0x10/0x10
[  791.571354][T17411]  ? _printk+0xdd/0x130
[  791.571386][T17411]  ? lockdep_hardirqs_on+0x7a/0x110
[  791.571407][T17411]  ? rcu_is_watching+0x15/0xb0
[  791.571429][T17411]  ? do_trace_netlink_extack+0x80/0x1d0
[  791.571459][T17411]  ? __lock_acquire+0x6df/0x2e40
[  791.571491][T17411]  ? __pfx___nla_validate_parse+0x10/0x10
[  791.571539][T17411]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  791.571556][T17411]  ? lockdep_hardirqs_on+0x7a/0x110
[  791.571569][T17411]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  791.571583][T17411]  ? mutex_lock_nested+0x152/0x1d0
[  791.571600][T17411]  ? rtnl_setlink+0x4ac/0x810
[  791.571621][T17411]  rtnl_setlink+0x571/0x810
[  791.571638][T17411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.571657][T17411]  ? __pfx_rtnl_setlink+0x10/0x10
[  791.571679][T17411]  ? __lock_acquire+0x6df/0x2e40
[  791.571692][T17411]  ? sock_sendmsg_nosec+0x13a/0x180
[  791.571708][T17411]  ? pointer+0x7c9/0xe10
[  791.571774][T17411]  ? lock_acquire+0x115/0x350
[  791.571809][T17411]  ? __pfx_rtnl_setlink+0x10/0x10
[  791.571826][T17411]  rtnetlink_rcv_msg+0x802/0xc00
[  791.571850][T17411]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  791.571869][T17411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  791.571887][T17411]  ? ref_tracker_free+0x668/0x820
[  791.571908][T17411]  ? __netlink_deliver_tap+0x600/0x880
[  791.571931][T17411]  ? netlink_deliver_tap+0x19c/0x1b0
[  791.571965][T17411]  ? netlink_unicast+0x7b8/0x990
[  791.571987][T17411]  ? netlink_sendmsg+0x813/0xb40
[  791.572009][T17411]  ? sock_sendmsg_nosec+0x13a/0x180
[  791.572023][T17411]  ? ____sys_sendmsg+0x565/0x870
[  791.572042][T17411]  ? ___sys_sendmsg+0x2a5/0x360
[  791.572060][T17411]  ? __x64_sys_sendmsg+0x1b7/0x290
[  791.572078][T17411]  ? do_syscall_64+0x17b/0x530
[  791.572092][T17411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.572114][T17411]  netlink_rcv_skb+0x226/0x4a0
[  791.572137][T17411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  791.572157][T17411]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  791.572197][T17411]  netlink_unicast+0x7f5/0x990
[  791.572227][T17411]  netlink_sendmsg+0x813/0xb40
[  791.572257][T17411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.572281][T17411]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  791.572306][T17411]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  791.572330][T17411]  ? arch_stack_walk+0xfb/0x150
[  791.572355][T17411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.572377][T17411]  sock_sendmsg_nosec+0x13a/0x180
[  791.572397][T17411]  ____sys_sendmsg+0x565/0x870
[  791.572427][T17411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  791.572460][T17411]  ? import_iovec+0x73/0xa0
[  791.572489][T17411]  ___sys_sendmsg+0x2a5/0x360
[  791.572513][T17411]  ? __lock_acquire+0x6df/0x2e40
[  791.572534][T17411]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.572586][T17411]  ? __fget_files+0x2a/0x420
[  791.572602][T17411]  ? __fget_files+0x3a8/0x420
[  791.572625][T17411]  __x64_sys_sendmsg+0x1b7/0x290
[  791.572651][T17411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  791.572688][T17411]  do_syscall_64+0x17b/0x530
[  791.572703][T17411]  ? irqentry_exit+0x10f/0x8f0
[  791.572718][T17411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.572733][T17411]  ? clear_bhb_loop+0x40/0x90
[  791.572755][T17411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.572774][T17411] RIP: 0033:0x7f888eeae019
[  791.572791][T17411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.572806][T17411] RSP: 002b:00007f888d106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.572825][T17411] RAX: ffffffffffffffda RBX: 00007f888f135fa0 RCX: 00007f888eeae019
[  791.572841][T17411] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  791.572854][T17411] RBP: 00007f888d106090 R08: 0000000000000000 R09: 0000000000000000
[  791.572866][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  791.572878][T17411] R13: 00007f888f136038 R14: 00007f888f135fa0 R15: 00007ffc07d491f8
[  791.572909][T17411]  </TASK>
[  791.573156][T17411] team0: Failed to send port change of device geneve1 via netlink (err -12)
[  791.637841][ T5763] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  791.766903][ T5763] usb 4-1: device descriptor read/64, error -71
[  791.878100][ T5763] usb usb4-port1: attempt power cycle
[  792.356546][ T5763] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  792.390995][ T5763] usb 4-1: device descriptor read/8, error -71
[  792.636613][ T5763] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  792.661191][ T5763] usb 4-1: device descriptor read/8, error -71
[  792.766874][ T5763] usb usb4-port1: unable to enumerate USB device
[  793.508116][T14181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  793.525703][T14181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  793.569489][T14181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  793.590636][T14181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  793.591395][T14181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  793.761253][T16145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.502457][T16145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.549091][T17445] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  794.549116][T17445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  794.557478][T17445] vhci_hcd vhci_hcd.0: Device attached
[  794.559172][T17445] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8)
[  794.559194][T17445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  794.559317][T17445] vhci_hcd vhci_hcd.0: Device attached
[  794.622460][T17449] vhci_hcd: connection closed
[  794.622760][T17446] vhci_hcd: connection closed
[  794.627356][ T2360] vhci_hcd vhci_hcd.3: stop threads
[  794.627379][ T2360] vhci_hcd vhci_hcd.3: release socket
[  794.627417][ T2360] vhci_hcd vhci_hcd.3: disconnect device
[  794.627707][ T2360] vhci_hcd vhci_hcd.3: stop threads
[  794.627721][ T2360] vhci_hcd vhci_hcd.3: release socket
[  794.627754][ T2360] vhci_hcd vhci_hcd.3: disconnect device
[  795.006142][T16145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.073072][T17426] wlan0 speed is unknown, defaulting to 1000
