last executing test programs: 2m27.366525498s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x0, @empty, 0x4e24, 0x1, 'ovf\x00', 0x2c, 0x794, 0x62}, 0x2c) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)="e759f1036fee11e3409e6f4f779070d4c9322970b05e0221988d8afabbd755435164f152d1f5e6", 0x27, 0xfffffffffffffff9) r6 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="5cda43be30a5478a35af2f1886cb4ab7e320bf8e2c3e0cdde232b09ea12a75612488e611ccaff86e2817d1705c5fb0a487c1b4557ee9a6e24e8727d6128e1038e063ff83213ab7d39d8749a2d498ac0033a971711e986da274003585244c489fa362492ac16b13564881487d69d33986be25be3670e7e8e12624bb25586cdddd895e31a792bea80eafab0fe584a8ce88bb9010202aa44638d925d138465fad8e24dc64dc2da1ec2e806eda94d76c3b8efbd421116f5f0df546e33458eb121e4b414372f2c3802523b1f7c14bb9dfdf6de8627ab91091fb2538b9be4661436d991692c269ab415618f7eaf0332cd6d202cf86b0e9c9a2", 0xf6, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000540)={r5, 0x0, r6}, &(0x7f0000000580)=""/114, 0x72, &(0x7f0000000840)={&(0x7f0000000680)={'sha3-512\x00'}, &(0x7f00000006c0)="344884f3cbbe9d7105ce075fca801730c1057b5c57a635bf89506820c7853a2774b065baee866386a46cb46201625ba2ca243f00b7b7e4568b5494fc58cf2ccb55c2f1174c72a41a659b06d8cb25f84e73e36f4d583594d50968e8d63dd616315d80b3530133ead06086ba621eb032f4fb4fc3f5052074f6f3a8b01b9855fc3d1225eea5f654f65df51df4d7e676d6bb1ccfa21288d3de9a814571268776cd2f0d09e27528950f24c41fe6cec947ec7e57271be04c0e43a3", 0xb8}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x841}, 0x84) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4040) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_tid_address(0x0) r7 = inotify_init() readv(r7, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0xfffffffffffffdba, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, &(0x7f0000001440)={0x20, 0x4, 0x6, {0x6, 0xb, 's\'s*'}}, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000001640)={{0x3, 0x3, 0x2, 0xfffffff7, 0x5, 0x40}, 0x15a, [0x0, 0x7, 0x0, 0xfffffffa, 0x101, 0x3, 0x5, 0xfffffff7, 0x1, 0x7, 0x0, 0x8, 0x3, 0xfffffff9, 0x20000000, 0x8, 0xfffffffd, 0x7, 0x2, 0x0, 0x14a7ddad, 0x5a, 0x8f, 0x3, 0x80, 0xffffffff, 0x6, 0x8, 0x9, 0x2, 0x81, 0x5365fd4d, 0x1, 0x92dd, 0x2, 0x0, 0x4, 0x3d, 0xbaa, 0x3, 0x6, 0x5, 0x1, 0xcaca, 0x750a, 0x10, 0xfffffffc, 0x100, 0x1ff, 0xc, 0x6, 0x0, 0x8000, 0x8, 0x5, 0x53f58279, 0x3, 0xd4, 0x7, 0x1, 0xffffffff, 0x2, 0x80000001, 0x4, 0xc, 0x7, 0x6, 0x9, 0x5, 0x10000, 0x9, 0x20, 0x8d, 0xf79, 0xe65, 0xfffffe01, 0x72e, 0x10, 0x4, 0x2, 0x0, 0x1, 0x4d, 0x8001, 0x4, 0x10, 0x8, 0x0, 0x4, 0x6, 0x3, 0x293, 0x6, 0x8000, 0x2, 0x8a7, 0x7c75, 0x1, 0x26a, 0x8, 0x7ff, 0x1, 0x40, 0x4047, 0x7, 0xc, 0x1000, 0x10001, 0x8001, 0x9, 0x2, 0x5, 0x3, 0x10000, 0x0, 0x8, 0x2, 0x61, 0x6, 0x6, 0x6, 0x9, 0x5, 0xcdb3, 0x4c, 0x4, 0xb1, 0x3, 0xfffffffa, 