last executing test programs:

9.397404732s ago: executing program 3 (id=400):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x0, 0x1, 0x400fa11, 0xfc000001}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f0000000780)='^', 0x1, 0x0, 0x0, 0x0) (async)
sendto$inet(r3, &(0x7f0000000780)='^', 0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[])
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x1000)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r5}, 0x8)
listen(r3, 0xda90)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000"], 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x4e22}, 0x10, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x321}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x321}}}, 0x108)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x6)
syz_open_dev$dri(&(0x7f0000000080), 0x8c0, 0x2000) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x8c0, 0x2000)

6.389671962s ago: executing program 0 (id=409):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$evdev(0x0, 0x2, 0x842)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x800007, &(0x7f0000000380)={0x0, 0x30bf, 0x4000, 0x408, 0x3b8})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) (async)
ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01260000000000000000090000002c0004801300010062726f6164636173742d6c696e84d8246b62000000078006000500020000000815030081000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async)
r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000180)=0x1f4, 0x4)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000880)=0x8, 0x4) (async)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000880)=0x8, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r7, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x2}) (async)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000041}, 0x0)

6.163344553s ago: executing program 4 (id=410):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103)
syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa7d, 0xffffffff5d284e84, 0xe0b, 0x7ff, 0x6, 0x5, 0x0, 0x0, 0x100, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x411, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f04000000000000003030303030303030303030307365725f69643d00"/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'fuse\x00'}}, 0x2e)

6.035364548s ago: executing program 1 (id=411):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000100)=0xd, 0x8, 0x0)
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=<r1=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0)

5.853922911s ago: executing program 2 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f00003de000/0x4000)=nil, 0x4000, 0x9)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@random="80b25afff6b8"]})

5.725708207s ago: executing program 3 (id=413):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x3, 0xff) (rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x80003, 0x6) (rerun: 32)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.462400484s ago: executing program 0 (id=414):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)
io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318})
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r1 = syz_usb_connect(0x6, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x35, 0xa4, 0xae, 0x40, 0x13fd, 0x3609, 0x209, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x83, 0x0, 0x0, 0x39, 0xea, 0x8e, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "52a7e542"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x3, 0x6a}, {0x6, 0x24, 0x1a, 0x0, 0x40}, [@obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xfa, 0xb9, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x5}]}]}}]}}]}}, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
ioctl(r2, 0xc4c85513, &(0x7f0000000200)) (async)
sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0xdfb, 0x5}})

5.328638633s ago: executing program 3 (id=415):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRES8], 0x40)
r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
fanotify_init(0x200, 0x1000) (async)
dup(r2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40000, 0xfffffffffffffffc, &(0x7f0000006680)) (async)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r4, {0x3}}, './file0\x00'})
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000380)=[{{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x5, 0x1, 0x1}, {0x4}}, {{0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1}}], 0x48) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4008af25, &(0x7f0000000340)=0x1) (async)
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (async)
recvmmsg(r6, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)=""/170, 0xaa}], 0x1}, 0x1}], 0x1, 0x40000041, 0x0) (async)
write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '-', 0x3a, '\xc8rF\xcf$,%\x9f7M\xef,', 0x3a, './cgroup', 0x3a, [0x46]}, 0x36)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r9, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2000000, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc02c5625, &(0x7f0000002940)={0x1c0f0f000, 0x102, "9a0f016cc966e134d14000aaaa7da80f8784a1321e3a6ffdb508000000000028", 0xffffdfffff7fa4c5, 0x9, 0xf36, 0x46, 0x8, 0x45, 0x10, 0x3, [0x5, 0x4, 0x0, 0x2dc]}) (async)
syz_clone(0xd802680, 0x0, 0x2e, 0x0, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5.178215268s ago: executing program 2 (id=416):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x14, 0xc0000)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x0, 0xd7d8, 0x2, 0x0, 0x3, 0x20002, r1}) (async)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x140e, 0x10, 0x5, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008085}, 0x4050) (async)
ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000300)={0x5, 0x8})
r4 = syz_open_dev$evdev(&(0x7f0000000340), 0x7, 0x2200c0)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000380)={0x3a, 0xf9e3, 0x7, 0x7, 0x1}) (async, rerun: 32)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) (rerun: 32)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000005c0)={{<r5=>r3, &(0x7f0000000440)='\x00', 0x101200, &(0x7f0000000480)={@align=0xffff, {0x3, 0x0, 0x2, 0x1000}}, 0x101, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xa}, {[0x7, 0x9, 0xe, 0x7]}, 0x7fffffff, 0x69, &(0x7f0000000540)=""/105})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) (async)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000006c0), &(0x7f0000000700)=0x8)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000740)=0x2ff8, 0x4) (async, rerun: 64)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) (rerun: 64)
sendmsg$nl_generic(r5, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x11c, 0x42, 0x8, 0x70bd2b, 0x25dfdbfb, {0xf}, [@typed={0xc, 0x21, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0x55}, @generic="4bb3f4e5ecc98691922993b30ffcf9f828ce31c56540783b9b198bd35662a7434917c245e02c7889c9aab3f71c24b14f9f8c1a62145d70483138b3c461838a79597b5cd6c09e8d230044f75e5b49942fdbbc8d687907ca3d678df7f939798322eeea10b73f55d0bdac165cfbb3bce4e06bdaaa69c97ad90bb3a74956ac30be48ec3baa97332bf7a642bc8cbbef1dd4d1894b55946cf63afca99c13fd7fb0adedd220e347522c4e48268ecea2dad0ca752560daae151f7e88265937f45b33a8145301da3deb", @typed={0x14, 0xb6, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xeb, 0x0, 0x0, @uid=r6}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@mcast1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r7=>r5, {0x1}}, './file0\x00'})
write$binfmt_script(r7, &(0x7f0000000b00)={'#! ', './file0', [{0x20, '{'}, {0x20, '$\\\x81{&w/'}], 0xa, "ff24aa92428bf35aee358c3a4291c59d31819639f118c8336adb7f58b386847c80957ad53c1821b05d58fb0c8a2d9a5df61e3e77fcd4afabce7d70527a8137da8077adf614c3e7e76fb86ac8544beaccdb38924ab0575fef5d1be115ee1427ca5188d403e9fd614493ac6d8f52fa54f081d76a5578a659e1e61c00ea3dc865ba15cc177fce51919b2febff5c49e0f566118a6752868f22dd4ed14f227b2a4d03f8bffe1f4247f1aa06914bad148a9571ac587ac1606c0f09ecb1906be3ce3639e5"}, 0xd6) (async, rerun: 32)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000c00)={0x0, 0x0, {0x2d, 0x2c, 0x3, 0x19, 0xa, 0x6, 0x5, 0x62}}) (async, rerun: 32)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000c40)={0x0, 0x11, 0x80, 0x0, "bedb8686e3a8f634b6bccb9bfc18a70929c70582563ec442f97f77337c51dee1"}) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={<r8=>0x0, 0x6}, &(0x7f0000000cc0)=0x8) (rerun: 32)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000d00)={r8, 0x78, "eda598ae9cad491b01d8ad64b7b69aac1ef08029a11997a18b27b10ddf7da769a0289e62c5f4c2678c6fae9832a5fa671137aa3bb325a3b77369c99bea0f1e63e3f4fab6ed3aa8767728daca83f037dd8d403fee0651d3a454e5574a395bb8a615aadbf425720872d1e3450715035001034ec83bf58dd007"}, &(0x7f0000000d80)=0x80) (async)
setsockopt$inet6_group_source_req(r7, 0x29, 0x5, &(0x7f0000000dc0)={0x1, {{0xa, 0x4e22, 0xffffffc2, @mcast2, 0x2}}, {{0xa, 0x4e21, 0x7fff, @private2, 0x1}}}, 0x108) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan1\x00'}) (async, rerun: 32)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000f40), &(0x7f0000000f80)=0x8) (rerun: 32)
epoll_pwait(r7, &(0x7f0000000fc0)=[{}, {}], 0x2, 0xfffffffa, &(0x7f0000001000)={[0x3b1]}, 0x8)
nanosleep(&(0x7f0000001040), &(0x7f0000001080))
openat$cgroup_ro(r5, &(0x7f00000010c0)='cpuacct.stat\x00', 0x0, 0x0)

5.079772527s ago: executing program 3 (id=417):
rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0)
unshare(0x22020600)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201)
write(r0, &(0x7f0000000540)="19718f3d240000005043b5c7ed4a46be89d283b62d1fee60d46ec7c45b9f1f6affc0fac97ffcedaa797e1bff1ff0b3a0", 0x30)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300))
r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x40ec, 0x2, 0x3, 0x295})
socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000008, 0x810, r0, 0xec776000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030426bd7000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x44}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x43, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x14d, 0x9, 0x5f, 0xc, 0x5, 0xffffad37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x7, 0x1, 0x3, 0x9, 0x40000001, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff1, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0xc, 0x3, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea7, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x7fffffff, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x1, 0xa, 0x4, 0x9, 0x8, 0xffffff75, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93694, 0x42, 0xa], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x8003, 0x4, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x5, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x7, 0x6d01, 0x5, 0x4000038, 0x1800, 0x200, 0x7e, 0xc, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x6, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0x0, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x24000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x8, 0x10000, 0x6, 0x7ffe, 0x7fffffff, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0x0, 0x6, 0xffffffff, 0x80000000, 0x2, 0x8, 0x5, 0xee1, 0xfffff002, 0xffff, 0x3, 0x7f, 0x108, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x40000001, 0x0, 0x4, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x2, 0x4, 0xb0b2747, 0x4, 0x1, 0x2, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0)
preadv(r6, &(0x7f0000002c80)=[{&(0x7f00000002c0)=""/244, 0xf4}], 0x1, 0x200, 0x3)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000b80), 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x54, 0xb0cf5, 0x10000000, 0x2, 0x6, 0x5, 0x80000001, 0x0, 0x2, 0x20})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0xfffffffc, 0xe1d9, 0x1101, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f0000000240)={0x800100, 0x63, 0xfffffffe, 0x8, 0x9, 0x6})

5.060938508s ago: executing program 4 (id=418):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x40, 0x79b57fa2, @remote}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000380)=0x7, 0xd641)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
sendmsg$sock(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000300)="16300db6", 0x4}], 0x2}, 0x801)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})

4.92579228s ago: executing program 2 (id=419):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

4.78263803s ago: executing program 1 (id=420):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r6, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff68}}, 0x1006)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3281004000080dc880c88d1a0d0d206dc0f2af004500010001ac1414936c00004e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESOCT=r3, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES32=r0], 0x0)

4.577746439s ago: executing program 1 (id=421):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
openat(r0, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={<r1=>0x0, 0x8, 0x8, 0x8}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000740)={r1, 0x8}, &(0x7f0000000780)=0x8)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x4, 0x433})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1b)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="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"}], 0x2)

4.547175458s ago: executing program 2 (id=422):
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x200})
openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xffffffffffffffdf, 0x1000000000000, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, 0x0, &(0x7f0000000140), &(0x7f0000000080))
io_uring_enter(r3, 0x1000002, 0xfffffffd, 0xa5, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000440)='\x00', 0xffffffffffffffff)
mkdir(0x0, 0x22)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}}, 0x804)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00001709000100"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(r5)
socket(0x10, 0x803, 0x0)
r6 = syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000480)={0x0, @reserved})
r7 = socket(0x10, 0x803, 0x0)
accept4$unix(r7, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

4.546029331s ago: executing program 4 (id=423):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x29, 0x3e, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901)
fchdir(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r2, &(0x7f00000059c0)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20)
preadv(r2, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/152, 0x98}], 0x1, 0x4, 0x10)
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0)
landlock_restrict_self(r4, 0x0)
socket(0x2b, 0x2, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40830}, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040))
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108)
clock_settime(0xfffffff1, &(0x7f0000000140))
socket(0x80000000000000a, 0x2, 0x0)

4.421538521s ago: executing program 3 (id=424):
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) (async)
r1 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}})
socket$inet6(0xa, 0x4, 0x15278441) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10000000000002a9, [{}, {0x0, 0x100000000000000}]}, 0x68) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0)
sendmmsg(r6, &(0x7f0000000fc0)=[{{&(0x7f0000000340)=@ll={0x11, 0x1b, r3, 0x1, 0x42, 0x6, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="0745509fe994f535cb2c6ac903a33ad02d18775d883eea20575572f9b2a6c7f907f7853f886a79a9bf1b16", 0x2b}, {&(0x7f0000000500)="85b1022a41ee93c3db81e04cc75a5c84308a49c40ea22563e3f870051a0e2e96dc6baafe402923b0a1ae92f15484d5705b99ab6e6572c693f8f91a787c28a11d727886c8053a80cf995f603adc", 0x4d}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000029000000030000008398630077ff94ee48000000000000000600000088000000071e10fd8f80ca24d075e67d2f012fe289981258c8753f91ecc00f83bb2b6a248405408ee1660ced499a00b48181bf42f2021a21ce000000900000000000000009010000ff0100001b0b2b37932458c54b3004f689bff044190e4a5e2a7e993aef28ccba5207571461224c13d31e8625b1e4cf1fda90ca769ff7952c2885a09d755454ab01f75dd8776a2c130185bb13f48b170aa5fe9d1ef5a46378116cb2433e29f4284842be95132c073bc49e"], 0x1b8}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x3, {0xa, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="9afd048a611c07a1b3763584b037f8feb0fb8eccdc6846624d6081568848c21496d864000000000000f7cdfb992735118dcd95fd420868cb04d73c6d80c9f4c29be9f784d7b8250600000000000000a728f8a2526e0954bbbc5c3521849259b9af640caa2109d81aa2469756158d030249e08b772ffb6bc1ad758b2eafe3cbad8df0f952da6ba12c8b1dde73892e42e87e3b4a4693b976c446294f674600"/172, 0xac}, {&(0x7f0000000a80)="e4e9787972f604585c0738b0956174cf6baf8ad342a5b666a244bfa266a937aa8a10abb98da16080581e555490346f66e26bec97faf7acb3efb00548c2cec2be29226bf2ebf79e06ce414226edf1955aa9692e74b78688d83b30059352387258de0d1effff8cee9fb1c3397db9c3ef19e3e70d44006c5625ba005a2fc6dafd421a09beb388170bfa03d5ecd436c82d54ecf9eecc1fed39ea026294d9ae0f137f68cf717e01d106fafc09803f760d1ef38f55773d", 0xb4}, {&(0x7f0000000b80)="ac39fbe9a242dcf6376873f7d56bf1714974bea7940d310b", 0x18}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000cc0)="d8b9789ffd6394c4b7d81363516a672d101454ee33d8753c9217cb65933e246919f454165cd1e5e30eedbc84a719e3c580f1cbb73090e4e2907bded6b90bbd730ce0647ab3b7fb40afd4ec4d2b36dc7fab53e59213d983b2e1d3f55c22cc102280bc758c1574ee91ac86de6ba9436f06b421002f61b2714427e3a3f410f2b6358bdc125683d06852ebb88358005a06ccecbcc51a6187c65a76b20672677bab3129a94f064de0d6469f853ed8ce6ccca36567480b7881ba6f70b1e3d6077a6b72c2f42a1ebce26a19b832f49632dbb96617c27318198aed63c1", 0xd9}], 0x5, &(0x7f0000000e40)=[{0x100, 0x3a, 0x3, "36c12a01b2dc74402601287021d9ecd8449a19aab0ef3f382b1d65d7cea550aa82e28ca5443795b753b694b15931dd6cfde21cc77a0a25940ba5d5f0c3f3d394dcb57dd4733598ebbcf82251ae11d53564876f85188f262963c9827fabed64493d1dde791e21b3af4326e603b5d06c24006fff5669fa7f37c25d7bdfd759faa54b92a52cc3edea35cf771f95ce66e68154e1e2707f83c341147d06bfc4a019f1688181d11292d3117569571d118e077cec83c8869e90e518bfbc028fecb5269af7a34b7a78ca4ad9660632e652146a0b4ab76ea38d3d8833bb446ce93eead1031bfdb2e469b838e87513"}], 0x100}}], 0x2, 0x4000) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES16=r3, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) (async)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) (async)
ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000000)={0x30a32c0, 0x2, @ofdm={0x1, 0x1b, 0xc, 0x1e, 0x3, 0x6}}) (async)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4.130210395s ago: executing program 4 (id=425):
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
preadv2(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000080)=""/207, 0xcf}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/1, 0x1}], 0x7, 0x800, 0x4, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}})