[  795.393006][T16145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.763730][T12129] Bluetooth: hci0: command tx timeout
[  796.305371][T17426] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.305652][T17426] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.305917][T17426] bridge_slave_0: entered allmulticast mode
[  796.328861][T17426] bridge_slave_0: entered promiscuous mode
[  796.347179][T17426] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.347445][T17426] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.347687][T17426] bridge_slave_1: entered allmulticast mode
[  796.368341][T17426] bridge_slave_1: entered promiscuous mode
[  796.577875][T17426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  796.593349][T17426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.717294][T16145] bridge_slave_1: left allmulticast mode
[  796.717317][T16145] bridge_slave_1: left promiscuous mode
[  796.717509][T16145] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.921011][T16145] bridge_slave_0: left allmulticast mode
[  796.921033][T16145] bridge_slave_0: left promiscuous mode
[  796.921191][T16145] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.746564][    T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  797.836984][T14181] Bluetooth: hci0: command tx timeout
[  797.907783][    T9] usb 4-1: Using ep0 maxpacket: 8
[  797.910290][    T9] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  797.910321][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  797.910344][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00
[  797.910356][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.913252][    T9] usb 4-1: config 0 descriptor??
[  797.981839][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input79
[  798.047526][T16145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.132777][T16145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.191842][T16145] bond0 (unregistering): (slave team0): Releasing backup interface
[  798.233648][T16145] bond0 (unregistering): Released all slaves
[  798.292473][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9
[  798.425003][T17426] team0: Port device team_slave_0 added
[  798.430681][T17426] team0: Port device team_slave_1 added
[  798.526191][ T4952] bcm5974 4-1:0.0: could not read from device
[  798.560240][T17426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  798.560268][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.560294][T17426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  798.563333][T17426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  798.563344][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.563366][T17426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.674030][    T9] usb 4-1: USB disconnect, device number 90
[  798.756703][ T8172] bcm5974 4-1:0.0: could not read from device
[  798.780196][T17426] hsr_slave_0: entered promiscuous mode
[  798.782621][T17426] hsr_slave_1: entered promiscuous mode
[  798.784582][T17426] debugfs: 'hsr0' already exists in 'hsr'
[  798.784605][T17426] Cannot create hsr debugfs directory
[  799.469051][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10
[  799.937034][T12129] Bluetooth: hci0: command tx timeout
[  800.176628][T16145] hsr_slave_0: left promiscuous mode
[  800.221409][T16145] hsr_slave_1: left promiscuous mode
[  800.236107][T16145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  800.236135][T16145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  800.260429][T16145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  800.260456][T16145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  800.467893][T16145] veth1_macvtap: left promiscuous mode
[  800.468064][T16145] veth0_macvtap: left promiscuous mode
[  800.468439][T16145] veth1_vlan: left promiscuous mode
[  800.468810][T16145] veth0_vlan: left promiscuous mode
[  800.487521][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880338e3c00: rx timeout, send abort
[  800.487749][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880338e3c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  801.239824][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2882'.
[  801.289202][T17557] netlink: 'syz.7.2883': attribute type 10 has an invalid length.
[  801.369025][T17558] netlink: 'syz.7.2883': attribute type 40 has an invalid length.
[  801.456582][    T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  801.606580][    T9] usb 4-1: Using ep0 maxpacket: 16
[  801.615468][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  801.615492][    T9] usb 4-1: config 0 has no interface number 0
[  801.617195][T16145] team0 (unregistering): Port device team_slave_1 removed
[  801.638151][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  801.638178][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.638198][    T9] usb 4-1: Product: syz
[  801.638212][    T9] usb 4-1: Manufacturer: syz
[  801.638226][    T9] usb 4-1: SerialNumber: syz
[  801.642700][    T9] usb 4-1: config 0 descriptor??
[  801.683790][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  801.695161][T16145] team0 (unregistering): Port device team_slave_0 removed
[  801.996613][T12129] Bluetooth: hci0: command tx timeout
[  802.017515][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11
[  803.229698][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2890'.
[  803.918087][    T9] gspca_spca1528: reg_r err -71
[  803.918183][    T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  803.951813][    T9] usb 4-1: USB disconnect, device number 91
[  804.590947][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12
[  805.416645][  T199] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  805.434960][T17626] base or size exceeds the MTRR width
[  805.587996][  T199] usb 4-1: Using ep0 maxpacket: 32
[  805.590492][  T199] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  805.590519][  T199] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  805.590555][  T199] usb 4-1: config 0 interface 0 has no altsetting 0
[  805.595071][  T199] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  805.595098][  T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.595117][  T199] usb 4-1: Product: syz
[  805.595132][  T199] usb 4-1: Manufacturer: syz
[  805.595146][  T199] usb 4-1: SerialNumber: syz
[  805.628497][  T199] usb 4-1: config 0 descriptor??