0x6, 0x4888, 0xeeb, 0x8000, 0x4, 0xfffffffd, 0x9, 0xffff, 0x5, 0x10, 0x4, 0x36, 0xd, 0x10, 0x9, 0x6, 0x5, 0x7, 0x4, 0x5, 0x9, 0x9, 0xb87d, 0x414b, 0x80, 0x3, 0x2, 0xff, 0x5192, 0x4, 0xb4, 0x3, 0x1, 0x6, 0x9, 0xc, 0x4, 0x51, 0x0, 0x80000000, 0x2, 0xfffffff3, 0x8, 0xffffffc0, 0xc15, 0xf408, 0x8, 0xfffff996, 0x8, 0x4, 0x1, 0x0, 0x2, 0x1, 0x2, 0x50, 0x82d, 0x4, 0x7f, 0x5e6, 0x5, 0x9e, 0x7, 0xa5, 0x3, 0x7, 0x1, 0x5, 0x9, 0x2, 0x5, 0x8, 0x8, 0x8001, 0x99, 0x800, 0x8b8, 0x2, 0x6ca, 0x3, 0x9415, 0x5, 0x3, 0x3, 0x1, 0x2a6, 0x1000, 0x5, 0x1, 0x3, 0x8, 0x9, 0x3, 0xd, 0x7, 0x8, 0x72b, 0x9, 0x9, 0x6, 0x1, 0x5, 0x7fffffff, 0x11c, 0x5, 0x5, 0x4, 0x4, 0x7c4, 0x9, 0x6, 0x0, 0x3, 0x0, 0x6, 0x8001, 0x3, 0x1, 0x8, 0x8, 0x7, 0x802, 0x0, 0x0, 0xd001, 0xfffffff7, 0x400, 0x75ab, 0xf, 0x8, 0x101, 0x8, 0xffffffff, 0x5, 0x2, 0x8, 0xfffffffd, 0xe, 0xbb6, 0x4, 0xfffffffb, 0x2, 0x7, 0x9, 0x2, 0x7, 0x6, 0xa930, 0x3, 0x7, 0x75, 0xfffffff2, 0xfffffffd, 0x6, 0x4, 0x1e40557e, 0x5, 0x0, 0x200, 0x1, 0xb, 0x581f, 0x10001, 0x1, 0x8f, 0x4, 0x0, 0xc4f, 0xcd, 0x4, 0x5ce1, 0x8001, 0xffffffc0, 0x5, 0x9, 0xc685f688, 0x8, 0x8, 0x7ff, 0x7ff, 0x100, 0x2, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000, 0x7, 0x2, 0x63c, 0x2, 0x5, 0x1ff, 0xffff, 0x6, 0x3, 0x5, 0xd, 0x5, 0x7fff, 0x5, 0x0, 0x2, 0xff, 0x80, 0x5, 0x10001, 0x3000, 0x3, 0x5, 0x6, 0x7fffffff, 0x40, 0x1ff, 0x4, 0x3, 0x7, 0x4, 0x49a, 0x0, 0x7, 0x7, 0x100, 0xf49ac3a, 0x2, 0x5, 0x0, 0x3, 0xa2ed, 0x8, 0x97b7, 0xce, 0x88, 0x6, 0xff, 0x3, 0x9, 0x4, 0x0, 0x6, 0x4, 0x4, 0x7, 0x7ff, 0xb, 0xffff, 0x7f332bbd, 0x0, 0xdad, 0xffffffff, 0xf598, 0x5, 0x80000000, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, 0x6, 0x1, 0x1, 0x7, 0x7ff, 0x1, 0x7f, 0x1, 0x3ff, 0x4, 0x3ff, 0xfff, 0x2, 0x2, 0xffffffff, 0x9, 0x4420, 0x5, 0x100, 0xfff, 0x7, 0x0, 0x1, 0x4, 0x1, 0xd, 0x1c8d, 0x3, 0xffffffff, 0x9, 0x7, 0x70b, 0x9, 0x2, 0x5, 0x101, 0x400, 0x3, 0x5, 0x3, 0x9, 0xffffffc0, 0x66, 0x100, 0x1000, 0x9, 0x5, 0x4, 0x9, 0x1, 0x7, 0x40, 0x7, 0x4, 0x6, 0x1a, 0x2, 0x4, 0x9, 0x6, 0xa, 0x1, 0x6, 0x3, 0x0, 0x2000, 0x5, 0x5, 0x4, 0x6, 0x6, 0x5, 0x7f, 0x8, 0xcb, 0x1, 0x8, 0x0, 0x1, 0x5968, 0x2ce, 0x4, 0x8, 0x5, 0x8, 0x65ce, 0x7, 0x1, 0x8000, 0xf, 0xfe, 0x4, 0xe, 0x6, 0x7, 0x0, 0x6, 0x81, 0x1000, 0xffffffe4, 0x40, 0xda, 0x9, 0x9, 0x1, 0x81, 0x746d, 0x6, 0x294, 0x2, 0x7, 0x5, 0x40, 0x1, 0x80000000, 0x1, 0x1, 0x1, 0x9, 0xb, 0x1ff, 0xd, 0xe80, 0x0, 0x1, 0x2, 0x9, 0x80000000, 0x9, 0x1, 0x5, 0x31e73f4f, 0x0, 0x0, 0xfffffffe, 0x4, 0xf, 0x7, 0xdf5, 0x7, 0x6, 0x7fffffff, 0x4, 0x1, 0xd, 0x9, 0x7, 0x7fffffff, 0x39, 0x2f, 0x9, 0x80, 0x4, 0x3, 0x9, 0xff, 0x6a5, 0x8, 0x96a1, 0x4, 0x5, 0x7, 0x800, 0xb16b, 0x3, 0x5, 0x9, 0x81, 0xcab, 0x3, 0xfff, 0x3, 0xc, 0x5c, 0x2, 0x7e, 0x1, 0x8, 0x9, 0x2, 0x9, 0x9db, 0x81, 0xd, 0x9, 0x1, 0xaa, 0x6, 0x10000, 0x400, 0xae50, 