3.909883358s ago: executing program 4 (id=426):
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0)
r1 = socket$inet(0x2, 0xa, 0x6)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000640), 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

3.526852479s ago: executing program 2 (id=427):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7b030400000404030204"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0180000000000000fffc"], 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x7})
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84080)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe2d}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x16, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x63441502}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$IPSET_CMD_DEL(r4, 0x0, 0x14)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)

2.178003361s ago: executing program 0 (id=428):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000001c0)={'wlan0\x00', @ifru_flags=0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x2, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x64}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000600)=ANY=[@ANYBLOB="c813000008021100000008021100000108021100000000000802110000020000"], 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4})
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0xd, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x0, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0xfffffffffffffc41}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
shutdown(r6, 0x0)
sendto$inet(r8, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f000008f000/0x3000)=nil, 0x0}, 0xa9)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d})
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)

1.837730915s ago: executing program 1 (id=429):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80482, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x56) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
mprotect(&(0x7f0000754000/0x1000)=nil, 0x1000, 0x1000003) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009623130609ff03e7e036042a0008270200000083040000000b09"], 0x0}, 0x0)

1.310858807s ago: executing program 2 (id=430):
syz_open_dev$usbfs(0x0, 0x75, 0x109301)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x5}}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0xa}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030400000000000924050000f8211cfd0924030500000004000724050401"], 0x0)

1.145586938s ago: executing program 3 (id=431):
r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x8, 0x85e8, 0x100000000000, 0xb, 0x1, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x81, 0x4, 0x2, 0x1843e0, 0x200, 0x3]}, &(0x7f0000000200)=0x100)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x520141)
ioctl(r3, 0xc4c85512, &(0x7f0000000200))
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x148, 0x1a, 0x633, 0x70bd29, 0x25dfdbfd, {{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0xffffffffffffff20}, {0xa58, 0x0, 0x200000000}, {}, 0x70bd2b, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_reorder_window={0x6, 0x25, 0x3}]}, 0x148}}, 0x200080d4)
setsockopt$sock_int(r6, 0x1, 0x46, 0x0, 0x0)
write$cgroup_subtree(r5, 0x0, 0xfe33)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
sched_getattr(r8, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
stat(0x0, 0x0)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0)
name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000000fefffff000f142000051000000097fa052b8dd59331d749f8f4ee41ec18cc50bf64aaa9ea3ae72c565db0f8b6388ee31b47bfe62a2f58c40c937754b48839290ef2ae3ca2d6e2537e4e34cf10e9576e9fa673d73a80d6eb04000feae9c08491d772e62edc2a9ac46810bc9"], &(0x7f0000000140), 0x400)

572.706097ms ago: executing program 0 (id=432):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000032020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073"], 0x120}}, 0x0)

475.514571ms ago: executing program 0 (id=433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

157.108112ms ago: executing program 1 (id=434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000)

155.76792ms ago: executing program 4 (id=435):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r3=>0x0})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x4008054)

11.483188ms ago: executing program 0 (id=436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
madvise(&(0x7f00003d2000/0x1000)=nil, 0x1000, 0xe)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000000540)=""/164, 0xa4}], 0x3}}], 0x1, 0x100, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0)
write$dsp(r2, &(0x7f0000000080)="5cba91a4", 0x4)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
r3 = gettid()
syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2dff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r4, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)
r6 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0)
readv(r6, &(0x7f00000000c0)=[{0x0}], 0x1)
read$midi(r6, &(0x7f00000002c0)=""/91, 0x5b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

0s ago: executing program 1 (id=437):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000200)='GPL\x00', 0x3ff, 0xfc, &(0x7f0000000240)=""/252, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x7ff, 0xffffff66}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3], &(0x7f00000004c0), 0x10, 0x1}, 0x94)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000780)={<r5=>0x0, @initdev, @local}, &(0x7f00000007c0)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r2, 0x20, &(0x7f0000000a00)={&(0x7f0000000880)=""/123, 0x7b, <r6=>0x0, &(0x7f0000000900)=""/198, 0xc6}}, 0x10)
r7 = gettid()
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000c00)={@local, <r8=>0x0}, &(0x7f0000000c40)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000e40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x150, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2464016367fc6b6b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x41}, 0x8850)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r9=>0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r13, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x40, 0x23, 0xc9, {0xc9, 0xf, "4faf01956d531a0a0e434e7cbb2d79d3f2e61371207b410af967e9a2ca81749815a6c3b0dc2725e928ca9d9847a981712b923f46fe132024a10b334bb9a7f127fd9a549a0628302aa7785dc3a574b5856bdf5b307d7bf9d4f125cd352af2697922ff33d13a660b05379d3e383f11d07165a39560a1c64cb4ac478f811db9cfaafdf29393e0c41132228b6e6c7f7513300303c12fdebcba028318431d4ed99c8b491a843242e549bf2d1779d05350838d877cbeef45147d0e325a1d76d1a99e5bdd52048aa7e229"}}, 0x0}, 0x0)
ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r10, r14, 0x0, 0x20000023896)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r2, <r15=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x19, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd161, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x5, 0x7, 0x9, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x1, 0x1, 0xa, 0x0, 0x8}, @generic={0x3, 0xa, 0x5, 0x4, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @alu={0x4, 0x1, 0x6, 0x6, 0x7, 0xc}, @generic={0x0, 0x8, 0x6, 0x3, 0xe}, @ldst={0x3, 0x1, 0x3, 0x1, 0x3, 0x3e, 0x10}, @generic={0x2, 0xb, 0x7, 0x1167, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f0000000680)='GPL\x00', 0x14, 0x4c, &(0x7f0000000700)=""/76, 0x4b86fab033b52a3b, 0x9, '\x00', r5, @cgroup_skb=0x1, r2, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x4, 0x3ff, 0xfffffffc}, 0x10, r6, r4, 0x0, &(0x7f0000000ac0)=[r3, r3, r15, r3, r2, r2], 0x0, 0x10, 0x5}, 0x94)

kernel console output (not intermixed with test programs):