[  806.087492][  T199] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  806.497620][  T199] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  806.497933][  T199] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  806.543890][  T199] usb 4-1: USB disconnect, device number 92
[  807.411859][ T5701] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  807.473350][T17426] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  807.566914][ T5701] usb 4-1: Using ep0 maxpacket: 8
[  807.571347][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short
[  807.574004][ T5701] usb 4-1: config 10 has an invalid interface number: 151 but max is 0
[  807.574028][ T5701] usb 4-1: config 10 has no interface number 0
[  807.574089][ T5701] usb 4-1: config 10 interface 151 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[  807.574116][ T5701] usb 4-1: config 10 interface 151 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[  807.574143][ T5701] usb 4-1: config 10 interface 151 altsetting 134 has a duplicate endpoint with address 0xA, skipping
[  807.574166][ T5701] usb 4-1: config 10 interface 151 has no altsetting 0
[  807.577450][ T5701] usb 4-1: New USB device found, idVendor=0105, idProduct=145f, bcdDevice=67.1f
[  807.577476][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.577495][ T5701] usb 4-1: Product: syz
[  807.577515][ T5701] usb 4-1: Manufacturer: syz
[  807.577529][ T5701] usb 4-1: SerialNumber: syz
[  807.597748][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  807.604313][T17426] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  807.708088][T17658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  807.959879][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  807.980262][T17426] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  808.115036][ T5701] usb 4-1: USB disconnect, device number 93
[  808.129932][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  808.143562][T17426] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  808.221112][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  808.685311][T17426] 8021q: adding VLAN 0 to HW filter on device bond0
[  808.735787][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  808.893439][T17694] tc_dump_action: action bad kind
[  808.922538][T17426] 8021q: adding VLAN 0 to HW filter on device team0
[  808.956462][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.956622][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  809.020761][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.021057][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.635612][T17426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.801139][T14181] Bluetooth: hci4: command 0x0406 tx timeout
[  811.549838][T17426] veth0_vlan: entered promiscuous mode
[  811.617162][T17426] veth1_vlan: entered promiscuous mode
[  811.697137][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'.
[  811.772290][T17426] veth0_macvtap: entered promiscuous mode
[  811.794962][T17426] veth1_macvtap: entered promiscuous mode
[  811.844623][T17426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.902630][T17426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.958571][ T2354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.960831][ T2354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.960874][ T2354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.975494][ T2354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.893052][  T199] usb 4-1: new full-speed USB device number 94 using dummy_hcd
[  813.080376][  T199] usb 4-1: device descriptor read/64, error -71
[  813.335020][  T199] usb 4-1: new full-speed USB device number 95 using dummy_hcd
[  813.400889][T16150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.400909][T16150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.526522][  T199] usb 4-1: device descriptor read/64, error -71
[  813.637044][  T199] usb usb4-port1: attempt power cycle
[  813.755964][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.755984][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.064145][T17810] Device name not specified.
[  814.064145][T17810] 
[  814.097231][  T199] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  814.133397][  T199] usb 4-1: device descriptor read/8, error -71
[  814.355978][T17819] openvswitch: netlink: Message has 260 unknown bytes.
[  814.369311][  T199] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  814.399482][  T199] usb 4-1: device descriptor read/8, error -71
[  814.490743][T17824] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  814.519271][  T199] usb usb4-port1: unable to enumerate USB device
[  815.681672][T17872] openvswitch: netlink: Message has 260 unknown bytes.
[  817.776899][ T5701] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  817.779482][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'.
[  817.929860][ T5701] usb 1-1: Dual-Role OTG device on HNP port
[  817.930176][ T5701] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  817.930200][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.995421][ T5701] gspca_main: spca501-2.14.0 probing 0000:0000
[  818.002811][ T5701] gspca_spca501: reg write: error -32
[  818.002825][ T5701] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  818.002912][ T5701] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  818.004642][ T5701] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  819.434187][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2958'.
[  819.616649][ T5694] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  819.766688][ T5694] usb 4-1: Using ep0 maxpacket: 32
[  819.777715][ T5694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  819.777741][ T5694] usb 4-1: config 0 has no interfaces?
[  819.801240][ T5694] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  819.801269][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.801289][ T5694] usb 4-1: Product: syz
[  819.801303][ T5694] usb 4-1: Manufacturer: syz
[  819.801318][ T5694] usb 4-1: SerialNumber: syz
[  819.867987][ T5694] usb 4-1: config 0 descriptor??
[  820.017659][T18005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.074503][ T5701] usb 4-1: USB disconnect, device number 98
[  820.833537][T14181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  820.916301][T14181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  820.918069][T14181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  820.919086][T14181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  820.938495][T14181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  821.186530][ T5702] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  821.376576][ T5702] usb 4-1: Using ep0 maxpacket: 32
[  821.378689][ T5702] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  821.378716][ T5702] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  821.378738][ T5702] usb 4-1: config 0 interface 0 has no altsetting 0
[  821.381964][ T5702] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  821.381989][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.382008][ T5702] usb 4-1: Product: syz
[  821.382021][ T5702] usb 4-1: Manufacturer: syz
[  821.382035][ T5702] usb 4-1: SerialNumber: syz
[  821.410284][ T5702] usb 4-1: config 0 descriptor??