0x2, 0x3c8c, 0x5, 0x0, 0x3, 0x5112b491, 0xfffffc00, 0x9, 0x4, 0xa57, 0x2f7, 0x5, 0x1, 0x6, 0x1000, 0x1, 0x0, 0x81, 0x10000, 0x7, 0x1, 0xfffffff8, 0x0, 0xffffff80, 0x4, 0x100, 0x9, 0x7, 0x5, 0x8, 0xe, 0x0, 0x3819ce4d, 0x8, 0xc8ff, 0x3, 0xfffffffa, 0x1, 0x4, 0xfffff053, 0x4, 0x0, 0x5, 0x7ff, 0x7, 0x1, 0x1000, 0xffff, 0xcab3, 0x5, 0xfffffffb, 0x5, 0x2, 0x100, 0x0, 0xfffffffc, 0x6, 0x6, 0xc216, 0x1, 0xf, 0x7, 0x5, 0x9, 0x3, 0x6, 0xa9, 0x7ff, 0x8000, 0x5, 0x64c8acc6, 0x2, 0x9, 0x5, 0x1, 0x7, 0x7, 0x10, 0x5, 0xffffff01, 0x91a8, 0x82f, 0xd, 0x1, 0x73, 0x17, 0x7, 0xff54, 0x3b, 0x6, 0x4, 0x96e, 0xf, 0x3ff, 0xb, 0x61a, 0x1ff, 0x80000000, 0x4, 0x0, 0xffffffff, 0x3, 0x4, 0xfffffff6, 0x1, 0xfff, 0x7, 0x1, 0x8, 0x7f, 0x3, 0x1, 0x1, 0x2, 0x7, 0x641a, 0x80000001, 0x0, 0x0, 0xde4b, 0x4, 0x9, 0x7, 0xb1, 0x7211, 0xa, 0x80, 0x8, 0x0, 0xa, 0x9, 0x7ff, 0x8000, 0x8, 0x800, 0xe75a, 0x3, 0x2, 0x3e89, 0x8, 0x61a5, 0x2, 0xae9, 0x5, 0x2, 0x200, 0x7, 0x8, 0x7fff, 0x10001, 0x24e0, 0x1, 0x3, 0xb, 0xe76, 0x400, 0x4, 0x2, 0x7b92, 0x3, 0x4, 0x400, 0x8, 0x0, 0x10000, 0x4, 0x6, 0x2, 0x9, 0x2af, 0x800, 0x4, 0x1, 0x8001, 0x0, 0x9, 0x22, 0x1000, 0x6, 0xe3, 0xe0000000, 0x6, 0x0, 0x0, 0x4, 0x5, 0x4, 0xf, 0xffff, 0x1, 0x3, 0x8, 0x5692, 0x7, 0x81, 0x7, 0x3, 0x8229, 0x123, 0x2, 0xd, 0x7, 0x57e4, 0x9, 0x73d5, 0x3, 0xa2b, 0x6, 0x7, 0x10000, 0x4, 0x95, 0x5, 0x7, 0xfffffff7, 0x240, 0x7ff, 0x40, 0x6, 0xfff, 0xa, 0x800, 0x10001, 0x7, 0x9, 0x3, 0x9c, 0x3, 0x6, 0x2, 0x5, 0x4, 0x1ff, 0x5, 0xe, 0x6, 0x101, 0x5, 0xfffffff9, 0xb08, 0x20, 0x4, 0xfffffffc, 0x1fe, 0x9, 0xfbbb, 0x4, 0x9, 0x2, 0x6, 0xbd, 0x3ff, 0x5, 0x5, 0xa, 0x4, 0x2, 0x40, 0x1, 0xb9c, 0x991, 0xffff8735, 0x5, 0x4, 0xffffffff, 0x0, 0x8, 0x10, 0x4, 0x100, 0x9, 0x7fffffff, 0x7, 0xd, 0x101, 0x90, 0x7, 0xadf, 0x2, 0x5, 0x40, 0x7, 0x40, 0x9, 0x9, 0xffff, 0xa4, 0x9, 0x3, 0x0, 0xa06, 0xc1, 0x5, 0xfffffffd, 0x6, 0x10, 0x92f, 0x3000000, 0x29fa, 0x99b, 0x2, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x6c, 0x0, 0xff, 0x4, 0x9d6f, 0x40, 0x9, 0x20, 0xae, 0x200, 0xa, 0x3d, 0x4, 0xfffffff2, 0x4, 0x5, 0x9c68, 0x8, 0x5, 0x40, 0xb9ca, 0xa0000000, 0x0, 0x10001, 0x1, 0x2, 0x6, 0xdcb, 0x1, 0x449f, 0x0, 0x3, 0x401, 0x510, 0x1, 0x4, 0x0, 0x20000000, 0x1, 0x3, 0x8, 0x8, 0x1ff, 0x2, 0x5, 0x5, 0x3, 0x6, 0xffffffff, 0x4800, 0x3, 0x7fffffff, 0x4, 0x0, 0xfffff800, 0x291, 0x602, 0xe, 0x2, 0xc, 0x3, 0xfffffff2, 0x8, 0xa, 0x0, 0x800, 0x1000, 0x5, 0x2, 0x80000000, 0x6, 0x4, 0x3, 0x9, 0x23, 0xfffffffa, 0x6, 0x5, 0x5ed2898, 0x9, 0xc0, 0x1, 0x9867, 0x1, 0x1ff, 0x7, 0x1, 0x9, 0x5, 0xffff0000, 0x10000, 0x6, 0x4, 0x8, 0x1, 0x9, 0x2, 0x7, 0xf0, 0x6, 0x7ff, 0xd8c, 0x8, 0xa, 0xe, 0x4, 0x8, 0x10001, 0x6, 0x4, 0x9, 0x0, 0x1, 0x2, 0x8, 0x1, 0xfe, 0x87, 0x10001, 0x401, 0xfff, 0x8001, 0x2, 0x2, 0x0, 0x6, 0xffff, 0x401, 0x2, 0xfffffffc, 0x9, 0x4, 0x5b, 0x9, 0x4, 