182617][ T1072] dvb-usb: bulk message failed: -22 (5/0)
[  116.182632][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  116.310865][ T1072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  116.314523][ T6149] tipc: Disabling bearer <eth:syzkaller0>
[  116.336201][ T1072] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  116.336279][ T1072] usb 4-1: media controller created
[  116.406794][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.115'.
[  116.421565][ T6159] netlink: 104 bytes leftover after parsing attributes in process `syz.4.116'.
[  116.456537][ T6148] dvb-usb: bulk message failed: -22 (7/0)
[  116.456565][ T6148] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  116.456628][ T6148] ttusb2: i2c transfer failed.
[  116.582565][ T1072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  116.705730][ T1072] usb 4-1: selecting invalid altsetting 3
[  116.705753][ T1072] ttusb2: set interface to alts=3 failed
[  116.891656][ T1072] DVB: Unable to find symbol tda10086_attach()
[  116.891675][ T1072] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  116.892633][ T1072] dvb-usb: bulk message failed: -22 (4/0)
[  116.892654][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  116.894213][ T1072] dvb-usb: bulk message failed: -22 (5/0)
[  116.894233][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  116.894305][ T1072] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  116.919545][ T1072] usb 4-1: USB disconnect, device number 22
[  116.964401][ T5698] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  117.090196][ T5698] usb 3-1: device descriptor read/64, error -71
[  117.183783][ T1072] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  117.322215][ T6179] xt_hashlimit: max too large, truncated to 1048576
[  117.328545][ T5698] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  117.468548][ T5698] usb 3-1: device descriptor read/64, error -71
[  117.585055][ T5698] usb usb3-port1: attempt power cycle
[  117.919207][ T5698] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  117.942522][ T5698] usb 3-1: device descriptor read/8, error -71
[  118.022614][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'.
[  118.091566][   T30] kauditd_printk_skb: 210 callbacks suppressed
[  118.091588][   T30] audit: type=1326 audit(1790269523.061:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.093564][   T30] audit: type=1326 audit(1790269523.061:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157146][   T30] audit: type=1326 audit(1790269523.071:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157202][   T30] audit: type=1326 audit(1790269523.071:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157243][   T30] audit: type=1326 audit(1790269523.071:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157316][   T30] audit: type=1326 audit(1790269523.071:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157361][   T30] audit: type=1326 audit(1790269523.101:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.157405][   T30] audit: type=1326 audit(1790269523.101:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.189550][   T30] audit: type=1326 audit(1790269523.151:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.189708][   T30] audit: type=1326 audit(1790269523.151:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x7ffc0000
[  118.208837][ T5698] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  118.261593][ T5698] usb 3-1: device descriptor read/8, error -71
[  118.372019][ T5698] usb usb3-port1: unable to enumerate USB device
[  118.873278][ T6206] syzkaller0: entered promiscuous mode
[  118.873304][ T6206] syzkaller0: entered allmulticast mode
[  118.918715][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'.
[  118.973978][ T6206] tipc: Started in network mode
[  118.974017][ T6206] tipc: Node identity aaa83469a62e, cluster identity 4711
[  118.974257][ T6206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.977443][ T6204] tipc: Resetting bearer <eth:syzkaller0>
[  119.040966][ T6204] tipc: Disabling bearer <eth:syzkaller0>
[  119.068148][ T6210] netlink: 32 bytes leftover after parsing attributes in process `syz.4.129'.
[  119.301325][ T6217] netlink: 'syz.4.131': attribute type 32 has an invalid length.
[  119.455508][ T6182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.124'.
[  119.559068][  T988] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  119.608566][ T5698] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  119.708750][  T988] usb 4-1: Using ep0 maxpacket: 32
[  119.709759][  T988] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  119.715001][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.715031][  T988] usb 4-1: Product: syz
[  119.715048][  T988] usb 4-1: Manufacturer: syz
[  119.715063][  T988] usb 4-1: SerialNumber: syz
[  119.725004][  T988] usb 4-1: config 0 descriptor??
[  119.768526][ T5698] usb 2-1: Using ep0 maxpacket: 8
[  119.769271][ T5698] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  119.773310][ T5698] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  119.773360][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  119.773389][ T5698] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.773415][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  119.773443][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  119.851569][ T5698] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  119.851624][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  119.851654][ T5698] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.851680][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  119.851707][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  119.852746][  T988] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  119.852999][  T988] dvb-usb: bulk message failed: -22 (4/0)
[  119.853017][  T988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  119.853164][  T988] dvb-usb: bulk message failed: -22 (5/0)
[  119.853179][  T988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  119.854542][ T5698] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  119.854593][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  119.854621][ T5698] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.854648][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  119.854675][ T5698] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  120.006154][  T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.007796][ T5698] usb 2-1: string descriptor 0 read error: -22
[  120.007937][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.012273][  T988] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  120.012427][  T988] usb 4-1: media controller created
[  120.057098][  T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.127926][ T5698] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  120.202969][  T988] usb 4-1: selecting invalid altsetting 3
[  120.202993][  T988] ttusb2: set interface to alts=3 failed
[  120.273963][  T988] DVB: Unable to find symbol tda10086_attach()
[  120.273984][  T988] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  120.295169][  T988] dvb-usb: bulk message failed: -22 (4/0)
[  120.295196][  T988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  120.295330][  T988] dvb-usb: bulk message failed: -22 (5/0)
[  120.295345][  T988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  120.295414][  T988] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  120.374360][  T988] usb 4-1: USB disconnect, device number 23
[  120.551730][  T988] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  120.862918][   T44] usb 2-1: USB disconnect, device number 20
[  121.037610][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.143'.
[  121.178222][ T6268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.388495][ T5698] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  121.540196][ T5698] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  121.567357][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.567387][ T5698] usb 4-1: Product: syz
[  121.567401][ T5698] usb 4-1: Manufacturer: syz
[  121.567416][ T5698] usb 4-1: SerialNumber: syz
[  121.581115][ T5708] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  121.655741][ T5698] usb 4-1: USB2VGA dongle found at address 24
[  121.694557][ T5698] usb 4-1: Allocated 8 output buffers
[  121.730624][ T1072] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  121.734941][ T5708] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  121.774027][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.774059][ T5708] usb 3-1: Product: syz
[  121.774075][ T5708] usb 3-1: Manufacturer: syz
[  121.774091][ T5708] usb 3-1: SerialNumber: syz
[  121.888534][ T1072] usb 5-1: Using ep0 maxpacket: 16
[  121.891101][ T1072] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  121.896145][ T1072] usb 5-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config
[  121.896177][ T1072] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  121.935235][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  121.935263][ T1072] usb 5-1: Product: syz
[  121.935307][ T1072] usb 5-1: Manufacturer: syz
[  121.935323][ T1072] usb 5-1: SerialNumber: syz
[  122.175080][ T6295] netlink: 'syz.3.144': attribute type 30 has an invalid length.
[  122.222379][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.222975][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.256372][ T6244] misc userio: The device must be registered before sending interrupts
[  122.282710][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.288043][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.316339][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.330437][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.331794][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.337456][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.372250][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.372823][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.533682][   T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  122.673512][ T5708] rtl8150 3-1:1.0: couldn't reset the device
[  122.673865][ T5708] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  122.695973][   T25] usb 2-1: device descriptor read/64, error -71
[  122.707598][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'.
[  122.707945][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'.
[  122.708174][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'.
[  122.709064][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'.
[  122.740181][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'.
[  122.790324][ T5708] usb 3-1: USB disconnect, device number 14
[  122.889265][ T5698] usb 4-1: Failed to early initialize device
[  122.918028][ T5698] usb 4-1: USB disconnect, device number 24
[  122.959691][   T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  123.102624][   T25] usb 2-1: device descriptor read/64, error -71
[  123.209236][   T25] usb usb2-port1: attempt power cycle
[  123.215410][ T6266] bridge0: port 3(wlan1) entered disabled state
[  123.551438][   T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  123.579713][   T25] usb 2-1: device descriptor read/8, error -71
[  123.692678][ T1072] usb 5-1: USB disconnect, device number 8
[  123.735221][ T6318] =======================================================
[  123.735221][ T6318] WARNING: The mand mount option has been deprecated and
[  123.735221][ T6318]          and is ignored by this kernel. Remove the mand
[  123.735221][ T6318]          option from the mount to silence this warning.
[  123.735221][ T6318] =======================================================
[  123.851072][   T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  123.894015][   T25] usb 2-1: device descriptor read/8, error -71
[  124.000277][   T25] usb usb2-port1: unable to enumerate USB device
[  124.201195][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  124.369926][ T5708] usb 5-1: Using ep0 maxpacket: 16
[  124.370621][ T5708] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  124.371500][ T5708] usb 5-1: config index 0 descriptor too short (expected 8192, got 36)
[  124.371519][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.371533][ T5708] usb 5-1: config 0 has no interfaces?
[  124.372461][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=17
[  124.372478][ T5708] usb 5-1: SerialNumber: syz
[  124.376255][ T5708] usb 5-1: config 0 descriptor??
[  124.777442][ T5708] usb 5-1: USB disconnect, device number 9
[  124.978641][ T5698] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  125.131524][ T5698] usb 1-1: Using ep0 maxpacket: 32
[  125.132282][ T5698] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  125.155670][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.155699][ T5698] usb 1-1: Product: syz
[  125.155714][ T5698] usb 1-1: Manufacturer: syz
[  125.155729][ T5698] usb 1-1: SerialNumber: syz
[  125.194801][ T5698] usb 1-1: config 0 descriptor??
[  125.212528][ T5698] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  125.212629][ T5698] dvb-usb: bulk message failed: -22 (4/0)
[  125.212655][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.212773][ T5698] dvb-usb: bulk message failed: -22 (5/0)
[  125.212788][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.338676][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.339380][ T5698] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  125.339432][ T5698] usb 1-1: media controller created
[  125.379820][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.411597][ T5698] usb 1-1: selecting invalid altsetting 3
[  125.411628][ T5698] ttusb2: set interface to alts=3 failed
[  125.516629][ T5698] DVB: Unable to find symbol tda10086_attach()
[  125.516646][ T5698] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  125.517482][ T5698] dvb-usb: bulk message failed: -22 (4/0)
[  125.517503][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.517629][ T5698] dvb-usb: bulk message failed: -22 (5/0)
[  125.517645][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.517715][ T5698] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  125.608870][ T5698] usb 1-1: USB disconnect, device number 5
[  125.701465][ T5698] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  125.804595][ T6374] __nla_validate_parse: 12 callbacks suppressed
[  125.804617][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[  125.929515][  T988] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  126.018504][ T5675] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  126.078949][  T988] usb 4-1: Using ep0 maxpacket: 16
[  126.080469][  T988] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.087820][  T988] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.087858][  T988] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  126.087884][  T988] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  126.087908][  T988] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  126.115848][  T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  126.115880][  T988] usb 4-1: SerialNumber: syz
[  126.165042][ T5675] usb 2-1: device descriptor read/64, error -71
[  126.184283][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.184406][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.185884][  T988] hub 4-1:1.0: bad descriptor, ignoring hub
[  126.185911][  T988] hub 4-1:1.0: probe with driver hub failed with error -5
[  126.375843][ T6388] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  126.377002][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  126.399879][ T5675] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  126.429753][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.453119][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.475557][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.475685][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.494723][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  126.528687][ T5675] usb 2-1: device descriptor read/64, error -71
[  126.638694][    T9] usb 5-1: Using ep0 maxpacket: 16
[  126.639531][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  126.641517][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.641547][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.641600][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.641643][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.644065][ T5675] usb usb2-port1: attempt power cycle
[  126.647355][    T9] usb 5-1: config 0 descriptor??
[  126.668993][   T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  126.755040][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'.
[  126.790967][   T25] usb 1-1: device descriptor read/64, error -71
[  126.817966][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.854829][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.934700][   T30] kauditd_printk_skb: 109 callbacks suppressed
[  126.934723][   T30] audit: type=1400 audit(1790269531.901:344): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6402 comm="syz.2.163"
[  127.018622][ T5675] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  127.039208][ T5675] usb 2-1: device descriptor read/8, error -71
[  127.041433][   T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.113203][  T988] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  127.179992][   T25] usb 1-1: device descriptor read/64, error -71
[  127.228697][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.228734][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.228761][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.228787][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.228813][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.228839][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.229140][    T9] microsoft 0003:045E:07DA.0003: reserved main item tag 0xe
[  127.229234][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.229264][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  127.229294][    T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x6
[  127.229320][    T9] microsoft 0003:045E:07DA.0003: item fetching failed at offset 32/34
[  127.230193][    T9] microsoft 0003:045E:07DA.0003: parse failed
[  127.230297][    T9] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22
[  127.305704][ T1072] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  127.306030][ T5675] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  127.346625][   T25] usb usb1-port1: attempt power cycle
[  127.358985][ T5675] usb 2-1: device descriptor read/8, error -71
[  127.438513][ T5697] usb 5-1: USB disconnect, device number 10
[  127.468767][ T5675] usb usb2-port1: unable to enumerate USB device
[  127.490651][   T44] usb 4-1: USB disconnect, device number 25
[  127.491917][ T1072] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.491967][ T1072] usb 3-1: New USB device found, idVendor=8c29, idProduct=eaed, bcdDevice= 0.06
[  127.493186][ T1072] usb 3-1: config 7 has an invalid interface number: 246 but max is 0
[  127.493212][ T1072] usb 3-1: config 7 has no interface number 0
[  127.496758][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.496785][ T1072] usb 3-1: Product: syz
[  127.496801][ T1072] usb 3-1: Manufacturer: syz
[  127.496815][ T1072] usb 3-1: SerialNumber: syz
[  127.535506][   T44] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  127.708977][   T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  127.730757][   T25] usb 1-1: device descriptor read/8, error -71
[  127.771717][ T1072] usb-storage 3-1:7.246: USB Mass Storage device detected
[  127.845728][ T1072] usb 3-1: USB disconnect, device number 15
[  127.968553][   T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.989903][   T25] usb 1-1: device descriptor read/8, error -71
[  128.100512][   T25] usb usb1-port1: unable to enumerate USB device
[  128.418835][   T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  128.551701][   T25] usb 5-1: device descriptor read/64, error -71
[  128.798993][   T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  128.951752][   T25] usb 5-1: device descriptor read/64, error -71
[  129.000815][ T6465] loop8: detected capacity change from 0 to 7
[  129.003966][ T6465] Dev loop8: unable to read RDB block 7
[  129.004011][ T6465]  loop8: unable to read partition table
[  129.004215][ T6465] loop8: partition table beyond EOD, truncated
[  129.004250][ T6465] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  129.070585][   T25] usb usb5-port1: attempt power cycle
[  129.238795][   T44] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  129.388776][   T44] usb 2-1: Using ep0 maxpacket: 32
[  129.389280][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  129.389809][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  129.413785][   T44] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.413883][   T44] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.428991][   T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  129.431788][   T44] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  129.431865][   T44] usb 2-1: Product: syz
[  129.431906][   T44] usb 2-1: Manufacturer: syz
[  129.465477][   T25] usb 5-1: device descriptor read/8, error -71
[  129.489841][   T44] hub 2-1:4.0: USB hub found
[  129.540159][    T9] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  129.541446][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  129.545139][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.545165][    T9] usb 4-1: Product: syz
[  129.545213][    T9] usb 4-1: Manufacturer: syz
[  129.545229][    T9] usb 4-1: SerialNumber: syz
[  129.603096][    T9] ums-onetouch 4-1:1.0: USB Mass Storage device detected
[  129.722276][   T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  129.747716][   T44] hub 2-1:4.0: 2 ports detected
[  129.758232][   T25] usb 5-1: device descriptor read/8, error -71
[  129.810754][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.814411][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.818997][ T1072] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.859748][   T25] usb usb5-port1: unable to enumerate USB device
[  129.956065][   T44] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  129.988476][ T1072] usb 1-1: Using ep0 maxpacket: 32
[  129.989215][ T1072] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  129.995621][ T1072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.995648][ T1072] usb 1-1: Product: syz
[  129.995664][ T1072] usb 1-1: Manufacturer: syz
[  129.995679][ T1072] usb 1-1: SerialNumber: syz
[  130.016731][ T1072] usb 1-1: config 0 descriptor??
[  130.040789][   T44] usb 2-1: USB disconnect, device number 29
[  130.071062][ T1072] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  130.071168][ T1072] dvb-usb: bulk message failed: -22 (4/0)
[  130.071195][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  130.071320][ T1072] dvb-usb: bulk message failed: -22 (5/0)
[  130.071336][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  130.145383][ T1072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.147744][ T1072] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  130.147802][ T1072] usb 1-1: media controller created
[  130.184229][ T1072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.216259][ T1072] usb 1-1: selecting invalid altsetting 3
[  130.216283][ T1072] ttusb2: set interface to alts=3 failed
[  130.292964][ T1072] DVB: Unable to find symbol tda10086_attach()
[  130.292978][ T1072] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  130.294733][ T1072] dvb-usb: bulk message failed: -22 (4/0)
[  130.294755][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  130.294876][ T1072] dvb-usb: bulk message failed: -22 (5/0)