[  821.478399][   T37] audit: type=1326 audit(1785833221.312:639): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.478690][   T37] audit: type=1326 audit(1785833221.312:640): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.479281][   T37] audit: type=1326 audit(1785833221.312:641): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.479448][   T37] audit: type=1326 audit(1785833221.312:642): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.484897][   T37] audit: type=1326 audit(1785833221.312:643): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.485089][   T37] audit: type=1326 audit(1785833221.312:644): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.485242][   T37] audit: type=1326 audit(1785833221.312:645): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.485398][   T37] audit: type=1326 audit(1785833221.312:646): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.485577][   T37] audit: type=1326 audit(1785833221.312:647): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.485812][   T37] audit: type=1326 audit(1785833221.312:648): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18026 comm="syz.7.2970" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbd06e019 code=0x7ffc0000
[  821.950714][ T5702] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  822.136183][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'.
[  822.259276][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'.
[  822.352512][ T5702] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  822.352817][ T5702] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  822.381107][ T5702] usb 4-1: USB disconnect, device number 99
[  822.514897][T18015] wlan0 speed is unknown, defaulting to 1000
[  822.926156][T18057] overlayfs: failed to clone upperpath
[  822.960283][T18015] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.960678][T18015] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.961296][T18015] bridge_slave_0: entered allmulticast mode
[  822.964126][T18015] bridge_slave_0: entered promiscuous mode
[  822.968293][T18015] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.968700][T18015] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.968987][T18015] bridge_slave_1: entered allmulticast mode
[  822.972298][T18015] bridge_slave_1: entered promiscuous mode
[  823.045881][T12129] Bluetooth: hci2: command tx timeout
[  823.060549][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.090462][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.191224][T18015] team0: Port device team_slave_0 added
[  823.195254][T18015] team0: Port device team_slave_1 added
[  823.265771][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.265788][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.265814][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.430646][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.430656][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.430671][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.554950][T18015] hsr_slave_0: entered promiscuous mode
[  823.556267][T18015] hsr_slave_1: entered promiscuous mode
[  823.570374][T18015] debugfs: 'hsr0' already exists in 'hsr'
[  823.570400][T18015] Cannot create hsr debugfs directory
[  823.646622][ T5702] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  823.802132][ T5702] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  823.802161][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.802179][ T5702] usb 4-1: Product: syz
[  823.802192][ T5702] usb 4-1: Manufacturer: syz
[  823.802205][ T5702] usb 4-1: SerialNumber: syz
[  824.294140][ T5702] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  824.294201][ T5702] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  824.355872][T18015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.965368][T18015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.116795][T12129] Bluetooth: hci2: command tx timeout
[  825.302675][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2989'.
[  825.497074][T18015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.526639][ T5702] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  825.526692][ T5702] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  825.534567][ T5702] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  825.565755][ T5702] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  825.600629][ T5702] usb 4-1: USB disconnect, device number 100
[  825.933975][T18015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.361045][T17730] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  826.510306][T17730] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  826.510335][T17730] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  826.510355][T17730] usb 4-1: Product: syz
[  826.510368][T17730] usb 4-1: SerialNumber: syz
[  826.544908][T17730] usb 4-1: config 0 descriptor??
[  826.868813][T18015] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  826.900464][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  826.901424][T18015] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  826.953215][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  826.954073][T18015] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  826.999263][ T5763] usb 4-1: USB disconnect, device number 101
[  827.043356][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  827.044258][T18015] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  827.080660][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  827.196566][T12129] Bluetooth: hci2: command tx timeout
[  827.327883][T18015] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.360879][T18015] 8021q: adding VLAN 0 to HW filter on device team0
[  827.375623][T16148] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.375851][T16148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.440463][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.440636][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.478116][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2998'.
[  827.936625][ T5763] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[  828.050716][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.103505][ T5763] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  828.103534][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.103554][ T5763] usb 4-1: Product: syz
[  828.103568][ T5763] usb 4-1: Manufacturer: syz
[  828.103582][ T5763] usb 4-1: SerialNumber: syz
[  828.115883][ T5763] usb 4-1: config 0 descriptor??
[  828.133457][ T5763] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  828.764207][ T5763] gspca_stk1135: reg_w 0x3 err -71
[  828.765245][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765258][ T5763] gspca_stk1135: Sensor write failed
[  828.765290][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765299][ T5763] gspca_stk1135: Sensor write failed
[  828.765325][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765335][ T5763] gspca_stk1135: Sensor read failed
[  828.765359][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765368][ T5763] gspca_stk1135: Sensor read failed
[  828.765376][ T5763] gspca_stk1135: Detected sensor type unknown (0x0)
[  828.765407][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765416][ T5763] gspca_stk1135: Sensor read failed
[  828.765441][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765451][ T5763] gspca_stk1135: Sensor read failed
[  828.765474][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765484][ T5763] gspca_stk1135: Sensor write failed
[  828.765509][ T5763] gspca_stk1135: serial bus timeout: status=0x00
[  828.765518][ T5763] gspca_stk1135: Sensor write failed
[  828.765593][ T5763] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  828.766309][T18015] veth0_vlan: entered promiscuous mode
[  828.815045][ T5763] usb 4-1: USB disconnect, device number 102
[  828.954090][T18015] veth1_vlan: entered promiscuous mode
[  829.190764][T18167] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  829.268922][T18015] veth0_macvtap: entered promiscuous mode
[  829.276447][T12129] Bluetooth: hci2: command tx timeout
[  829.349355][T18015] veth1_macvtap: entered promiscuous mode
[  829.507589][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  829.591722][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  829.671523][T16148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  829.671731][T16148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  829.671768][T16148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.671801][T16148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  831.751887][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.751907][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.025219][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  832.025239][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.213060][T18215] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  832.427121][T18225] loop5: detected capacity change from 0 to 7
[  832.433581][T18225] Dev loop5: unable to read RDB block 7
[  832.433625][T18225]  loop5: unable to read partition table
[  832.433816][T18225] loop5: partition table beyond EOD, truncated
[  832.433834][T18225] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  832.482116][T18226] netlink: 'syz.7.3015': attribute type 1 has an invalid length.