0xffff6961, 0x0, 0x7]}) ioctl$EVIOCGMASK(r8, 0x5b02, 0x0) 2m24.208045814s ago: executing program 3 (id=24): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010088188e6b62aa73f72cc9f0b000000000000000d140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m23.953041699s ago: executing program 3 (id=25): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x24, 0x42, {0x42, 0xd, "989dcc52fa6151d1c07296cfd83cca3c206155c77802a0450cf1764928b902d73fb98fde45ff35534b7389d390b3775a47508519fed221e168ae8f8ce93922dc"}}, &(0x7f0000000300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "9334ab3db9efe5f5e7538ed29555bd5a8fe6cc112befc806bf57b27f4a4eadfaaeac8298f79a19f8fe45d6640081deb5428db3f317b03d4cf539d6a143c899ca063867883c6b586d189c4a4c245b6512c8764fb13b3932e9291c13ff2550fbeb8bbc4bf2c8eaf50fe971ad741b79faff7d516ca3fcfce6eddbd2badbfcba6fae382779fa1153625a74f6b79e338f14597343b3444be5258d6e38cd2e7d2033441b03e8de807d6dbcc5ffc1694afe59c402ab691d8ef2202574600bc55b0ae26aac93e10aaa8ad2c191538de5b77d65433d9b92027289759d4c6e4e87eeafa907be21589ec442cd83741bf8af96f88f37b1395e2711816c0d"}}, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xa, "d973eefd"}, @main=@item_4={0x3, 0x0, 0x0, "2ec28e9b"}, @local=@item_4={0x3, 0x2, 0x2, "315d728f"}, @global=@item_4={0x3, 0x1, 0xd, "69a2ab27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x9f5}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x38, "1e9e2238d07d596dc228668e53414191276b42d9f37f6359bb1946cb50c3544efa58ae255648caf65ce93cebc2dc56c4ed7695a23dd32299"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x75, "da9cdc8515dc5dc699c9787c1f82c914f918390338780e1badb55dafd1d769bcdde57bd25b91c11c41f7ff0ad83e48403a05144eecc92fca1a3c16e7dd2963cc949162bd02696cb1704ffeb63c5bdbfc83416a95fc8634e653913fd45c8e3a8012dde9495a3d036e60e154c157b760fd07d53ed801"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000000)={0x20, 0xd, 0x3, "2f8eb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x2, "3902"}, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x2}, 0x0, 0x0}) 2m23.629190347s ago: executing program 32 (id=25): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x24, 0x42, {0x42, 0xd, "989dcc52fa6151d1c07296cfd83cca3c206155c77802a0450cf1764928b902d73fb98fde45ff35534b7389d390b3775a47508519fed221e168ae8f8ce93922dc"}}, &(0x7f0000000300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "9334ab3db9efe5f5e7538ed29555bd5a8fe6cc112befc806bf57b27f4a4eadfaaeac8298f79a19f8fe45d6640081deb5428db3f317b03d4cf539d6a143c899ca063867883c6b586d189c4a4c245b6512c8764fb13b3932e9291c13ff2550fbeb8bbc4bf2c8eaf50fe971ad741b79faff7d516ca3fcfce6eddbd2badbfcba6fae382779fa1153625a74f6b79e338f14597343b3444be5258d6e38cd2e7d2033441b03e8de807d6dbcc5ffc1694afe59c402ab691d8ef2202574600bc55b0ae26aac93e10aaa8ad2c191538de5b77d65433d9b92027289759d4c6e4e87eeafa907be21589ec442cd83741bf8af96f88f37b1395e2711816c0d"}}, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xa, "d973eefd"}, @main=@item_4={0x3, 