[  130.294892][ T1072] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  130.294959][ T1072] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  130.314376][ T1072] usb 1-1: USB disconnect, device number 10
[  130.391054][ T5623] udevd[5623]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory
[  130.431271][ T1072] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  130.486224][   T44] usb 4-1: USB disconnect, device number 26
[  130.950837][ T6497] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  130.966428][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  131.128800][    T9] usb 4-1: Using ep0 maxpacket: 32
[  131.129547][    T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  131.130749][    T9] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  131.130775][    T9] usb 4-1: config 224 has too many interfaces: 101, using maximum allowed: 32
[  131.130796][    T9] usb 4-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config
[  131.130816][    T9] usb 4-1: config 224 has 0 interfaces, different from the descriptor's value: 101
[  131.133410][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.133433][    T9] usb 4-1: Product: syz
[  131.133449][    T9] usb 4-1: Manufacturer: syz
[  131.133464][    T9] usb 4-1: SerialNumber: syz
[  131.373358][ T6518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'.
[  131.494019][ T6523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.181'.
[  131.495513][ T6523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.181'.
[  131.532110][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[  132.215964][   T44] usb 4-1: USB disconnect, device number 27
[  132.239046][ T5675] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  132.326852][ T6541] nvme_fabrics: missing parameter 'transport=%s'
[  132.326872][ T6541] nvme_fabrics: missing parameter 'nqn=%s'
[  132.389389][ T5675] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  132.396848][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.396885][ T5675] usb 5-1: Product: syz
[  132.396900][ T5675] usb 5-1: Manufacturer: syz
[  132.396916][ T5675] usb 5-1: SerialNumber: syz
[  132.446056][ T5675] usb 5-1: config 0 descriptor??
[  132.672562][ T5675] usb 5-1: Firmware version (0.0) predates our first public release.
[  132.672582][ T5675] usb 5-1: Please update to version 0.2 or newer
[  132.712694][ T6551] usb usb8: usbfs: process 6551 (syz.2.189) did not claim interface 7 before use
[  132.843239][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843338][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  132.891028][ T6558] kAFS: unable to lookup cell '(G'
[  132.893909][ T6547] kAFS: unable to lookup cell '(G'
[  132.968547][    T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  133.098729][    T9] usb 3-1: device descriptor read/64, error -71
[  133.169231][   T44] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  133.321753][   T44] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.322434][   T44] usb 2-1: not running at top speed; connect to a high speed hub
[  133.322473][   T44] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  133.323682][   T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.323705][   T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.330571][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.330635][   T44] usb 2-1: Product: syz
[  133.330677][   T44] usb 2-1: Manufacturer: syz
[  133.330711][   T44] usb 2-1: SerialNumber: syz
[  133.345348][    T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  133.528514][    T9] usb 3-1: device descriptor read/64, error -71
[  133.582632][   T44] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  133.582685][   T44] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  133.642149][    T9] usb usb3-port1: attempt power cycle
[  133.942146][   T44] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  133.974692][   T44] usb 2-1: USB disconnect, device number 30
[  133.986247][    T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  134.010056][    T9] usb 3-1: device descriptor read/8, error -71
[  134.105903][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.258619][    T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  134.260293][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'.
[  134.286842][    T9] usb 3-1: device descriptor read/8, error -71
[  134.388837][    T9] usb usb3-port1: unable to enumerate USB device
[  134.471224][ T6568] can: request_module (can-proto-0) failed.
[  134.962577][ T1072] usb 5-1: USB disconnect, device number 15
[  135.496920][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'.
[  135.987157][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'.
[  136.073414][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'.
[  136.468935][  T988] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  136.629757][  T988] usb 4-1: Using ep0 maxpacket: 32
[  136.634798][  T988] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40
[  136.636335][  T988] usb 4-1: config 1 interface 0 has no altsetting 0
[  136.666328][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.666357][  T988] usb 4-1: Product: 媧懛ܔ茪穷롍蕒폽緊⩔禎甓爀訐没ઽﲠ暃趕ꪛᇐ퓳Ȗ뎤鳝髶뽵侀寚䅿艗￷砍徍煮裱磳븓㦳蝖Ⱥﶧଢ鵕
[  136.666387][  T988] usb 4-1: Manufacturer: О
[  136.666398][  T988] usb 4-1: SerialNumber: 㠁
[  137.174819][ T1072] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  137.320021][ T1072] usb 5-1: Using ep0 maxpacket: 8
[  137.378888][ T1072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  137.378957][ T1072] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40
[  137.415793][ T1072] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config
[  137.415825][ T1072] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.446457][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  137.446497][ T1072] usb 5-1: Manufacturer: syz
[  137.803044][   T44] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  137.974251][ T1072] usb 5-1: 0:1 : does not exist
[  137.979075][   T44] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  138.016859][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.016890][   T44] usb 2-1: Product: syz
[  138.016907][   T44] usb 2-1: Manufacturer: syz
[  138.016921][   T44] usb 2-1: SerialNumber: syz
[  138.064612][   T44] usb 2-1: config 0 descriptor??
[  138.093153][   T44] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  138.437009][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.437676][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.602119][   T44] gspca_sunplus: reg_r err -110
[  138.942922][ T1072] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  139.009508][ T1072] usb 5-1: USB disconnect, device number 16
[  139.493044][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.493739][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.525993][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.596723][  T988] appletouch 4-1:1.0: Failed to read mode from device.
[  139.597132][  T988] appletouch 4-1:1.0: probe with driver appletouch failed with error -5
[  139.627389][  T988] usb 4-1: USB disconnect, device number 28
[  139.708972][ T5690] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  139.885253][ T5690] usb 1-1: device descriptor read/all, error -61
[  139.886708][ T6629] batman_adv: batadv0: Adding interface: gretap1
[  139.886719][ T6629] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.886741][ T6629] batman_adv: batadv0: Interface activated: gretap1
[  140.009044][ T5690] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  140.139297][ T5690] usb 1-1: device descriptor read/64, error -71
[  140.251332][ T5690] usb usb1-port1: attempt power cycle
[  140.393872][   T44] usb 2-1: USB disconnect, device number 31
[  140.588886][ T5690] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  140.610130][ T5690] usb 1-1: device descriptor read/8, error -71
[  140.879314][ T5690] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  140.910147][ T5690] usb 1-1: device descriptor read/8, error -71
[  141.023339][ T5690] usb usb1-port1: unable to enumerate USB device
[  141.203536][ T6652] nvme_fabrics: unknown parameter or missing value '#!  	����1���R��?��&n��%������~���[6=
p͊yz\U�j@5N�f�W�rs�)�q��' in ctrl creation request
[  141.535559][ T6655] capability: warning: `syz.3.213' uses deprecated v2 capabilities in a way that may be insecure
[  142.328652][ T5690] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  142.430461][ T6668] netlink: 104 bytes leftover after parsing attributes in process `syz.4.216'.
[  142.531164][ T5690] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  142.562592][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  142.562615][ T5690] usb 2-1: Product: syz
[  142.562626][ T5690] usb 2-1: SerialNumber: syz
[  142.597005][ T5690] usb 2-1: config 0 descriptor??
[  142.913487][ T6671] FAULT_INJECTION: forcing a failure.
[  142.913487][ T6671] name failslab, interval 1, probability 0, space 0, times 1
[  142.913538][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.0.217 Not tainted syzkaller #0 PREEMPT(full) 
[  142.913555][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  142.913570][ T6671] Call Trace:
[  142.913579][ T6671]  <TASK>
[  142.913586][ T6671]  dump_stack_lvl+0xe8/0x150
[  142.913622][ T6671]  should_fail_ex+0x410/0x560
[  142.913646][ T6671]  should_failslab+0xa8/0x100
[  142.913670][ T6671]  __kmalloc_noprof+0xfe/0x720
[  142.913687][ T6671]  ? tomoyo_encode+0x2ad/0x570
[  142.913707][ T6671]  ? tomoyo_encode+0x2ad/0x570
[  142.913733][ T6671]  tomoyo_encode+0x2ad/0x570
[  142.913759][ T6671]  tomoyo_realpath_from_path+0x5fa/0x640
[  142.913789][ T6671]  ? tomoyo_path_number_perm+0x219/0x5f0
[  142.913807][ T6671]  tomoyo_path_number_perm+0x246/0x5f0
[  142.913827][ T6671]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  142.913844][ T6671]  ? __lock_acquire+0x747/0x2de0
[  142.913871][ T6671]  ? hook_file_ioctl+0x1f2/0x600
[  142.913905][ T6671]  ? __fget_files+0x2a/0x420
[  142.913929][ T6671]  ? __fget_files+0x2a/0x420
[  142.913950][ T6671]  ? __fget_files+0x3a2/0x420
[  142.913971][ T6671]  ? __fget_files+0x2a/0x420
[  142.913996][ T6671]  security_file_ioctl+0xc3/0x2a0
[  142.914014][ T6671]  __se_sys_ioctl+0x47/0x170
[  142.914033][ T6671]  do_syscall_64+0x166/0x520
[  142.914053][ T6671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.914069][ T6671]  ? clear_bhb_loop+0x70/0xc0
[  142.914088][ T6671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.914104][ T6671] RIP: 0033:0x7fe02639e159
[  142.914123][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.914136][ T6671] RSP: 002b:00007fe0272b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.914152][ T6671] RAX: ffffffffffffffda RBX: 00007fe026625fa0 RCX: 00007fe02639e159
[  142.914169][ T6671] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  142.914178][ T6671] RBP: 00007fe0272b0090 R08: 0000000000000000 R09: 0000000000000000
[  142.914188][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.914197][ T6671] R13: 00007fe026626038 R14: 00007fe026625fa0 R15: 00007fe02674fa48
[  142.914221][ T6671]  </TASK>
[  142.914252][ T6671] ERROR: Out of memory at tomoyo_realpath_from_path.
[  143.257579][   T60] IPVS: starting estimator thread 0...
[  143.359289][ T6675] IPVS: using max 32 ests per chain, 76800 per kthread
[  143.528188][ T6664] can: request_module (can-proto-3) failed.
[  143.543741][ T6677] fuse: Unknown parameter '�x'
[  143.627919][ T5690] usb 2-1: USB disconnect, device number 32
[  143.732771][ T6679] fuse: Unknown parameter 'rootmodo��|�#e'
[  144.428573][   T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  144.560161][   T44] usb 1-1: device descriptor read/64, error -71
[  144.798632][   T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  144.943013][   T44] usb 1-1: device descriptor read/64, error -71
[  145.050286][   T44] usb usb1-port1: attempt power cycle
[  145.398763][   T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  145.435321][   T44] usb 1-1: device descriptor read/8, error -71
[  145.668895][   T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  145.687902][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'.
[  145.687944][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'.
[  145.688787][ T6694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.710098][   T44] usb 1-1: device descriptor read/8, error -71
[  145.819592][   T44] usb usb1-port1: unable to enumerate USB device
[  146.670534][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'.
[  146.724979][ T6710] netlink: 'syz.2.226': attribute type 10 has an invalid length.
[  146.724996][ T6710] netlink: 67 bytes leftover after parsing attributes in process `syz.2.226'.
[  146.745978][ T6710] vlan1: entered promiscuous mode
[  146.874552][ T6710] team0: Port device vlan1 added
[  147.052883][ T5697] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  147.209474][ T5697] usb 2-1: Using ep0 maxpacket: 16
[  147.210251][ T5697] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  147.211370][ T5697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.211419][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  147.211445][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.280528][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.280558][ T5697] usb 2-1: Product: syz
[  147.280579][ T5697] usb 2-1: Manufacturer: syz
[  147.280591][ T5697] usb 2-1: SerialNumber: syz
[  147.339503][ T6721] loop8: detected capacity change from 0 to 7
[  147.358949][ T6721] Dev loop8: unable to read RDB block 7
[  147.358982][ T6721]  loop8: unable to read partition table
[  147.359165][ T6721] loop8: partition table beyond EOD, truncated
[  147.359178][ T6721] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  147.434493][ T5697] usb 2-1: config 0 descriptor??
[  147.449878][ T5697] mcba_usb 2-1:0.0: Can't find endpoints
[  147.746457][ T5690] usb 2-1: USB disconnect, device number 33
[  148.051017][ T1072] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  148.150404][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'.
[  148.207471][ T1072] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  148.235023][ T1072] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.235050][ T1072] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.235069][ T1072] usb 1-1: config 0 interface 0 has no altsetting 0
[  148.235095][ T1072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.329118][ T1072] usb 1-1: config 0 descriptor??
[  148.353134][ T6724] mmap: syz.4.231 (6724): VmData 37851136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  148.760416][ T6723] mmap: syz.0.230 (6723) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  150.094456][ T5690] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  150.175084][ T1072] usbhid 1-1:0.0: can't add hid device: -71
[  150.175191][ T1072] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  150.216114][ T1072] usb 1-1: USB disconnect, device number 19
[  150.248598][ T5690] usb 3-1: Using ep0 maxpacket: 32
[  150.249291][ T5690] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  150.250466][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.250494][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.250510][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  150.250539][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.385415][ T5690] usb 3-1: config 0 descriptor??
[  150.450392][ T6754] netlink: 104 bytes leftover after parsing attributes in process `syz.4.238'.
[  150.906894][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.3.234'.
[  151.201047][ T6767] loop8: detected capacity change from 0 to 7
[  151.202638][ T6767] Dev loop8: unable to read RDB block 7
[  151.202688][ T6767]  loop8: unable to read partition table
[  151.202840][ T6767] loop8: partition table beyond EOD, truncated
[  151.202854][ T6767] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  151.517765][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'.
[  152.899281][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.901165][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.418666][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  153.505140][ T5690] usbhid 3-1:0.0: can't add hid device: -71
[  153.505231][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  153.535387][ T5690] usb 3-1: USB disconnect, device number 20
[  153.568601][    T9] usb 4-1: Using ep0 maxpacket: 16
[  153.572315][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  153.572366][    T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40
[  153.619561][    T9] usb 4-1: config 1 has an invalid interface number: 245 but max is 0
[  153.619591][    T9] usb 4-1: config 1 has no interface number 0
[  153.619621][    T9] usb 4-1: too many endpoints for config 1 interface 245 altsetting 255: 255, using maximum allowed: 30
[  153.619647][    T9] usb 4-1: config 1 interface 245 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  153.619666][    T9] usb 4-1: config 1 interface 245 has no altsetting 0
[  153.623388][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.623420][    T9] usb 4-1: Product: syz
[  153.623431][    T9] usb 4-1: Manufacturer: syz
[  153.623441][    T9] usb 4-1: SerialNumber: syz
[  153.815862][ T6788] nvme_fabrics: missing parameter 'transport=%s'
[  153.815881][ T6788] nvme_fabrics: missing parameter 'nqn=%s'
[  154.033150][    T9] usb 4-1: cannot find UAC_HEADER
[  154.351789][    T9] snd-usb-audio 4-1:1.245: probe with driver snd-usb-audio failed with error -22
[  154.372826][    T9] usb 4-1: USB disconnect, device number 29
[  154.470998][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.245/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.518715][ T5675] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  154.687983][ T5675] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  154.698949][ T5675] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  154.698969][ T5675] usb 1-1: config 1 has no interface number 0
[  154.726941][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.726982][ T5675] usb 1-1: Product: syz
[  154.726998][ T5675] usb 1-1: Manufacturer: syz
[  154.727014][ T5675] usb 1-1: SerialNumber: syz
[  154.792027][ T5675] usb 1-1: 3:1 : does not exist
[  154.792046][ T5675] usb 1-1: 3:2 : does not exist
[  155.146385][ T6796] xt_nfacct: accounting object `s' does not exist
[  155.891270][   T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  156.038864][   T25] usb 4-1: Using ep0 maxpacket: 16
[  156.040719][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.041987][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  156.069392][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.069490][   T25] usb 4-1: Product: syz
[  156.069539][   T25] usb 4-1: Manufacturer: syz
[  156.069574][   T25] usb 4-1: SerialNumber: syz
[  156.625521][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.627591][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.648573][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.662890][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.718323][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.737595][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.813273][   T25] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  156.829310][ T1072] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  156.858189][   T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  156.866177][   T25] usb 4-1: unit 6 not found!
[  156.969392][ T1072] usb 2-1: device descriptor read/64, error -71
[  157.104859][ T5690] usb 1-1: USB disconnect, device number 20
[  157.107683][   T25] usb 4-1: USB disconnect, device number 30
[  157.218575][ T1072] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  157.350012][ T1072] usb 2-1: device descriptor read/64, error -71
[  157.461160][ T1072] usb usb2-port1: attempt power cycle
[  157.486939][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  157.800296][ T1072] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  157.832723][ T1072] usb 2-1: device descriptor read/8, error -71
[  157.938999][   T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  158.069421][ T1072] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  158.095172][ T1072] usb 2-1: device descriptor read/8, error -71
[  158.105450][   T25] usb 4-1: New USB device found, idVendor=0846, idProduct=4250, bcdDevice=df.04
[  158.105494][   T25] usb 4-1: too many configurations: 154, using maximum allowed: 8
[  158.106644][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.106668][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.108329][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.108353][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.156838][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.156868][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.190124][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.190145][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.194266][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.194290][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.196270][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.196294][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.200444][ T1072] usb usb2-port1: unable to enumerate USB device
[  158.245719][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.245795][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.291375][   T25] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  158.291396][   T25] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[  158.296722][   T25] usb 4-1: New USB device strings: Mfr=1, Product=98, SerialNumber=103
[  158.296742][   T25] usb 4-1: Product: syz
[  158.296753][   T25] usb 4-1: Manufacturer: 菽බ伶ꑗ頌嗐ᴔ융᎖䮐ᅷ춈慆ャ풅磶ﾗ䝱␽ά눊⟞궉꿢놸鶿븢듸藲䔚謢镵┟ꃣ¨䗶⶯鮷δ
[  158.296769][   T25] usb 4-1: SerialNumber: syz
[  158.706124][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.256'.
[  158.847842][ T6830] bridge0: port 3(gretap0) entered blocking state
[  158.847937][ T6830] bridge0: port 3(gretap0) entered disabled state
[  158.848753][ T6830] gretap0: entered allmulticast mode
[  158.945654][ T6830] gretap0: entered promiscuous mode
[  158.989129][ T6830] bridge0: port 3(gretap0) entered blocking state
[  158.989277][ T6830] bridge0: port 3(gretap0) entered forwarding state
[  159.233178][   T25] usb 4-1: USB disconnect, device number 31
[  160.072514][ T6827] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  160.478634][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  160.640738][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  160.667255][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.667293][    T9] usb 1-1: Product: syz
[  160.667312][    T9] usb 1-1: Manufacturer: syz
[  160.667334][    T9] usb 1-1: SerialNumber: syz
[  160.760989][ T5697] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  160.898017][ T5690] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  160.909093][ T5697] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  160.914458][ T5697] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  160.914483][ T5697] usb 4-1: config 1 has no interface number 0
[  160.969054][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.969085][ T5697] usb 4-1: Product: syz
[  160.969100][ T5697] usb 4-1: Manufacturer: syz
[  160.969116][ T5697] usb 4-1: SerialNumber: syz
[  161.024261][ T5697] usb 4-1: 3:1 : does not exist
[  161.024286][ T5697] usb 4-1: 3:2 : does not exist
[  161.423850][ T5675] usb 1-1: USB disconnect, device number 21
[  161.629294][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  161.788567][    T9] usb 2-1: Using ep0 maxpacket: 16
[  161.789342][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  161.790834][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[  161.837218][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.837240][    T9] usb 2-1: Product: syz
[  161.837251][    T9] usb 2-1: Manufacturer: syz