[  832.508804][T18226] nftables ruleset with unbound set
[  832.610957][ T8172] Flush: task=udevd[8172] dev=loop5 state=2
[  832.719520][ T8172] Teardown: task=udevd[8172] dev=loop5 state=2
[  833.343528][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3022'.
[  833.451029][T18263] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  833.609885][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3025'.
[  833.895033][T18270] syzkaller1: entered promiscuous mode
[  833.895048][T18270] syzkaller1: entered allmulticast mode
[  834.293625][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  834.916188][T18285] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  835.033228][   T37] kauditd_printk_skb: 70 callbacks suppressed
[  835.033246][   T37] audit: type=1800 audit(1785833234.862:719): pid=18289 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.3034" name="file0" dev="overlay" ino=888 res=0 errno=0
[  835.104219][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'.
[  835.556533][ T5694] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  835.729642][ T5694] usb 4-1: config 0 has no interfaces?
[  835.734167][ T5694] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  835.734195][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.734215][ T5694] usb 4-1: Product: syz
[  835.734229][ T5694] usb 4-1: Manufacturer: syz
[  835.734244][ T5694] usb 4-1: SerialNumber: syz
[  835.750321][ T5694] usb 4-1: config 0 descriptor??
[  835.963097][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.963680][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.008797][ T5694] usb 4-1: USB disconnect, device number 103
[  836.792624][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'.
[  836.902860][T18313] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  837.179174][T14181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  837.263065][T14181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  837.265183][T14181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  837.296737][T14181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  837.303902][T14181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  838.571198][T18316] wlan0 speed is unknown, defaulting to 1000
[  838.843873][   T37] audit: type=1800 audit(1785833238.672:720): pid=18349 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.3047" name="file0" dev="overlay" ino=51 res=0 errno=0
[  839.518668][T12129] Bluetooth: hci3: command tx timeout
[  839.630307][T18316] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.630723][T18316] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.631081][T18316] bridge_slave_0: entered allmulticast mode
[  839.634807][T18316] bridge_slave_0: entered promiscuous mode
[  839.669865][T18316] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.670266][T18316] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.670535][T18316] bridge_slave_1: entered allmulticast mode
[  839.673929][T18316] bridge_slave_1: entered promiscuous mode
[  839.733281][T18316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.744270][T18316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.787938][T18316] team0: Port device team_slave_0 added
[  839.792297][T18316] team0: Port device team_slave_1 added
[  839.844336][T18316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.844349][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.844369][T18316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.849013][T18316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.849027][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.849068][T18316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.943497][T18316] hsr_slave_0: entered promiscuous mode
[  839.944765][T18316] hsr_slave_1: entered promiscuous mode
[  839.945742][T18316] debugfs: 'hsr0' already exists in 'hsr'
[  839.945765][T18316] Cannot create hsr debugfs directory
[  840.264821][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'.
[  840.322772][T18385] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  840.678419][T18316] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.452764][   T37] audit: type=1800 audit(1785833241.282:721): pid=18400 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.3057" name="file0" dev="overlay" ino=165 res=0 errno=0
[  841.454560][T18316] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.610937][T12129] Bluetooth: hci3: command tx timeout
[  841.882474][T18413] overlayfs: failed to resolve './file1': -2
[  842.247787][T18316] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.697085][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'.
[  842.715951][T18316] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.005991][T18441] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  843.683485][T12129] Bluetooth: hci3: command tx timeout
[  844.287429][T18316] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  844.335589][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  844.340404][T18316] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  844.380362][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  844.383230][T18316] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  844.459408][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'.
[  844.569170][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  844.574621][T18316] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  844.614742][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  845.031823][T18316] 8021q: adding VLAN 0 to HW filter on device bond0
[  845.039427][T18494] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  845.196699][T18316] 8021q: adding VLAN 0 to HW filter on device team0
[  845.236138][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.242926][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  845.318809][T16145] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.319113][T16145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.758101][T12129] Bluetooth: hci3: command tx timeout
[  846.192617][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'.
[  846.397116][T18533] netlink: 'syz.6.3080': attribute type 11 has an invalid length.
[  846.643644][T18544] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  847.358903][T18316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.722862][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'.
[  848.067225][T18316] veth0_vlan: entered promiscuous mode
[  848.149094][T18316] veth1_vlan: entered promiscuous mode
[  848.294939][T18316] veth0_macvtap: entered promiscuous mode
[  848.359979][T18316] veth1_macvtap: entered promiscuous mode
[  848.773899][T18316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  848.817660][T18316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  848.851554][ T1227] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  848.851819][ T1227] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  848.851859][ T1227] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  848.851895][ T1227] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.463095][   T37] audit: type=1326 audit(1785833249.292:722): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18586 comm="syz.6.3092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17bb71e019 code=0x0
[  850.013681][ T8095] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  850.245195][ T8095] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  850.245260][ T8095] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  850.245283][ T8095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.461183][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'.