0x0, 0x0, "2ec28e9b"}, @local=@item_4={0x3, 0x2, 0x2, "315d728f"}, @global=@item_4={0x3, 0x1, 0xd, "69a2ab27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x9f5}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x38, "1e9e2238d07d596dc228668e53414191276b42d9f37f6359bb1946cb50c3544efa58ae255648caf65ce93cebc2dc56c4ed7695a23dd32299"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x75, "da9cdc8515dc5dc699c9787c1f82c914f918390338780e1badb55dafd1d769bcdde57bd25b91c11c41f7ff0ad83e48403a05144eecc92fca1a3c16e7dd2963cc949162bd02696cb1704ffeb63c5bdbfc83416a95fc8634e653913fd45c8e3a8012dde9495a3d036e60e154c157b760fd07d53ed801"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000000)={0x20, 0xd, 0x3, "2f8eb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x2, "3902"}, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x2}, 0x0, 0x0}) 38.679674376s ago: executing program 0 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xa0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x84, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x23, 0x0, @random="25871e74a82a9b9757221aa285cbc7fb2431b58062b85c889000356ddc1e66"}, {0xa, 0x0, @default_ap_ssid}, {0x11, 0x0, @random="6695b06c751fe8bf9fab1433aa"}, {0xa, 0x0, @default_ibss_ssid}, {0x20, 0x0, @random="092bad2c069732e207f89adff1d307f2e702adff204ff45c3383687e"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 38.638048607s ago: executing program 0 (id=416): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000001200), 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) 37.285141717s ago: executing program 2 (id=419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r5) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000880)={0x1, 0xffffffff, 0x0, 0xb, 0xffffffffffffeffc, 0x4, 0x7fffffff, 0x0, 0xffffffffffff772b, 0x4, 0x200, 0x1}) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x100, 0xb, 0x40, 0xa0}, {0xa, 0x1c, 0x6}, {0xbb, 0x9, 0x14, 0x10}, {0xa, 0x4, 0x9, 0x948}]}) bind$tipc(r12, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r11, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x10, 0x0}, 0x1000000) 35.99341562s ago: executing program 2 (id=423): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x48780) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x1c) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x111, 0xc1) 35.877619263s ago: executing program 4 