[  161.837262][    T9] usb 2-1: SerialNumber: syz
[  161.881678][    T9] usb 2-1: config 0 descriptor??
[  161.893757][ T6875] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  161.946454][    T9] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[  161.959159][ T5690] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  161.959459][ T5690] ath9k_htc: Failed to initialize the device
[  161.966001][ T5675] usb 1-1: ath9k_htc: USB layer deinitialized
[  162.720131][ T6889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.271'.
[  162.828710][ T1072] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  162.978882][ T1072] usb 5-1: Using ep0 maxpacket: 8
[  162.981378][ T1072] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  162.993348][ T1072] usb 5-1: config 3 has an invalid interface number: 45 but max is 0
[  162.993423][ T1072] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  162.993494][ T1072] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  162.993551][ T1072] usb 5-1: config 3 has no interface number 0
[  162.993600][ T1072] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[  162.993623][ T1072] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.993650][ T1072] usb 5-1: config 3 interface 45 has no altsetting 0
[  163.097625][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.097654][ T1072] usb 5-1: Product: syz
[  163.097669][ T1072] usb 5-1: Manufacturer: syz
[  163.097688][ T1072] usb 5-1: SerialNumber: syz
[  163.371313][ T6899] usb usb8: check_ctrlrecip: process 6899 (syz.0.274) requesting ep 01 but needs 81
[  163.371338][ T6899] usb usb8: usbfs: process 6899 (syz.0.274) did not claim interface 0 before use
[  163.371495][ T6900] usb usb8: check_ctrlrecip: process 6900 (syz.0.274) requesting ep 01 but needs 81
[  163.371513][ T6900] usb usb8: usbfs: process 6900 (syz.0.274) did not claim interface 0 before use
[  163.867905][ T5697] usb 4-1: USB disconnect, device number 32
[  163.966374][ T1072] usb 5-1: USB disconnect, device number 17
[  163.984756][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  164.178049][ T6905] syzkaller0: entered promiscuous mode
[  164.178074][ T6905] syzkaller0: entered allmulticast mode
[  164.273846][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  164.408049][ T6907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.550787][    C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[  164.550856][    C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[  164.552244][ T5708] usb 2-1: USB disconnect, device number 38
[  164.556589][ T5708] mcba_usb 2-1:0.0 can0: device disconnected
[  164.892908][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[  165.092636][ T6904] tipc: Disabling bearer <eth:syzkaller0>
[  165.742426][ T6919] tipc: Started in network mode
[  165.742452][ T6919] tipc: Node identity ac141441, cluster identity 4711
[  165.764743][ T6919] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.488802][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.488857][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.498651][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.501051][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.861060][ T5690] tipc: Node number set to 2886997057
[  167.256458][ T6958] IPv6: NLM_F_CREATE should be specified when creating new route
[  167.306038][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'.
[  167.649637][   T30] audit: type=1326 audit(1790269572.621:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.1.285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60f3d9e159 code=0x0
[  167.686977][ T6967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.284'.
[  168.261318][ T5675] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  168.446325][ T5675] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  168.447905][ T5675] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  168.447929][ T5675] usb 1-1: config 1 has no interface number 0
[  168.480986][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.481017][ T5675] usb 1-1: Product: syz
[  168.481031][ T5675] usb 1-1: Manufacturer: syz
[  168.481052][ T5675] usb 1-1: SerialNumber: syz
[  168.537045][ T5675] usb 1-1: 3:1 : does not exist
[  168.537063][ T5675] usb 1-1: 3:2 : does not exist
[  169.348324][ T6983] syzkaller0: entered promiscuous mode
[  169.348346][ T6983] syzkaller0: entered allmulticast mode
[  169.374047][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  169.395857][ T6983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.420234][ T6982] tipc: Resetting bearer <eth:syzkaller0>
[  169.512893][ T6985] netlink: 'syz.4.290': attribute type 1 has an invalid length.
[  169.610021][ T6982] tipc: Disabling bearer <eth:syzkaller0>
[  169.740077][ T6990] netlink: 52 bytes leftover after parsing attributes in process `syz.4.290'.
[  169.747171][ T6986] bond2: Unable to set up delay as MII monitoring is disabled
[  169.786723][ T6986] bond2 (unregistering): Released all slaves
[  170.134291][ T6995] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  170.173135][ T6985] syzkaller0: entered promiscuous mode
[  170.177187][ T6985] syzkaller0: entered allmulticast mode
[  170.216456][ T6995] syz.2.291 (6995) used greatest stack depth: 19040 bytes left
[  170.517736][    T9] usb 1-1: USB disconnect, device number 22
[  170.678657][ T5675] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  170.854430][ T5675] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0
[  170.857369][ T5675] usb 3-1: config 4 has an invalid interface number: 12 but max is 0
[  170.857398][ T5675] usb 3-1: config 4 has no interface number 0
[  170.857429][ T5675] usb 3-1: config 4 interface 12 has no altsetting 0
[  170.918981][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.919013][ T5675] usb 3-1: Product: syz
[  170.919028][ T5675] usb 3-1: Manufacturer: syz
[  170.919043][ T5675] usb 3-1: SerialNumber: syz
[  171.487949][ T7009] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in;
[  171.487949][ T7009]    program syz.2.292 not setting count and/or reply_len properly
[  171.488574][ T1072] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  171.649312][ T1072] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.650583][ T1072] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.650608][ T1072] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.651888][ T1072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.651912][ T1072] usb 2-1: SerialNumber: syz
[  171.788219][ T7013] netlink: 104 bytes leftover after parsing attributes in process `syz.3.297'.
[  171.890271][ T1072] usb 2-1: skipping empty audio interface (v1)
[  172.110228][ T1072] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  172.112957][ T1072] usb 2-1: USB disconnect, device number 39
[  172.255788][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.346901][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[  173.198740][ T1072] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  173.348887][ T1072] usb 2-1: Using ep0 maxpacket: 16
[  173.349647][ T1072] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  173.353865][ T1072] usb 2-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[  173.353943][ T1072] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  173.353970][ T1072] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x82 has invalid maxpacket 9792, setting to 1024
[  173.353997][ T1072] usb 2-1: config 1 interface 2 has no altsetting 1
[  173.419658][ T1072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.419679][ T1072] usb 2-1: Product: syz
[  173.419690][ T1072] usb 2-1: Manufacturer: syz
[  173.419722][ T1072] usb 2-1: SerialNumber: syz
[  173.669901][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.691497][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.001613][ T5675] cdc_acm 3-1:4.12: Zero length descriptor references
[  176.001654][ T5675] cdc_acm 3-1:4.12: probe with driver cdc_acm failed with error -22
[  176.418424][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  178.465674][ T1072] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  178.466522][ T1072] usb 2-1: 2:3 : no or invalid class specific endpoint descriptor
[  178.466549][ T1072] usb 2-1: 2:3: invalid format type 0x1002 is detected, processed as PCM
[  178.466570][ T1072] usb 2-1: 2:3 : sample bitwidth 60 in over sample bytes 3
[  178.466594][ T1072] usb 2-1: 2:3 : invalid UAC_FORMAT_TYPE desc
[  178.577408][    T9] usb 3-1: USB disconnect, device number 21
[  178.695599][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'.
[  178.707827][ T7034] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  178.737246][ T5690] usb 2-1: USB disconnect, device number 40
[  179.123269][ T7051] xt_hashlimit: size too large, truncated to 1048576
[  179.249981][ T5690] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  179.288720][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  179.399335][ T5690] usb 2-1: Using ep0 maxpacket: 8
[  179.400210][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  179.401391][ T5690] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  179.401416][ T5690] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  179.401438][ T5690] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  179.401465][ T5690] usb 2-1: config 250 has no interface number 0
[  179.401507][ T5690] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  179.401541][ T5690] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  179.401577][ T5690] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024
[  179.401605][ T5690] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[  179.401630][ T5690] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  179.401659][ T5690] usb 2-1: config 250 interface 228 has no altsetting 0
[  179.403744][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  179.403769][ T5690] usb 2-1: Product: syz
[  179.403784][ T5690] usb 2-1: SerialNumber: syz
[  179.433230][ T5690] hub 2-1:250.228: bad descriptor, ignoring hub
[  179.433306][ T5690] hub 2-1:250.228: probe with driver hub failed with error -5
[  179.451420][    T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  179.473676][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  179.473828][    T9] usb 4-1: config 1 has no interface number 0
[  179.574463][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.574552][    T9] usb 4-1: Product: syz
[  179.574596][    T9] usb 4-1: Manufacturer: syz
[  179.574650][    T9] usb 4-1: SerialNumber: syz
[  179.634700][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.635167][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.669614][ T5675] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  179.688238][ T5690] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  179.702571][ T7063] netlink: 17 bytes leftover after parsing attributes in process `syz.0.309'.
[  179.716630][ T7057] bond2: option updelay: invalid value (18446744073256566793)
[  179.716658][ T7057] bond2: option updelay: allowed values 0 - 2147483647
[  179.733619][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.734137][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.756528][ T7063] netlink: 17 bytes leftover after parsing attributes in process `syz.0.309'.
[  179.771198][ T7057] bond2 (unregistering): Released all slaves
[  179.788125][    T9] usb 4-1: 3:1 : does not exist
[  179.788151][    T9] usb 4-1: 3:2 : does not exist
[  179.820146][ T5675] usb 3-1: Using ep0 maxpacket: 32
[  179.828053][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828075][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828090][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828107][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828117][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828126][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828135][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828144][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828153][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828162][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828171][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828180][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828189][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828198][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828208][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828217][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828226][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828235][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828244][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828253][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828262][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828271][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828280][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828289][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828297][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828307][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828315][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828477][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828512][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828565][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828607][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828640][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828694][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828738][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828773][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828806][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828846][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828880][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828912][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828946][ T5675] usb 3-1: descriptor type invalid, skip
[  179.828971][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829005][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829032][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829072][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829105][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829131][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829170][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829203][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829236][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829269][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829301][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829334][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829368][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829401][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829435][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829476][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829510][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829544][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829585][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829610][ T5675] usb 3-1: descriptor type invalid, skip
[  179.829636][ T5675] usb 3-1: descriptor type invalid, skip
[  179.846676][ T5675] usb 3-1: descriptor type invalid, skip
[  179.846730][ T5675] usb 3-1: descriptor type invalid, skip
[  179.846765][ T5675] usb 3-1: descriptor type invalid, skip
[  179.846876][ T5675] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40
[  179.993585][ T5675] usb 3-1: config 1 interface 0 has no altsetting 0
[  180.011749][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[  180.096601][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.096676][ T5675] usb 3-1: Product: syz
[  180.096719][ T5675] usb 3-1: Manufacturer: syz
[  180.096760][ T5675] usb 3-1: SerialNumber: syz
[  180.584090][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.605329][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.620974][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.642558][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.786612][ T7080] binder_alloc: 7079: binder_alloc_buf, no vma
[  180.809344][   T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  180.959361][   T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  180.960826][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.961849][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  180.961876][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  180.961901][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.961946][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.314169][    T9] usb 4-1: USB disconnect, device number 33
[  181.889242][ T7080] syz.0.312 (7080): drop_caches: 2
[  182.162680][ T5675] appletouch 3-1:1.0: Failed to read mode from device.
[  182.162927][ T5675] appletouch 3-1:1.0: probe with driver appletouch failed with error -5
[  182.271489][ T5698] usb 2-1: USB disconnect, device number 41
[  182.271578][ T5675] usb 3-1: USB disconnect, device number 22
[  182.334392][ T5698] usblp0: removed
[  182.638569][   T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  182.669287][ T7101] FAULT_INJECTION: forcing a failure.
[  182.669287][ T7101] name failslab, interval 1, probability 0, space 0, times 0
[  182.669323][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) 
[  182.669348][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.669362][ T7101] Call Trace:
[  182.669371][ T7101]  <TASK>
[  182.669381][ T7101]  dump_stack_lvl+0xe8/0x150
[  182.669419][ T7101]  should_fail_ex+0x410/0x560
[  182.669456][ T7101]  should_failslab+0xa8/0x100
[  182.669487][ T7101]  __kvmalloc_node_noprof+0x176/0x820
[  182.669516][ T7101]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[  182.669549][ T7101]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[  182.669591][ T7101]  __kvm_mmu_topup_memory_cache+0x461/0x600
[  182.669627][ T7101]  ? lock_acquire+0x115/0x350
[  182.669659][ T7101]  mmu_topup_memory_caches+0x21/0x170
[  182.669686][ T7101]  kvm_mmu_load+0x9d/0x21e0
[  182.669713][ T7101]  ? kvm_msr_allowed+0x9a/0x490
[  182.669744][ T7101]  ? kvm_msr_allowed+0x9a/0x490
[  182.669767][ T7101]  ? kvm_msr_allowed+0x9a/0x490
[  182.669788][ T7101]  ? kvm_msr_allowed+0x3f4/0x490
[  182.669810][ T7101]  ? kvm_msr_allowed+0x9a/0x490
[  182.669832][ T7101]  ? kvm_apic_has_interrupt+0x740/0x770
[  182.669875][ T7101]  vcpu_run+0x4f68/0x79b0
[  182.669932][ T7101]  ? update_se+0x90/0xff0
[  182.670004][ T7101]  ? __pfx_vcpu_run+0x10/0x10
[  182.670025][ T7101]  ? lock_acquire+0x115/0x350
[  182.670066][ T7101]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  182.670107][ T7101]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  182.670145][ T7101]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  182.670175][ T7101]  kvm_vcpu_ioctl+0xa61/0xfd0
[  182.670206][ T7101]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  182.670229][ T7101]  ? hook_file_ioctl+0x1f2/0x600
[  182.670278][ T7101]  ? __fget_files+0x2a/0x420
[  182.670313][ T7101]  ? __fget_files+0x2a/0x420
[  182.670342][ T7101]  ? __fget_files+0x3a2/0x420
[  182.670372][ T7101]  ? __fget_files+0x2a/0x420
[  182.670407][ T7101]  ? bpf_lsm_file_ioctl+0x9/0x20
[  182.670440][ T7101]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  182.670465][ T7101]  __se_sys_ioctl+0xfc/0x170
[  182.670492][ T7101]  do_syscall_64+0x166/0x520
[  182.670521][ T7101]  ? trace_irq_disable+0x3b/0x140
[  182.670544][ T7101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.670568][ T7101]  ? clear_bhb_loop+0x70/0xc0
[  182.670595][ T7101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.670618][ T7101] RIP: 0033:0x7f0cb6b9e159
[  182.670639][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.670658][ T7101] RSP: 002b:00007f0cb7a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.670683][ T7101] RAX: ffffffffffffffda RBX: 00007f0cb6e25fa0 RCX: 00007f0cb6b9e159
[  182.670700][ T7101] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  182.670714][ T7101] RBP: 00007f0cb7a16090 R08: 0000000000000000 R09: 0000000000000000
[  182.670728][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  182.670749][ T7101] R13: 00007f0cb6e26038 R14: 00007f0cb6e25fa0 R15: 00007f0cb6f4fa48
[  182.670784][ T7101]  </TASK>
[  182.701513][ T1072] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  182.899483][   T25] usb 2-1: Using ep0 maxpacket: 16
[  182.964220][ T1072] usb 1-1: Using ep0 maxpacket: 32
[  182.964413][   T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  182.973036][ T1072] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  183.030364][   T25] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[  183.030403][   T25] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.030429][   T25] usb 2-1: config 1 interface 0 has no altsetting 0
[  183.075765][   T25] usb 2-1: string descriptor 0 read error: -22
[  183.076188][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.093324][ T1072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.093357][ T1072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.093401][ T1072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.133581][ T1072] usb 1-1: config 0 descriptor??
[  183.134433][ T7097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  183.156117][ T1072] hub 1-1:0.0: USB hub found
[  183.193284][ T7105] overlayfs: missing 'lowerdir'
[  183.307928][ T7107] syzkaller0: entered promiscuous mode
[  183.307983][ T7107] syzkaller0: entered allmulticast mode
[  183.330239][ T7107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.336700][ T7107] tipc: Resetting bearer <eth:syzkaller0>
[  183.353888][ T1072] hub 1-1:0.0: 1 port detected
[  183.566829][ T1072] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  183.585071][ T1072] usbhid 1-1:0.0: can't add hid device: -71
[  183.585190][ T1072] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  183.603475][ T1072] usb 1-1: USB disconnect, device number 23
[  183.615491][   T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  183.643171][    T9] usb 5-1: USB disconnect, device number 18
[  183.758662][   T25] usb 4-1: Using ep0 maxpacket: 32
[  183.759638][   T25] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  183.761149][   T25] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  183.761175][   T25] usb 4-1: config 0 has no interface number 0
[  183.763219][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.763244][   T25] usb 4-1: Product: syz
[  183.763260][   T25] usb 4-1: Manufacturer: syz
[  183.763279][   T25] usb 4-1: SerialNumber: syz
[  183.769648][   T25] usb 4-1: config 0 descriptor??
[  183.830831][   T25] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  183.995187][   T25] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  184.017242][   T25] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  184.224420][ T5675] usb 2-1: USB disconnect, device number 42
[  184.332361][ T7127] binder: 7124:7127 ioctl 8018456f 200000000200 returned -22
[  184.452232][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'.
[  184.454452][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'.
[  184.550049][ T7135] kvm [7134]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  184.550290][ T7135] kvm [7134]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  184.608558][ T1072] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  184.651810][ T7139] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns
[  184.766538][ T1072] usb 1-1: unable to get BOS descriptor or descriptor too short
[  184.767726][ T1072] usb 1-1: not running at top speed; connect to a high speed hub