[  850.494336][ T8095] gspca_main: stv0680-2.14.0 probing 041e:4007
[  850.757183][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.757203][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.027035][T16149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.027054][T16149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.611580][ T8095] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  851.611595][ T8095] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  852.117372][ T8095] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110
[  852.117398][ T8095] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  852.694051][ T8095] usb 4-1: USB disconnect, device number 104
[  852.999424][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'.
[  853.239555][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3106'.
[  854.786090][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3114'.
[  855.009512][T18705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3116'.
[  855.494275][T18716] 9p: Bad value for 'port'
[  855.701019][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3123'.
[  856.519799][T18737] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3129'.
[  856.834015][ T5694] hid_parser_main: 24 callbacks suppressed
[  856.834039][ T5694] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  856.834068][ T5694] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  857.051099][ T5694] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  857.256664][T18160] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  857.272863][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3132'.
[  857.411168][T18160] usb 4-1: unable to get BOS descriptor or descriptor too short
[  857.413133][T18160] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32
[  857.425672][T18160] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  857.425700][T18160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.425720][T18160] usb 4-1: Product: syz
[  857.425734][T18160] usb 4-1: Manufacturer: syz
[  857.425748][T18160] usb 4-1: SerialNumber: syz
[  857.435798][T18744] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  857.787518][T18762] netlink: 'syz.4.3135': attribute type 1 has an invalid length.
[  857.938178][T18762] netlink: 'syz.4.3135': attribute type 29 has an invalid length.
[  857.989433][T18755] netlink: 'syz.4.3135': attribute type 5 has an invalid length.
[  858.074759][T18160] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  858.270022][T18160] usb 4-1: USB disconnect, device number 105
[  858.720376][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3137'.
[  858.720411][T18784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3137'.
[  859.386122][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'.
[  860.369476][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'.
[  860.502667][ T5694] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  860.700647][ T5694] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  860.700677][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  860.700697][ T5694] usb 4-1: Product: syz
[  860.700711][ T5694] usb 4-1: SerialNumber: syz
[  860.720380][ T5694] usb 4-1: config 0 descriptor??
[  861.200623][T17730] usb 4-1: USB disconnect, device number 106
[  861.883097][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'.
[  862.054998][T18901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  862.055557][T18901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  863.576520][ T5710] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  863.729782][ T5710] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  863.729800][ T5710] usb 4-1: config 0 has no interface number 0
[  863.729870][ T5710] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  863.729895][ T5710] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  863.792384][ T5710] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  863.792414][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.792440][ T5710] usb 4-1: Product: syz
[  863.792454][ T5710] usb 4-1: Manufacturer: syz
[  863.792468][ T5710] usb 4-1: SerialNumber: syz
[  863.803662][ T5710] usb 4-1: config 0 descriptor??
[  863.834645][T18938] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  863.881130][ T5710] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  863.951115][ T5710] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  864.073005][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  864.279365][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.279996][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.497892][ T5780] usb 4-1: USB disconnect, device number 107
[  864.506232][ T5780] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  864.528810][ T5780] cyberjack 4-1:0.69: device disconnected
[  865.126671][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'.
[  866.564177][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'.
[  867.950846][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'.
[  868.346608][ T8095] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[  868.552024][ T8095] usb 4-1: not running at top speed; connect to a high speed hub
[  868.553237][ T8095] usb 4-1: config 1 interface 0 has no altsetting 0
[  868.556307][ T8095] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  868.582026][ T8095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.582049][ T8095] usb 4-1: Product: syz
[  868.582063][ T8095] usb 4-1: Manufacturer: syz
[  868.582078][ T8095] usb 4-1: SerialNumber: syz
[  868.825788][T19037] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3197'.
[  868.826027][T19037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  868.921461][T19037] msr: Write to unrecognized MSR 0x0 by syz.3.3197 (pid: 19037), tainting CPU_OUT_OF_SPEC.
[  868.921485][T19037] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  868.958314][ T8095] usb 4-1: USB disconnect, device number 108
[  869.991785][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'.
[  870.160703][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  870.346576][ T8095] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  870.496457][ T8095] usb 4-1: Using ep0 maxpacket: 16
[  870.498257][ T8095] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  870.498302][ T8095] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  870.498326][ T8095] usb 4-1: config 0 interface 0 has no altsetting 0
[  870.498351][ T8095] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  870.498364][ T8095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.503061][ T8095] usb 4-1: config 0 descriptor??
[  870.955123][ T8095] logitech-djreceiver 0003:046D:C51B.000B: ignoring exceeding usage max
[  870.968708][ T8095] logitech-djreceiver 0003:046D:C51B.000B: hidraw0: USB HID v0.01 Device [HID 046d:c51b] on usb-dummy_hcd.3-1/input0
[  871.132163][T19094] overlayfs: missing 'lowerdir'
[  871.253011][ T8095] usb 4-1: USB disconnect, device number 109
[  871.514788][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3213'.
[  871.748122][T19117] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3215'.
[  871.975334][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  872.093976][T19121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  872.143451][T19121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  872.705533][T19136] »»»»»»: renamed from vlan0 (while UP)
[  872.823366][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3222'.