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, r3) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @name="0a6e4538ea5653e73c35d620f26b49330eca145977ef161032b4650a6d84466a"}) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x84, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="45d3fb080000007c021d9830b35edf8f06a1af3c0344ba9fc36fcfa2a877b3255837b9bc415d6d52d2a270a77235361ed9ec2fe7ae7b000000009685aa5e67104821ca0f78ce4b32c7a0de5b0671c42a182ba5cafbbed469f4ddc4ab953422ae183b2b3c183776976f0724eb2cf2ccfd203fb0c31c48182b9e28c5f543aae57f1cf98c0b", 0x0, 0xfffffffb, 0x0, 0x4, 0x0}) unshare(0x22020600) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x8140aecc, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 35.837953979s ago: executing program 0 (id=425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000f800094e52af127437bebf66a5e10dc6870e0000000000000000005c7678872869d750452a75427d0e48b1c964"], 0x48}, 0x1, 0x0, 0x0, 0xc9f28602a8fc4bd5}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x1bc, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x4, 0x6, 0x2, 0x2, 0x10, 0x4}}, {0xc, 0x2, [0x2c0, 0xfd, 0x8f81, 0x4]}}, {{0x1c, 0x1, {0xa8, 0x4, 0x5, 0x5, 0x1, 0x1000, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0xfff9, 0x7]}}, {{0x1c, 0x1, {0x1, 0x3, 0x5, 0x9, 0x2, 0x180, 0x1, 0x5}}, {0xe, 0x2, [0x7, 0x6, 0xf0b8, 0x0, 0x4]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x1, 0x2d5796152dacf7b0, 0x2, 0x6, 0x5}}, {0xe, 0x2, [0x3, 0x1, 0x9, 0x9, 0x6077]}}, {{0x1c, 0x1, {0xaf, 0x40, 0x9, 0x6, 0x2, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x4000, 0x401, 0x8, 0x8122]}}, {{0x1c, 0x1, {0x3, 0x81, 0x0, 0xc, 0x1, 0x401, 0x3, 0x4}}, {0xc, 0x2, [0x52, 0x3, 0x7fff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x9, 0x8, 0xfffffc00, 0x0, 0x3, 0x7, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0x3, 0x0, 0x7, 0x2, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x2, 0x1, 0x2, 0x76, 0x0, 0x2, 0x5f2, 0x6}}, {0x10, 0x2, [0x4, 0x1, 0xfff2, 0x3, 0xd8f4, 0x2d]}}]}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r5, 0x5851, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c094) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000020000009b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400000003000000001800"/28], 0x48) prctl$PR_GET_FPEXC(0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_emit_ethernet(0x4e, 0x0, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff00) 35.317453066s ago: executing program 4 (id=430): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x2, r1}) 35.317150918s ago: executing program 1 (id=431): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x1, 0x0, 0x0) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 35.211697138s ago: executing program 4 (id=433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e2a2c000000000001090224000100000000090400000103000000092100000001220500090581030000000000e3e60d8888281438f571be51f9f2faad5e32f0eb62c0e4dca8178d2a"], 