[  184.767760][ T1072] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  184.767797][ T1072] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  184.793812][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.793861][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.825883][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.825923][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.850754][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.850791][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.853868][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.853946][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.855762][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.855810][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.917508][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.917572][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.956517][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.956614][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.969411][ T1072] usb 1-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config
[  184.969466][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  185.010711][ T1072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.010739][ T1072] usb 1-1: Product: syz
[  185.010779][ T1072] usb 1-1: Manufacturer: syz
[  185.010793][ T1072] usb 1-1: SerialNumber: syz
[  185.034656][ T7144] overlayfs: missing 'lowerdir'
[  185.239668][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.240762][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.338549][ T1072] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  185.338638][ T1072] usb 1-1: MIDIStreaming interface descriptor not found
[  185.509810][ T1072] usb 1-1: USB disconnect, device number 24
[  185.694334][ T6630] udevd[6630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.010931][ T7150] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000
[  186.013962][ T7150] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  186.187363][ T7156] netlink: 'syz.0.333': attribute type 8 has an invalid length.
[  186.187381][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[  186.219994][ T7156] veth1_to_team: entered promiscuous mode
[  186.221747][ T7156] gretap0: entered promiscuous mode
[  186.223502][ T7156] veth1_to_team: left promiscuous mode
[  186.225199][ T7156] gretap0: left promiscuous mode
[  186.246160][ T7149] kernel profiling enabled (shift: 9)
[  186.303908][ T7157] netlink: 'syz.0.333': attribute type 8 has an invalid length.
[  186.303931][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[  186.356007][ T7157] veth1_to_team: entered promiscuous mode
[  186.370805][ T7157] gretap0: entered promiscuous mode
[  186.392058][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  186.407558][ T1072] usb 4-1: USB disconnect, device number 34
[  186.416985][ T7157] veth1_to_team: left promiscuous mode
[  186.435467][ T7157] gretap0: left promiscuous mode
[  186.459218][ T1072] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  186.494834][ T1072] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  186.495631][ T1072] quatech2 4-1:0.51: device disconnected
[  186.538162][ T7122] tipc: Resetting bearer <eth:syzkaller0>
[  186.597210][ T7122] tipc: Disabling bearer <eth:syzkaller0>
[  187.009757][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  187.048627][ T5746] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  187.068502][ T5675] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  187.160101][    T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  187.161272][    T9] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  187.161307][    T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  187.161327][    T9] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  187.161347][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  187.164895][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.164913][    T9] usb 1-1: Product: syz
[  187.164924][    T9] usb 1-1: Manufacturer: syz
[  187.164936][    T9] usb 1-1: SerialNumber: syz
[  187.182998][ T7164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  187.185430][ T7164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  187.232980][ T5675] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  187.240973][ T5746] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  187.270521][ T5675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.270590][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.293441][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.301842][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.339107][ T5746] usb 2-1: config 0 descriptor??
[  187.359547][ T5746] pwc: Askey VC010 type 2 USB webcam detected.
[  187.368080][ T5675] usb 5-1: selecting invalid altsetting 1
[  187.405359][ T5675] dvb_ttusb_budget: ttusb_init_controller: error
[  187.405374][ T5675] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  187.576140][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.576709][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.791053][    T9] rtl8150 1-1:1.0: couldn't find required endpoints
[  187.791291][    T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  187.847914][    T9] usb 1-1: USB disconnect, device number 25
[  187.867356][ T5675] DVB: Unable to find symbol stv0299_attach()
[  188.043394][ T5675] DVB: Unable to find symbol tda8083_attach()
[  188.043413][ T5675] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  188.114898][ T7178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3905104562 (31240836496 ns) > initial count (25326494960 ns). Using initial count to start timer.
[  188.328665][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  188.390227][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'.
[  188.394549][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  188.479860][    T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  188.486983][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.487011][    T9] usb 3-1: Product: syz
[  188.487026][    T9] usb 3-1: Manufacturer: syz
[  188.487046][    T9] usb 3-1: SerialNumber: syz
[  188.524269][    T9] usb 3-1: config 0 descriptor??
[  188.549489][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  188.572940][ T7192] overlayfs: missing 'lowerdir'
[  189.577481][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'.
[  189.901332][ T5746] pwc: recv_control_msg error -71 req 02 val 2700
[  189.906185][ T5746] pwc: recv_control_msg error -71 req 02 val 2c00
[  189.906653][ T5746] pwc: recv_control_msg error -71 req 04 val 1000
[  189.907062][ T5746] pwc: recv_control_msg error -71 req 04 val 1300
[  189.907563][ T5746] pwc: recv_control_msg error -71 req 04 val 1400
[  189.907912][ T5746] pwc: recv_control_msg error -71 req 02 val 2000
[  189.922494][ T5746] pwc: recv_control_msg error -71 req 02 val 2100
[  189.944407][ T5746] pwc: recv_control_msg error -71 req 04 val 1500
[  189.952268][ T5746] pwc: recv_control_msg error -71 req 02 val 2500
[  189.959544][ T5697] usb 5-1: USB disconnect, device number 19
[  189.985190][ T5746] pwc: recv_control_msg error -71 req 02 val 2400
[  189.986131][ T5746] pwc: recv_control_msg error -71 req 02 val 2600
[  189.987816][ T5746] pwc: recv_control_msg error -71 req 02 val 2900
[  190.013418][ T5746] pwc: recv_control_msg error -71 req 02 val 2800
[  190.014071][ T5746] pwc: recv_control_msg error -71 req 04 val 1100
[  190.014487][ T5746] pwc: recv_control_msg error -71 req 04 val 1200
[  190.091759][ T5746] pwc: Registered as video103.
[  190.145219][ T5746] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  190.227032][ T5746] usb 2-1: USB disconnect, device number 43
[  190.628539][ T5697] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  190.779478][ T5697] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  190.780707][ T5697] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  190.780748][ T5697] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  190.780769][ T5697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  190.780815][ T5697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  190.780842][ T5697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  190.783626][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  190.783653][ T5697] usb 5-1: Product: syz
[  190.783669][ T5697] usb 5-1: Manufacturer: syz
[  190.875297][ T5697] cdc_wdm 5-1:1.0: skipping garbage
[  190.875319][ T5697] cdc_wdm 5-1:1.0: skipping garbage
[  190.903732][ T5697] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  190.903772][ T5697] cdc_wdm 5-1:1.0: Unknown control protocol
[  190.929906][ T5746] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  191.034202][ T5697] usb 3-1: USB disconnect, device number 23
[  191.084253][ T5746] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  191.100066][ T5746] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  191.100097][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.100118][ T5746] usb 2-1: config 0 has no interface number 0
[  191.100159][ T5746] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  191.163964][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.163993][ T5746] usb 2-1: Product: syz
[  191.164008][ T5746] usb 2-1: Manufacturer: syz
[  191.164024][ T5746] usb 2-1: SerialNumber: syz
[  191.200630][ T5746] usb 2-1: config 0 descriptor??
[  191.265204][ T7228] overlayfs: missing 'lowerdir'
[  191.268120][ T7226] kvm: Disabled LAPIC found during irq injection
[  191.395991][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.396142][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.396442][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.396473][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.396688][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.396711][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.396929][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.396951][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.397168][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.397193][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.397410][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.397428][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.397657][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.397679][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.397891][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.397913][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.398122][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.398142][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.398354][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  191.398375][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  191.406408][ T5697] usb 5-1: USB disconnect, device number 20
[  191.406520][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  191.561263][ T5746] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  191.561613][ T5746] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82
[  191.563080][ T5746] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  191.563165][ T5746] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  191.563247][ T5746] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  191.624032][ T5746] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  191.764218][ T5746] usb 2-1: USB disconnect, device number 44
[  191.797057][ T5746] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  191.814861][ T5746] keyspan 2-1:0.133: device disconnected
[  191.879757][   T30] audit: type=1326 audit(1790269596.831:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.880242][   T30] audit: type=1326 audit(1790269596.851:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.881131][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'.
[  191.942423][   T30] audit: type=1326 audit(1790269596.911:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.942694][   T30] audit: type=1326 audit(1790269596.911:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.942869][   T30] audit: type=1326 audit(1790269596.911:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.944638][   T30] audit: type=1326 audit(1790269596.911:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.959993][   T30] audit: type=1326 audit(1790269596.911:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.960149][   T30] audit: type=1326 audit(1790269596.911:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.960266][   T30] audit: type=1326 audit(1790269596.921:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.960381][   T30] audit: type=1326 audit(1790269596.921:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6b9e159 code=0x7ffc0000
[  191.998789][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  192.399658][ T1072] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  192.554201][ T1072] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  192.555524][ T1072] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  192.555552][ T1072] usb 1-1: config 0 has no interface number 0
[  192.555590][ T1072] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  192.555613][ T1072] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  192.555640][ T1072] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  192.555666][ T1072] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  192.555692][ T1072] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  192.555717][ T1072] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  192.555757][ T1072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.587159][ T1072] usb 1-1: config 0 descriptor??
[  192.603894][ T7245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  192.605158][ T7245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  192.760976][ T1072] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  193.092260][    T9] usb 1-1: USB disconnect, device number 26
[  193.155223][    T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  193.541956][ T7261] nvme nvme0: failed to connect socket: -512
[  193.984012][ T1257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.984052][ T1257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  193.984079][ T1257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.984104][ T1257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.282577][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  194.283514][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  194.322918][ T7278] overlayfs: missing 'lowerdir'
[  194.398900][ T5697] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  194.564588][ T5697] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  194.565947][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.565971][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.567910][ T5697] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  194.567935][ T5697] usb 3-1: Manufacturer: syz
[  194.620645][ T5697] usb 3-1: config 0 descriptor??
[  194.930053][ T7274] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2
[  194.930086][ T7274] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @
[  195.034940][ T7289] input: syz0 as /devices/virtual/input/input14
[  195.702125][ T7300] netlink: 64 bytes leftover after parsing attributes in process `syz.3.369'.
[  195.768837][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.797925][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.590456][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'.
[  196.768215][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'.
[  196.793585][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'.
[  197.135641][ T7324] ip_tables: iptables: counters copy to user failed while replacing table
[  197.499552][ T5697] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71
[  197.499633][ T5697] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  197.499712][ T5697] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71
[  197.552039][ T5697] usb 3-1: USB disconnect, device number 24
[  197.784754][ T7332] overlayfs: missing 'lowerdir'
[  198.437899][   T25] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  198.630443][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  198.631832][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.631884][   T25] usb 1-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  198.631918][   T25] usb 1-1: config 1 interface 0 has no altsetting 0
[  198.633098][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  198.633116][   T25] usb 1-1: SerialNumber: syz
[  198.724269][   T25] hub 1-1:1.0: bad descriptor, ignoring hub
[  198.724290][   T25] hub 1-1:1.0: probe with driver hub failed with error -5
[  198.724731][   T25] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  198.724753][   T25] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  198.724769][   T25] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  199.464391][ T7347] netlink: 104 bytes leftover after parsing attributes in process `syz.2.378'.
[  199.601656][ T5690] usb 1-1: USB disconnect, device number 27
[  200.243913][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'.
[  200.705958][ T7370] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[  200.831806][ T7370] 8021q: adding VLAN 0 to HW filter on device bond2
[  200.918141][ T7378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.383'.
[  200.926872][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.383'.
[  200.962645][ T7378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'.
[  201.128618][ T5690] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  201.329698][ T5690] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  201.331355][ T5690] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  201.331383][ T5690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.331402][ T5690] usb 1-1: config 0 has no interface number 0
[  201.331443][ T5690] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  201.331467][ T5690] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  201.331492][ T5690] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  201.331536][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.337342][ T5690] usb 1-1: config 0 descriptor??
[  201.532594][ T5690] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  201.607390][ T7389] overlayfs: missing 'lowerdir'
[  201.723023][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.723606][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.014502][ T5690] usb 1-1: USB disconnect, device number 28
[  202.032049][   T12] usb 1-1: Failed to submit usb control message: -71
[  202.032104][   T12] usb 1-1: unable to send the bmi data to the device: -71
[  202.032124][   T12] usb 1-1: unable to get target info from device
[  202.032146][   T12] usb 1-1: could not get target info (-71)
[  202.032169][   T12] usb 1-1: could not probe fw (-71)
[  202.167261][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'.
[  202.255129][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'.
[  203.023965][   T12] IPVS: starting estimator thread 0...
[  203.141094][ T7413] IPVS: using max 31 ests per chain, 74400 per kthread
[  203.782334][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'.
[  204.585002][ T7429] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  204.597766][ T7429] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  204.624642][ T7429] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  204.854001][ T7439] capability: warning: `syz.4.394' uses 32-bit capabilities (legacy support in use)
[  205.529476][ T5690] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  205.691279][ T5690] usb 4-1: Using ep0 maxpacket: 32
[  205.692108][ T5690] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  205.719260][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.719291][ T5690] usb 4-1: Product: 綯䔨즿괲쬄㮰ᨙ쏉̡᪑篴펿ⷄᡎ幓ᤰ趧ᔎ똫쉤돳♯䅳髄⼍蔸≜듁亶揙᭥㕸燆긴肨듣䰫ⷁ㍣逦牪痞掾씼컛⟺꛴跂곽⛇橇␼ᛒꝳ밡／暂㙤啋ᄝ髊䄨鄜琾瑶鱄鰚᠎멧ぜ繕ﬗꄺ쳪ⶩ誤秊鞚흲ᔿ뇱콜뜤໑㛞샙⁵蠤⌑᾽澷顷ᡨ貌˖샂㏸稥㗒翦迠棈ᘁ
[  205.719328][ T5690] usb 4-1: Manufacturer: ﹮阎㘇뵃塞䩻ꋒ颚蒩䴤➈쥀ᾒ萲ᔘ狓煶莤둊䵄회朕⏬秧nj㫛禡窯㞰礓䭭ⲁ㕭篙Ệ撄⤳텛鎩쐐꽉℻ë懠ጀ挶벦䖙撑蚸鎽④№ꈞ
[  205.719355][ T5690] usb 4-1: SerialNumber: ဌ
[  206.042434][ T5690] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  206.198011][ T5690] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  206.226613][ T5690] usb 4-1: USB disconnect, device number 35
[  206.250182][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[  206.310917][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.378566][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  206.529310][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  206.530888][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.530921][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.530960][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.582745][    T9] usb 3-1: config 0 descriptor??
[  206.611950][ T7434] Bluetooth: hci2: command 0x0406 tx timeout
[  206.758583][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  206.758626][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  206.758644][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  206.758654][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  207.297905][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  207.297986][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  207.345693][    T9] usb 3-1: USB disconnect, device number 25
[  207.508566][ T5690] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  207.676225][ T5690] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  207.692915][ T5690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.747315][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.747338][ T5690] usb 4-1: Product: syz
[  207.747349][ T5690] usb 4-1: Manufacturer: syz
[  207.747360][ T5690] usb 4-1: SerialNumber: syz
[  207.785212][ T5690] usb 4-1: config 0 descriptor??
[  208.043405][ T5690] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  208.287438][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[  208.326061][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.353433][ T7482] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  208.477707][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz.0.405'.
[  208.560400][ T5690] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  208.619102][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  208.710098][ T5690] usb 2-1: Using ep0 maxpacket: 16
[  208.711754][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  208.713089][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.713113][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.716936][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.716960][ T5690] usb 2-1: Product: syz
[  208.716977][ T5690] usb 2-1: Manufacturer: syz
[  208.716995][ T5690] usb 2-1: SerialNumber: syz
[  208.770837][    T9] usb 3-1: Using ep0 maxpacket: 16
[  208.774368][    T9] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  208.795153][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.795203][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.795231][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.795258][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  208.795283][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.803319][ T5690] usb 2-1: 0:2 : does not exist
[  208.803549][ T5690] usb 2-1: unit 2 not found!
[  208.858114][    T9] usb 3-1: config 0 descriptor??
[  208.859168][ T7488] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  209.071121][ T5690] usb 2-1: USB disconnect, device number 45
[  209.105502][ T7482] syz.2.404 (7482): /proc/7479/oom_adj is deprecated, please use /proc/7479/oom_score_adj instead.
[  209.130422][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.130799][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.166518][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.166902][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.252093][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.424447][    T9] hid (null): bogus close delimiter