[  873.453033][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3232'.
[  873.456551][  T823] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  873.482567][ T5702] IPVS: starting estimator thread 0...
[  873.580181][T19164] IPVS: using max 8 ests per chain, 19200 per kthread
[  873.606668][  T823] usb 4-1: Using ep0 maxpacket: 16
[  873.608610][  T823] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  873.608635][  T823] usb 4-1: config 0 has no interface number 0
[  873.608676][  T823] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  873.608701][  T823] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  873.611318][  T823] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  873.611344][  T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.611364][  T823] usb 4-1: Product: syz
[  873.611378][  T823] usb 4-1: Manufacturer: syz
[  873.611392][  T823] usb 4-1: SerialNumber: syz
[  873.685990][T19168] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3234'.
[  873.707315][  T823] usb 4-1: config 0 descriptor??
[  873.708039][T19154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  873.708144][T19154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  873.915106][T19154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  873.915213][T19154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  874.187182][  T823] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  874.522676][  T823] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  874.522706][  T823] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  874.523044][  T823] asix 4-1:0.34: probe with driver asix failed with error -71
[  874.546607][  T823] usb 4-1: USB disconnect, device number 110
[  874.711582][T19184] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  874.778432][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'.
[  875.112118][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3247'.
[  876.179992][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'.
[  876.336619][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'.
[  876.904396][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  876.969398][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'.
[  877.277093][ T5604] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  877.430213][ T5604] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  877.430242][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  877.430261][ T5604] usb 4-1: Product: syz
[  877.430275][ T5604] usb 4-1: SerialNumber: syz
[  877.433323][ T5604] usb 4-1: config 0 descriptor??
[  877.649135][ T5604] hso 4-1:0.0: Failed to find BULK eps
[  877.855823][ T8095] usb 4-1: USB disconnect, device number 111
[  877.989693][T19267] FAULT_INJECTION: forcing a failure.
[  877.989693][T19267] name failslab, interval 1, probability 0, space 0, times 0
[  877.989715][T19267] CPU: 0 UID: 0 PID: 19267 Comm: syz.7.3267 Tainted: G S           L      syzkaller #0 PREEMPT_{RT,(full)} 
[  877.989731][T19267] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  877.989736][T19267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  877.989743][T19267] Call Trace:
[  877.989747][T19267]  <TASK>
[  877.989753][T19267]  dump_stack_lvl+0xe8/0x150
[  877.989770][T19267]  should_fail_ex+0x467/0x600
[  877.989788][T19267]  should_failslab+0xa8/0x100
[  877.989799][T19267]  __kmalloc_noprof+0xfb/0x790
[  877.989814][T19267]  ? alloc_trace_uprobe+0x32/0x300
[  877.989829][T19267]  ? alloc_trace_uprobe+0x32/0x300
[  877.989857][T19267]  alloc_trace_uprobe+0x32/0x300
[  877.989888][T19267]  __trace_uprobe_create+0x9b5/0xe40
[  877.989925][T19267]  ? __pfx___trace_uprobe_create+0x10/0x10
[  877.989955][T19267]  ? __kmalloc_noprof+0x436/0x790
[  877.989980][T19267]  ? argv_split+0x18d/0x400
[  877.989990][T19267]  ? argv_split+0x18d/0x400
[  877.990003][T19267]  ? argv_split+0x378/0x400
[  877.990015][T19267]  trace_probe_create+0xce/0x130
[  877.990030][T19267]  ? __pfx___trace_uprobe_create+0x10/0x10
[  877.990045][T19267]  ? __pfx_trace_probe_create+0x10/0x10
[  877.990058][T19267]  ? lockdep_hardirqs_on+0x7a/0x110
[  877.990076][T19267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  877.990086][T19267]  ? mutex_lock_nested+0x152/0x1d0
[  877.990099][T19267]  ? dyn_event_create+0x20/0x70
[  877.990112][T19267]  dyn_event_create+0x4f/0x70
[  877.990124][T19267]  create_or_delete_trace_uprobe+0x65/0xa0
[  877.990135][T19267]  trace_parse_run_command+0x1f3/0x380
[  877.990152][T19267]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  877.990163][T19267]  ? __pfx_probes_write+0x10/0x10
[  877.990172][T19267]  vfs_write+0x29f/0xbb0
[  877.990189][T19267]  ? __pfx_vfs_write+0x10/0x10
[  877.990203][T19267]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  877.990213][T19267]  ? lockdep_hardirqs_on+0x7a/0x110
[  877.990223][T19267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  877.990233][T19267]  ? mutex_lock_nested+0x152/0x1d0
[  877.990245][T19267]  ? fdget_pos+0x252/0x320
[  877.990261][T19267]  ksys_write+0x156/0x270
[  877.990274][T19267]  ? __pfx_ksys_write+0x10/0x10
[  877.990291][T19267]  do_syscall_64+0x17b/0x530
[  877.990301][T19267]  ? irqentry_exit+0x10f/0x8f0
[  877.990311][T19267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.990322][T19267]  ? clear_bhb_loop+0x40/0x90
[  877.990335][T19267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.990347][T19267] RIP: 0033:0x7fe462dce019
[  877.990358][T19267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.990367][T19267] RSP: 002b:00007fe461026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  877.990379][T19267] RAX: ffffffffffffffda RBX: 00007fe463055fa0 RCX: 00007fe462dce019