[  209.446017][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446063][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446091][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446125][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446158][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446185][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446212][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446239][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446266][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.446293][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  209.482808][    T9] glorious 0003:258A:0033.0005: bogus close delimiter
[  209.482886][    T9] glorious 0003:258A:0033.0005: item 0 0 2 10 parsing failed
[  209.504103][    T9] glorious 0003:258A:0033.0005: probe with driver glorious failed with error -22
[  209.735765][ T5697] usb 3-1: USB disconnect, device number 26
[  210.130060][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'.
[  210.398073][ T5697] usb 4-1: USB disconnect, device number 36
[  210.421071][ T7510] fuse: Unknown parameter 'ro'
[  210.613785][ T7514] pim6reg0: tun_chr_ioctl cmd 1074025681
[  210.683313][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.683750][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.684099][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.697720][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.707537][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.711284][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.723128][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.733898][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.734190][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  211.118661][ T5697] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  211.121445][ T7529] binfmt_misc: register: failed to install interpreter ./cgroup
[  211.203504][ T7509] No buffer was provided with the request
[  211.269658][ T5697] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  211.289290][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.289321][ T5697] usb 1-1: Product: syz
[  211.289337][ T5697] usb 1-1: Manufacturer: syz
[  211.289353][ T5697] usb 1-1: SerialNumber: syz
[  211.292513][ T5697] usb 1-1: config 0 descriptor??
[  211.297114][ T5697] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  211.824050][ T7549] binder: 7547:7549 ioctl c0306201 200000000680 returned -14
[  212.006026][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[  212.019256][ T5697] gspca_sunplus: reg_w_riv err -110
[  212.019357][ T5697] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[  212.062556][ T7559] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  212.063604][ T7558] IPVS: set_ctl: invalid protocol: 12992 2.0.0.0:256
[  212.078551][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  212.229366][    T9] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  212.230912][    T9] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  212.230941][    T9] usb 2-1: config 1 has no interface number 0
[  212.234439][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.234458][    T9] usb 2-1: Product: syz
[  212.234469][    T9] usb 2-1: Manufacturer: syz
[  212.234480][    T9] usb 2-1: SerialNumber: syz
[  212.269466][ T5690] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  212.317185][    T9] usb 2-1: 3:1 : does not exist
[  212.317214][    T9] usb 2-1: 3:2 : does not exist
[  212.411350][ T5690] usb 4-1: device descriptor read/64, error -71
[  212.652101][ T5690] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  212.759009][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  212.782402][ T5690] usb 4-1: device descriptor read/64, error -71
[  212.888870][ T5690] usb usb4-port1: attempt power cycle
[  212.910225][    T9] usb 5-1: Using ep0 maxpacket: 8
[  212.912509][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  212.915974][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.945706][    T9] usb 5-1: config 0 descriptor??
[  212.973326][    T9] usb 5-1: probing VID:PID(0424:012C)   
[  212.985986][    T9] usb 5-1: vub300 testing BULK IN EndPoint(0) 81
[  212.986006][    T9] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02
[  212.986020][    T9] usb 5-1: vub300 testing BULK IN EndPoint(2) 83
[  212.986034][    T9] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04
[  212.986050][    T9] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  213.228649][ T5690] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  213.252103][ T5690] usb 4-1: device descriptor read/8, error -71
[  213.270744][ T5675] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  213.374761][    T9] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  213.418634][ T5675] usb 3-1: Using ep0 maxpacket: 32
[  213.423501][ T5675] usb 3-1: unable to get BOS descriptor or descriptor too short
[  213.423554][ T5675] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  213.424680][ T5675] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  213.424707][ T5675] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  213.424729][ T5675] usb 3-1: config 14 has no interface number 0
[  213.424750][ T5675] usb 3-1: config 14 has no interface number 1
[  213.424838][ T5675] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  213.424872][ T5675] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  213.424900][ T5675] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  213.424959][ T5675] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  213.424991][ T5675] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  213.425010][ T5675] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  213.425036][ T5675] usb 3-1: config 14 interface 57 has no altsetting 0
[  213.425065][ T5675] usb 3-1: config 14 interface 228 has no altsetting 0
[  213.451602][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.451631][ T5675] usb 3-1: Product: syz
[  213.451676][ T5675] usb 3-1: Manufacturer: syz
[  213.451693][ T5675] usb 3-1: SerialNumber: syz
[  213.499649][ T5690] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  213.553972][ T5690] usb 4-1: device descriptor read/8, error -71
[  213.623318][    T9] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  213.663941][ T5690] usb usb4-port1: unable to enumerate USB device
[  213.857212][ T5690] usb 2-1: USB disconnect, device number 46
[  213.994268][ T5349] usb 1-1: USB disconnect, device number 29
[  214.207180][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.222790][ T5675] legousbtower 3-1:14.57: interrupt endpoints not found
[  214.261979][ T5675] legousbtower 3-1:14.228: get version request failed: -71
[  214.262137][ T5675] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  214.292916][ T5675] usb 3-1: USB disconnect, device number 27
[  214.789274][   T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  214.949789][   T25] usb 2-1: Using ep0 maxpacket: 16
[  214.950806][   T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  214.952841][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.952873][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.952894][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  214.952936][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.958133][   T25] usb 2-1: config 0 descriptor??
[  215.185576][   T25] hid_parser_main: 28 callbacks suppressed
[  215.185605][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.186413][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.186447][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.186485][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.186513][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.186541][   T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  215.252082][   T25] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  215.302937][    T9] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-32
[  215.379129][ T5675] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  215.387445][   T25] usb 2-1: USB disconnect, device number 47
[  215.421885][ T5349] usb 5-1: USB disconnect, device number 21
[  215.423753][    T9] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  215.430889][    T9] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  215.434941][    T9] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  215.464654][ T7585] fido_id[7585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  215.532425][ T5675] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00
[  215.537001][ T5675] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.537029][ T5675] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.538292][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  215.538318][ T5675] usb 3-1: SerialNumber: syz
[  215.609764][ T5675] usb 3-1: 0:2 : does not exist
[  215.730005][ T5690] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  215.752750][ T7589] xt_nfacct: accounting object `s' does not exist
[  215.882446][ T5690] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  215.886307][ T5690] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  215.886345][ T5690] usb 4-1: config 1 has no interface number 0
[  215.915244][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.915273][ T5690] usb 4-1: Product: syz
[  215.915293][ T5690] usb 4-1: Manufacturer: syz
[  215.915304][ T5690] usb 4-1: SerialNumber: syz
[  215.977136][ T5690] usb 4-1: 3:1 : does not exist
[  215.977155][ T5690] usb 4-1: 3:2 : does not exist
[  215.995660][ T5675] usb 3-1: USB disconnect, device number 28
[  216.123141][ T5349] USB vub300 remote SDIO host controller[0] now disconnected
[  216.309998][ T7595] macvlan1: entered promiscuous mode
[  216.358628][    C1] 
[  216.362592][    C1] =============================
[  216.365090][ T7595] macvlan1: left promiscuous mode
[  216.372607][    C1] WARNING: suspicious RCU usage
[  216.377545][    C1] syzkaller #0 Tainted: G             L     
[  216.383601][    C1] -----------------------------
[  216.388510][    C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section!
[  216.398552][    C1] 
[  216.398552][    C1] other info that might help us debug this:
[  216.398552][    C1] 
[  216.408864][    C1] 
[  216.408864][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  216.416979][    C1] locks held by syz-executor/5630: 9, last CPU#1:
[  216.423454][    C1]  #0: ffffffff8ee363f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  216.432235][    C1]  #1: ffff8880336db6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  216.441344][    C1]  #2: ffff88807c301078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  216.450638][    C1]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  216.460170][    C1]  #4: ffff88807f6b8c78 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  216.470683][    C1]  #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  216.480249][    C1]  #6: ffff888072db2df8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10
[  216.490662][    C1]  #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  216.500192][    C1]  #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  216.510754][    C1] 
[  216.510754][    C1] stack backtrace:
[  216.516711][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.527782][    C1] Tainted: [L]=SOFTLOCKUP
[  216.532138][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.542229][    C1] Call Trace:
[  216.545575][    C1]  <IRQ>
[  216.548458][    C1]  dump_stack_lvl+0xe8/0x150
[  216.553103][    C1]  lockdep_rcu_suspicious+0x140/0x1d0
[  216.558531][    C1]  __might_resched+0xbb/0x4c0
[  216.563288][    C1]  ? __cancel_work_sync+0x5c/0x110
[  216.568433][    C1]  __cancel_work_sync+0x6d/0x110
[  216.573426][    C1]  mmc_free_host+0x19/0x40
[  216.577972][    C1]  call_timer_fn+0x18d/0x5f0
[  216.582606][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  216.589334][    C1]  ? call_timer_fn+0xd5/0x5f0
[  216.594031][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  216.599184][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.604395][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  216.611111][    C1]  __run_timer_base+0x652/0x8b0
[  216.615983][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  216.621368][    C1]  ? ktime_get+0x1f5/0x220
[  216.625790][    C1]  ? lapic_next_event+0x11/0x20
[  216.630658][    C1]  run_timer_softirq+0xb7/0x170
[  216.635520][    C1]  handle_softirqs+0x226/0x860
[  216.640303][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  216.645101][    C1]  __irq_exit_rcu+0xcb/0x220
[  216.649723][    C1]  irq_exit_rcu+0x9/0x30
[  216.653976][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  216.659631][    C1]  </IRQ>
[  216.662568][    C1]  <TASK>
[  216.665520][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.671506][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  216.676540][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  216.696154][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  216.702234][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  216.710219][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  216.718208][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  216.726211][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  216.734191][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  216.742172][    C1]  ? pfn_valid+0xba/0x490
[  216.746517][    C1]  ? pfn_valid+0xba/0x490
[  216.750865][    C1]  ? pfn_valid+0xfc/0x490
[  216.755250][    C1]  page_table_check_set+0x25/0x530
[  216.760386][    C1]  copy_pmd_range+0x4adc/0x5c10
[  216.765268][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  216.770754][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  216.775968][    C1]  ? do_syscall_64+0x166/0x520
[  216.780751][    C1]  ? __lock_acquire+0x747/0x2de0
[  216.785700][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  216.790915][    C1]  copy_page_range+0xc82/0x1290
[  216.795790][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  216.801090][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  216.808067][    C1]  dup_mmap+0xf17/0x1dc0
[  216.812341][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  216.817036][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  216.822082][    C1]  ? lock_acquire+0x115/0x350
[  216.826798][    C1]  copy_mm+0x11a/0x480
[  216.830889][    C1]  copy_process+0x1e79/0x4400
[  216.835596][    C1]  ? __lock_acquire+0x747/0x2de0
[  216.840553][    C1]  ? copy_process+0xd16/0x4400
[  216.845339][    C1]  ? __pfx_copy_process+0x10/0x10
[  216.850379][    C1]  kernel_clone+0x2d7/0x940
[  216.854917][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  216.859987][    C1]  __x64_sys_clone+0x1b6/0x230
[  216.864773][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  216.870089][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  216.875388][    C1]  do_syscall_64+0x166/0x520
[  216.879989][    C1]  ? trace_irq_disable+0x3b/0x140
[  216.885053][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.891126][    C1]  ? clear_bhb_loop+0x70/0xc0
[  216.895814][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.901717][    C1] RIP: 0033:0x7f60f3dc6bd2
[  216.906137][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  216.925762][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  216.934183][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  216.942182][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  216.950160][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  216.958142][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  216.966208][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  216.974224][    C1]  </TASK>
[  216.977346][    C1] BUG: slee
** replaying previous printk message **
[  216.977346][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561
[  216.977360][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5630, name: syz-executor
[  216.977373][    C1] preempt_count: 103, expected: 0
[  216.977382][    C1] RCU nest depth: 2, expected: 0
[  216.977390][    C1] locks held by syz-executor/5630: 9, last CPU#1:
[  216.977402][    C1]  #0: ffffffff8ee363f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  216.977454][    C1]  #1: ffff8880336db6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  216.977503][    C1]  #2: ffff88807c301078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  216.977555][    C1]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  216.977600][    C1]  #4: ffff88807f6b8c78 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  216.977650][    C1]  #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  216.977695][    C1]  #6: ffff888072db2df8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10
[  216.977750][    C1]  #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  216.977792][    C1]  #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  216.977842][    C1] Preemption disabled at:
[  216.977846][    C1] [<0000000000000000>] 0x0
[  216.977867][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.977889][    C1] Tainted: [L]=SOFTLOCKUP
[  216.977895][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.977905][    C1] Call Trace:
[  216.977913][    C1]  <IRQ>
[  216.977920][    C1]  dump_stack_lvl+0xe8/0x150
[  216.977945][    C1]  __might_resched+0x36a/0x4c0
[  216.977976][    C1]  __cancel_work_sync+0x6d/0x110
[  216.978004][    C1]  mmc_free_host+0x19/0x40
[  216.978024][    C1]  call_timer_fn+0x18d/0x5f0
[  216.978044][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  216.978071][    C1]  ? call_timer_fn+0xd5/0x5f0
[  216.978091][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  216.978119][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.978137][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  216.978166][    C1]  __run_timer_base+0x652/0x8b0
[  216.978195][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  216.978217][    C1]  ? ktime_get+0x1f5/0x220
[  216.978234][    C1]  ? lapic_next_event+0x11/0x20
[  216.978257][    C1]  run_timer_softirq+0xb7/0x170
[  216.978276][    C1]  handle_softirqs+0x226/0x860
[  216.978301][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  216.978328][    C1]  __irq_exit_rcu+0xcb/0x220
[  216.978377][    C1]  irq_exit_rcu+0x9/0x30
[  216.978408][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  216.978437][    C1]  </IRQ>
[  216.978443][    C1]  <TASK>
[  216.978450][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.978468][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  216.978487][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  216.978501][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  216.978515][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  216.978528][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  216.978540][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  216.978551][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  216.978563][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  216.978578][    C1]  ? pfn_valid+0xba/0x490
[  216.978597][    C1]  ? pfn_valid+0xba/0x490
[  216.978613][    C1]  ? pfn_valid+0xfc/0x490
[  216.978639][    C1]  page_table_check_set+0x25/0x530
[  216.978662][    C1]  copy_pmd_range+0x4adc/0x5c10
[  216.978701][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  216.978731][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  216.978755][    C1]  ? do_syscall_64+0x166/0x520
[  216.978781][    C1]  ? __lock_acquire+0x747/0x2de0
[  216.978803][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  216.978829][    C1]  copy_page_range+0xc82/0x1290
[  216.978867][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  216.978892][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  216.978924][    C1]  dup_mmap+0xf17/0x1dc0
[  216.978962][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  216.978988][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  216.979021][    C1]  ? lock_acquire+0x115/0x350
[  216.979050][    C1]  copy_mm+0x11a/0x480
[  216.979075][    C1]  copy_process+0x1e79/0x4400
[  216.979096][    C1]  ? __lock_acquire+0x747/0x2de0
[  216.979121][    C1]  ? copy_process+0xd16/0x4400
[  216.979156][    C1]  ? __pfx_copy_process+0x10/0x10
[  216.979187][    C1]  kernel_clone+0x2d7/0x940
[  216.979215][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  216.979253][    C1]  __x64_sys_clone+0x1b6/0x230
[  216.979280][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  216.979317][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  216.979344][    C1]  do_syscall_64+0x166/0x520
[  216.979365][    C1]  ? trace_irq_disable+0x3b/0x140
[  216.979382][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.979399][    C1]  ? clear_bhb_loop+0x70/0xc0
[  216.979419][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.979435][    C1] RIP: 0033:0x7f60f3dc6bd2
[  216.979450][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  216.979463][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  216.979479][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  216.979491][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  216.979501][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  216.979512][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  216.979522][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  216.979546][    C1]  </TASK>
[  216.981385][    C1] 
[  217.566960][    C1] =============================
[  217.571833][    C1] WARNING: suspicious RCU usage
[  217.576683][    C1] syzkaller #0 Tainted: G        W    L     
[  217.582684][    C1] -----------------------------
[  217.587528][    C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[  217.599523][    C1] 
[  217.599523][    C1] other info that might help us debug this:
[  217.599523][    C1] 
[  217.609778][    C1] 
[  217.609778][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  217.617863][    C1] locks held by syz-executor/5630: 9, last CPU#1:
[  217.624309][    C1]  #0: ffffffff8ee363f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  217.633073][    C1]  #1: ffff8880336db6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  217.642185][    C1]  #2: ffff88807c301078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  217.651487][    C1]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  217.661025][    C1]  #4: ffff88807f6b8c78 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  217.671515][    C1]  #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  217.681038][    C1]  #6: ffff888072db2df8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10
[  217.691358][    C1]  #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  217.700814][    C1]  #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  217.711324][    C1] 
[  217.711324][    C1] stack backtrace:
[  217.717219][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  217.728247][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  217.733440][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.743518][    C1] Call Trace:
[  217.746802][    C1]  <IRQ>
[  217.749654][    C1]  dump_stack_lvl+0xe8/0x150
[  217.754263][    C1]  lockdep_rcu_suspicious+0x140/0x1d0
[  217.759671][    C1]  __synchronize_srcu+0x157/0x2f0
[  217.764726][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  217.770275][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  217.775323][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  217.781154][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  217.786709][    C1]  ? synchronize_srcu+0x20a/0x260
[  217.791763][    C1]  wakeup_source_unregister+0x129/0x3f0
[  217.797322][    C1]  mmc_host_classdev_release+0x47/0x100
[  217.802880][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  217.809044][    C1]  device_release+0xc4/0x1f0
[  217.813649][    C1]  kobject_put+0x222/0x550
[  217.818099][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  217.822880][    C1]  call_timer_fn+0x18d/0x5f0
[  217.827496][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  217.834199][    C1]  ? call_timer_fn+0xd5/0x5f0
[  217.838892][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  217.844022][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.849221][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  217.855912][    C1]  __run_timer_base+0x652/0x8b0
[  217.860782][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  217.866166][    C1]  ? ktime_get+0x1f5/0x220
[  217.870590][    C1]  ? lapic_next_event+0x11/0x20
[  217.875472][    C1]  run_timer_softirq+0xb7/0x170
[  217.880326][    C1]  handle_softirqs+0x226/0x860
[  217.885101][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  217.889883][    C1]  __irq_exit_rcu+0xcb/0x220
[  217.894499][    C1]  irq_exit_rcu+0x9/0x30
[  217.898764][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  217.904412][    C1]  </IRQ>
[  217.907349][    C1]  <TASK>
[  217.910284][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.916367][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  217.921400][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  217.941031][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  217.947107][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  217.955099][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  217.963100][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  217.971082][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  217.979056][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  217.987052][    C1]  ? pfn_valid+0xba/0x490
[  217.991395][    C1]  ? pfn_valid+0xba/0x490
[  217.995729][    C1]  ? pfn_valid+0xfc/0x490
[  218.000090][    C1]  page_table_check_set+0x25/0x530
[  218.005215][    C1]  copy_pmd_range+0x4adc/0x5c10
[  218.010090][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  218.015568][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  218.020774][    C1]  ? do_syscall_64+0x166/0x520
[  218.025554][    C1]  ? __lock_acquire+0x747/0x2de0
[  218.030512][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  218.035735][    C1]  copy_page_range+0xc82/0x1290
[  218.040610][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  218.045905][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  218.052856][    C1]  dup_mmap+0xf17/0x1dc0
[  218.057123][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  218.061807][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  218.066864][    C1]  ? lock_acquire+0x115/0x350
[  218.071559][    C1]  copy_mm+0x11a/0x480
[  218.075643][    C1]  copy_process+0x1e79/0x4400
[  218.080335][    C1]  ? __lock_acquire+0x747/0x2de0
[  218.085289][    C1]  ? copy_process+0xd16/0x4400
[  218.090089][    C1]  ? __pfx_copy_process+0x10/0x10
[  218.095149][    C1]  kernel_clone+0x2d7/0x940
[  218.099684][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  218.104743][    C1]  __x64_sys_clone+0x1b6/0x230
[  218.109527][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  218.114848][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  218.120155][    C1]  do_syscall_64+0x166/0x520
[  218.124769][    C1]  ? trace_irq_disable+0x3b/0x140
[  218.129799][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.135874][    C1]  ? clear_bhb_loop+0x70/0xc0
[  218.140557][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.146453][    C1] RIP: 0033:0x7f60f3dc6bd2
[  218.150896][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  218.170537][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  218.178966][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  218.186950][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  218.194953][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  218.202956][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  218.210937][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  218.218939][    C1]  </TASK>
[  218.222008][    C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472
[  218.222020][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5630, name: syz-executor
[  218.222033][    C1] preempt_count: 103, expected: 0
[  218.222041][    C1] RCU nest depth: 2, expected: 0
[  218.222050][    C1] locks held by syz-executor/5630: 9, last CPU#1:
[  218.222062][    C1]  #0: ffffffff8ee363f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  218.222113][    C1]  #1: ffff8880336db6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  218.222168][    C1]  #2: ffff88807c301078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  218.222221][    C1]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  218.222267][    C1]  #4: ffff88807f6b8c78 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  218.222317][    C1]  #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  218.222362][    C1]  #6: ffff888072db2df8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10
[  218.222417][    C1]  #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  218.222459][    C1]  #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  218.222503][    C1] Preemption disabled at:
[  218.222508][    C1] [<0000000000000000>] 0x0
[  218.222528][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  218.222551][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  218.222558][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.222568][    C1] Call Trace:
[  218.222576][    C1]  <IRQ>
[  218.222582][    C1]  dump_stack_lvl+0xe8/0x150
[  218.222607][    C1]  __might_resched+0x36a/0x4c0
[  218.222645][    C1]  __synchronize_srcu+0x1a1/0x2f0
[  218.222664][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  218.222680][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  218.222712][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  218.222731][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  218.222750][    C1]  ? synchronize_srcu+0x20a/0x260
[  218.222768][    C1]  wakeup_source_unregister+0x129/0x3f0
[  218.222791][    C1]  mmc_host_classdev_release+0x47/0x100
[  218.222814][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  218.222838][    C1]  device_release+0xc4/0x1f0
[  218.222863][    C1]  kobject_put+0x222/0x550
[  218.222888][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  218.222912][    C1]  call_timer_fn+0x18d/0x5f0
[  218.222933][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  218.222963][    C1]  ? call_timer_fn+0xd5/0x5f0
[  218.222983][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  218.223012][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.223029][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  218.223058][    C1]  __run_timer_base+0x652/0x8b0
[  218.223087][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  218.223109][    C1]  ? ktime_get+0x1f5/0x220
[  218.223126][    C1]  ? lapic_next_event+0x11/0x20
[  218.223148][    C1]  run_timer_softirq+0xb7/0x170
[  218.223168][    C1]  handle_softirqs+0x226/0x860
[  218.223193][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  218.223220][    C1]  __irq_exit_rcu+0xcb/0x220
[  218.223243][    C1]  irq_exit_rcu+0x9/0x30
[  218.223263][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  218.223283][    C1]  </IRQ>
[  218.223289][    C1]  <TASK>
[  218.223295][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.223313][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  218.223333][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  218.223347][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  218.223361][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  218.223374][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  218.223385][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  218.223396][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  218.223408][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  218.223423][    C1]  ? pfn_valid+0xba/0x490
[  218.223442][    C1]  ? pfn_valid+0xba/0x490
[  218.223458][    C1]  ? pfn_valid+0xfc/0x490
[  218.223484][    C1]  page_table_check_set+0x25/0x530
[  218.223508][    C1]  copy_pmd_range+0x4adc/0x5c10
[  218.223546][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  218.223576][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  218.223599][    C1]  ? do_syscall_64+0x166/0x520
[  218.223624][    C1]  ? __lock_acquire+0x747/0x2de0
[  218.223653][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  218.223678][    C1]  copy_page_range+0xc82/0x1290
[  218.223712][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  218.223736][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  218.223768][    C1]  dup_mmap+0xf17/0x1dc0
[  218.223807][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  218.223837][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  218.223870][    C1]  ? lock_acquire+0x115/0x350
[  218.223900][    C1]  copy_mm+0x11a/0x480
[  218.223924][    C1]  copy_process+0x1e79/0x4400
[  218.223945][    C1]  ? __lock_acquire+0x747/0x2de0
[  218.223970][    C1]  ? copy_process+0xd16/0x4400
[  218.224004][    C1]  ? __pfx_copy_process+0x10/0x10
[  218.224035][    C1]  kernel_clone+0x2d7/0x940
[  218.224064][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  218.224101][    C1]  __x64_sys_clone+0x1b6/0x230
[  218.224128][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  218.224165][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  218.224190][    C1]  do_syscall_64+0x166/0x520
[  218.224211][    C1]  ? trace_irq_disable+0x3b/0x140
[  218.224228][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.224244][    C1]  ? clear_bhb_loop+0x70/0xc0
[  218.224264][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.224281][    C1] RIP: 0033:0x7f60f3dc6bd2
[  218.224295][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  218.224308][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  218.224324][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  218.224336][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  218.224346][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  218.224357][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  218.224367][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  218.224391][    C1]  </TASK>
[  218.224401][    C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90004678000, but annotated.
[  218.224970][    C1] ------------[ cut here ]------------
[  218.224977][    C1] 1
[  218.224984][    C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5630
[  218.884037][    C1] Modules linked in:
[  218.887942][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  218.898967][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  218.904159][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.914221][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  218.920143][    C1] Code: fe 06 cc 41 ff c7 44 89 3d 29 39 e8 15 48 c7 c1 80 b0 6d 8c 48 c7 c7 e0 b0 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed db 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 dc 6d 0a 3b 05 7f
[  218.939759][    C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046
[  218.945839][    C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 3503825dc76bf600
[  218.953817][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  218.961813][    C1] RBP: ffff8880765b8020 R08: 0000000000000100 R09: 1ffffffff1ed21e4
[  218.969791][    C1] R10: dffffc0000000000 R11: fffffbfff1ed21e5 R12: 1ffff9200014314c
[  218.977766][    C1] R13: ffff8880749011c0 R14: dffffc0000000000 R15: 0000000000000001
[  218.985747][    C1] FS:  0000555588d04500(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000
[  218.994690][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.001379][    C1] CR2: 00002000000fb000 CR3: 000000006203c000 CR4: 00000000003526f0
[  219.009355][    C1] Call Trace:
[  219.012642][    C1]  <IRQ>
[  219.015514][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  219.021096][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  219.026130][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  219.031700][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  219.036748][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.042558][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  219.048115][    C1]  ? synchronize_srcu+0x20a/0x260
[  219.053146][    C1]  wakeup_source_unregister+0x129/0x3f0
[  219.058728][    C1]  mmc_host_classdev_release+0x47/0x100
[  219.064285][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  219.070445][    C1]  device_release+0xc4/0x1f0
[  219.075049][    C1]  kobject_put+0x222/0x550
[  219.079500][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  219.084321][    C1]  call_timer_fn+0x18d/0x5f0
[  219.088961][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  219.095667][    C1]  ? call_timer_fn+0xd5/0x5f0
[  219.100371][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  219.105507][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.110719][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  219.117427][    C1]  __run_timer_base+0x652/0x8b0
[  219.122326][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  219.127712][    C1]  ? ktime_get+0x1f5/0x220
[  219.132135][    C1]  ? lapic_next_event+0x11/0x20
[  219.137003][    C1]  run_timer_softirq+0xb7/0x170
[  219.141882][    C1]  handle_softirqs+0x226/0x860
[  219.146663][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  219.151446][    C1]  __irq_exit_rcu+0xcb/0x220
[  219.156056][    C1]  irq_exit_rcu+0x9/0x30
[  219.160316][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  219.166003][    C1]  </IRQ>
[  219.168943][    C1]  <TASK>
[  219.171884][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  219.177894][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  219.182943][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  219.202565][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  219.208695][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  219.216699][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  219.224688][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  219.232673][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  219.240658][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  219.248641][    C1]  ? pfn_valid+0xba/0x490
[  219.252985][    C1]  ? pfn_valid+0xba/0x490
[  219.257324][    C1]  ? pfn_valid+0xfc/0x490
[  219.261668][    C1]  page_table_check_set+0x25/0x530
[  219.266791][    C1]  copy_pmd_range+0x4adc/0x5c10
[  219.271678][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  219.277159][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  219.282396][    C1]  ? do_syscall_64+0x166/0x520
[  219.287179][    C1]  ? __lock_acquire+0x747/0x2de0
[  219.292148][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  219.297360][    C1]  copy_page_range+0xc82/0x1290
[  219.302235][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  219.307537][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  219.314498][    C1]  dup_mmap+0xf17/0x1dc0
[  219.318774][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  219.323485][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  219.328540][    C1]  ? lock_acquire+0x115/0x350
[  219.333277][    C1]  copy_mm+0x11a/0x480
[  219.337361][    C1]  copy_process+0x1e79/0x4400
[  219.342054][    C1]  ? __lock_acquire+0x747/0x2de0
[  219.347012][    C1]  ? copy_process+0xd16/0x4400
[  219.351823][    C1]  ? __pfx_copy_process+0x10/0x10
[  219.356872][    C1]  kernel_clone+0x2d7/0x940
[  219.361396][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  219.366451][    C1]  __x64_sys_clone+0x1b6/0x230
[  219.371238][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  219.376555][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  219.381861][    C1]  do_syscall_64+0x166/0x520
[  219.386484][    C1]  ? trace_irq_disable+0x3b/0x140
[  219.391533][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.397627][    C1]  ? clear_bhb_loop+0x70/0xc0
[  219.402315][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.408218][    C1] RIP: 0033:0x7f60f3dc6bd2
[  219.412646][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  219.432259][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  219.440688][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  219.448673][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  219.456669][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  219.464647][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  219.472638][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  219.480638][    C1]  </TASK>
[  219.483685][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  219.490981][    C1] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  219.502048][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  219.507244][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.517316][    C1] Call Trace:
[  219.520621][    C1]  <IRQ>
[  219.523492][    C1]  vpanic+0x56d/0xa60
[  219.527530][    C1]  ? __pfx__printk+0x10/0x10
[  219.532158][    C1]  ? __pfx_vpanic+0x10/0x10
[  219.536769][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  219.542069][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  219.547289][    C1]  panic+0xc5/0xd0
[  219.551026][    C1]  ? __pfx_panic+0x10/0x10
[  219.555473][    C1]  __warn+0x315/0x4c0
[  219.559475][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  219.564775][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  219.570074][    C1]  __report_bug+0x276/0x570
[  219.574602][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  219.579927][    C1]  ? __pfx___report_bug+0x10/0x10
[  219.584964][    C1]  ? __wake_up_klogd+0xf0/0x130
[  219.589850][    C1]  ? vprintk_emit+0x4ee/0x560
[  219.594558][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  219.599606][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  219.604911][    C1]  report_bug+0x16b/0x220
[  219.609254][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  219.614549][    C1]  ? __debug_object_init+0x2c6/0x3c0
[  219.619844][    C1]  handle_bug+0x9c/0x200
[  219.624106][    C1]  exc_invalid_op+0x1a/0x50
[  219.628634][    C1]  asm_exc_invalid_op+0x1a/0x20
[  219.633515][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  219.639418][    C1] Code: fe 06 cc 41 ff c7 44 89 3d 29 39 e8 15 48 c7 c1 80 b0 6d 8c 48 c7 c7 e0 b0 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed db 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 dc 6d 0a 3b 05 7f
[  219.659059][    C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046
[  219.665150][    C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 3503825dc76bf600
[  219.673132][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  219.681112][    C1] RBP: ffff8880765b8020 R08: 0000000000000100 R09: 1ffffffff1ed21e4
[  219.689094][    C1] R10: dffffc0000000000 R11: fffffbfff1ed21e5 R12: 1ffff9200014314c
[  219.697075][    C1] R13: ffff8880749011c0 R14: dffffc0000000000 R15: 0000000000000001
[  219.705067][    C1]  ? __debug_object_init+0x2c3/0x3c0
[  219.710375][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  219.715938][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  219.720977][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  219.726527][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  219.731581][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.737398][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  219.742972][    C1]  ? synchronize_srcu+0x20a/0x260
[  219.748026][    C1]  wakeup_source_unregister+0x129/0x3f0
[  219.753597][    C1]  mmc_host_classdev_release+0x47/0x100
[  219.759158][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  219.765323][    C1]  device_release+0xc4/0x1f0
[  219.769950][    C1]  kobject_put+0x222/0x550
[  219.774416][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  219.779198][    C1]  call_timer_fn+0x18d/0x5f0
[  219.783802][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  219.790502][    C1]  ? call_timer_fn+0xd5/0x5f0
[  219.795190][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  219.800341][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.805548][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  219.812252][    C1]  __run_timer_base+0x652/0x8b0
[  219.817123][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  219.822528][    C1]  ? ktime_get+0x1f5/0x220
[  219.826963][    C1]  ? lapic_next_event+0x11/0x20
[  219.831860][    C1]  run_timer_softirq+0xb7/0x170
[  219.836726][    C1]  handle_softirqs+0x226/0x860
[  219.841506][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  219.846315][    C1]  __irq_exit_rcu+0xcb/0x220
[  219.850916][    C1]  irq_exit_rcu+0x9/0x30
[  219.855176][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  219.860830][    C1]  </IRQ>
[  219.863763][    C1]  <TASK>
[  219.866697][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  219.872684][    C1] RIP: 0010:pfn_valid+0x11f/0x490
[  219.877718][    C1] Code: 74 7d e8 84 fc 83 ff 4d 85 ff 75 11 e8 7a fc 83 ff eb 3d e8 73 fc 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff
[  219.897337][    C1] RSP: 0018:ffffc9000467f250 EFLAGS: 00000246
[  219.903421][    C1] RAX: ffffffff8243df7c RBX: ffffffff8243df3a RCX: ffff8880765b8000
[  219.911421][    C1] RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720
[  219.919413][    C1] RBP: 0000000000000001 R08: ffffffff8243df3a R09: 0000000000000000
[  219.927401][    C1] R10: dffffc0000000000 R11: ffffed100b62956d R12: dffffc0000000000
[  219.935383][    C1] R13: 1ffff11027fc1030 R14: 000000000006378b R15: ffff88813fe08180
[  219.943389][    C1]  ? pfn_valid+0xba/0x490
[  219.947755][    C1]  ? pfn_valid+0xba/0x490
[  219.952093][    C1]  ? pfn_valid+0xfc/0x490
[  219.956458][    C1]  page_table_check_set+0x25/0x530
[  219.961602][    C1]  copy_pmd_range+0x4adc/0x5c10
[  219.966497][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  219.971975][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  219.977189][    C1]  ? do_syscall_64+0x166/0x520
[  219.982063][    C1]  ? __lock_acquire+0x747/0x2de0
[  219.987020][    C1]  ? mas_wr_store_type+0xf80/0x1980
[  219.992232][    C1]  copy_page_range+0xc82/0x1290
[  219.997124][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  220.002465][    C1]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  220.009435][    C1]  dup_mmap+0xf17/0x1dc0
[  220.013732][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  220.018433][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  220.023503][    C1]  ? lock_acquire+0x115/0x350
[  220.028201][    C1]  copy_mm+0x11a/0x480
[  220.032286][    C1]  copy_process+0x1e79/0x4400
[  220.037002][    C1]  ? __lock_acquire+0x747/0x2de0
[  220.041957][    C1]  ? copy_process+0xd16/0x4400
[  220.046766][    C1]  ? __pfx_copy_process+0x10/0x10
[  220.051831][    C1]  kernel_clone+0x2d7/0x940
[  220.056353][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  220.061450][    C1]  __x64_sys_clone+0x1b6/0x230
[  220.066378][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  220.071717][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  220.077033][    C1]  do_syscall_64+0x166/0x520
[  220.081645][    C1]  ? trace_irq_disable+0x3b/0x140
[  220.086694][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.092783][    C1]  ? clear_bhb_loop+0x70/0xc0
[  220.097492][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.103419][    C1] RIP: 0033:0x7f60f3dc6bd2
[  220.107869][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  220.127509][    C1] RSP: 002b:00007f60f414fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  220.135947][    C1] RAX: ffffffffffffffda RBX: 00007f60f414fc60 RCX: 00007f60f3dc6bd2
[  220.143929][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  220.151947][    C1] RBP: 00007f60f414fdec R08: 0000000000000000 R09: 0000000000000001
[  220.159949][    C1] R10: 0000555588d047d0 R11: 0000000000000246 R12: 0000000000000001
[  220.167948][    C1] R13: 00000000000927c0 R14: 0000000000034c4b R15: 00007f60f414fe40
[  220.175971][    C1]  </TASK>
[  220.179606][    C1] Kernel Offset: disabled
[  220.183946][    C1] Rebooting in 86400 seconds..