[  877.990387][T19267] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004
[  877.990393][T19267] RBP: 00007fe461026090 R08: 0000000000000000 R09: 0000000000000000
[  877.990400][T19267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  877.990406][T19267] R13: 00007fe463056038 R14: 00007fe463055fa0 R15: 00007ffd80931238
[  877.990423][T19267]  </TASK>
[  877.990486][T19267] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI
[  877.990631][T19267] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[  877.990646][T19267] CPU: 0 UID: 0 PID: 19267 Comm: syz.7.3267 Tainted: G S           L      syzkaller #0 PREEMPT_{RT,(full)} 
[  877.990662][T19267] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  877.990666][T19267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  877.990672][T19267] RIP: 0010:path_put+0x24/0x60
[  877.990683][T19267] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48
[  877.990691][T19267] RSP: 0018:ffffc900055e79c8 EFLAGS: 00010203
[  877.990701][T19267] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888037ca9f40
[  877.990708][T19267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044
[  877.990713][T19267] RBP: ffffc900055e7b50 R08: ffffffff99d12fd7 R09: 0000000000000000
[  877.990720][T19267] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4
[  877.990728][T19267] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000
[  877.990735][T19267] FS:  00007fe4610266c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[  877.990743][T19267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  877.990750][T19267] CR2: 0000000000000000 CR3: 00000000589d6000 CR4: 00000000003526f0
[  877.990759][T19267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  877.990765][T19267] DR3: 00000000061f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  877.990772][T19267] Call Trace:
[  877.990776][T19267]  <TASK>
[  877.990780][T19267]  __trace_uprobe_create+0x53c/0xe40
[  877.990797][T19267]  ? __pfx___trace_uprobe_create+0x10/0x10
[  877.990811][T19267]  ? __kmalloc_noprof+0x436/0x790
[  877.990825][T19267]  ? argv_split+0x18d/0x400
[  877.990833][T19267]  ? argv_split+0x18d/0x400
[  877.990843][T19267]  ? argv_split+0x378/0x400
[  877.990853][T19267]  trace_probe_create+0xce/0x130
[  877.990866][T19267]  ? __pfx___trace_uprobe_create+0x10/0x10
[  877.990880][T19267]  ? __pfx_trace_probe_create+0x10/0x10
[  877.990893][T19267]  ? lockdep_hardirqs_on+0x7a/0x110
[  877.990902][T19267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  877.990911][T19267]  ? mutex_lock_nested+0x152/0x1d0
[  877.990923][T19267]  ? dyn_event_create+0x20/0x70
[  877.990934][T19267]  dyn_event_create+0x4f/0x70
[  877.990945][T19267]  create_or_delete_trace_uprobe+0x65/0xa0
[  877.990955][T19267]  trace_parse_run_command+0x1f3/0x380
[  877.990970][T19267]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  877.990983][T19267]  ? __pfx_probes_write+0x10/0x10
[  877.990999][T19267]  vfs_write+0x29f/0xbb0
[  877.991021][T19267]  ? __pfx_vfs_write+0x10/0x10
[  877.991050][T19267]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  877.991075][T19267]  ? lockdep_hardirqs_on+0x7a/0x110
[  877.991091][T19267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  877.991101][T19267]  ? mutex_lock_nested+0x152/0x1d0
[  877.991113][T19267]  ? fdget_pos+0x252/0x320
[  877.991124][T19267]  ksys_write+0x156/0x270
[  877.991135][T19267]  ? __pfx_ksys_write+0x10/0x10
[  877.991148][T19267]  do_syscall_64+0x17b/0x530
[  877.991158][T19267]  ? irqentry_exit+0x10f/0x8f0
[  877.991167][T19267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.991177][T19267]  ? clear_bhb_loop+0x40/0x90
[  877.991188][T19267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.991198][T19267] RIP: 0033:0x7fe462dce019
[  877.991207][T19267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.991215][T19267] RSP: 002b:00007fe461026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  877.991225][T19267] RAX: ffffffffffffffda RBX: 00007fe463055fa0 RCX: 00007fe462dce019
[  877.991233][T19267] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004
[  877.991240][T19267] RBP: 00007fe461026090 R08: 0000000000000000 R09: 0000000000000000
[  877.991246][T19267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  877.991252][T19267] R13: 00007fe463056038 R14: 00007fe463055fa0 R15: 00007ffd80931238
[  877.991262][T19267]  </TASK>
[  877.991270][T19267] Modules linked in:
[  877.991284][T19267] ---[ end trace 0000000000000000 ]---
[  877.991293][T19267] RIP: 0010:path_put+0x24/0x60
[  877.991302][T19267] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48
[  877.991310][T19267] RSP: 0018:ffffc900055e79c8 EFLAGS: 00010203
[  877.991319][T19267] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888037ca9f40
[  877.991325][T19267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044
[  877.991332][T19267] RBP: ffffc900055e7b50 R08: ffffffff99d12fd7 R09: 0000000000000000
[  877.991339][T19267] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4
[  877.991346][T19267] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000
[  877.991353][T19267] FS:  00007fe4610266c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[  877.991361][T19267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  877.991368][T19267] CR2: 0000000000000000 CR3: 00000000589d6000 CR4: 00000000003526f0
[  877.991377][T19267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  877.991383][T19267] DR3: 00000000061f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  877.991415][T19267] Kernel panic - not syncing: Fatal exception
[  877.991681][T19267] Kernel Offset: disabled