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$video(&(0x7f0000003080), 0x4, 0x644100) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x2) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x4000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000feffffffffff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 35.017316128s ago: executing program 5 (id=434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000340)={{@local, 0x8}, 0x5, 0x40}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) dup2(r0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r8, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r8, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r10}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 35.003644346s ago: executing program 2 (id=435): openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x105100, 0x7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES8=r1, @ANYBLOB="e5fda988000000001800128008000100767469"], 0x40}}, 0x4800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmmsg(r6, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="3000000000000000140100010200000094db141a0ada1f3c1adb812d6e254c627568b02cfbfc4864f400000000000000180000000000000003010000040000002a6dea5958000000"], 0x48}}], 0x1, 0x20004044) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000fd0900008400000000000000", @ANYRESDEC=r0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b87780c66eb421524ef717e7000000000000002000003f0000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6c, r10, 0x20}, 0x38) pwrite64(r9, 0x0, 0x0, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101}) socket(0x18, 0x3, 0x5) socket$unix(0x1, 0x1, 0x0) 34.475673586s ago: executing program 2 (id=436): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000001200), 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) 34.401424593s ago: executing program 0 (id=437): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x8b01, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x200000c5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x18) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 34.371467525s ago: executing program 1 (id=438): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x8b01, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x6, 0xf098, 0x4, 0x5, 0x8, 0x8, {0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7255e9e7, 0x5, 0x6, 0x80000001, 0x6}}, &(0x7f00000002c0)=0xb0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x200000c5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x18) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 32.61309669s ago: executing program 5 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000b91aaa745c678b5ef51307624b86175c4401090d60940102b32cb30c9aa97e26ff480c61d40c99edfd84a48e39898f5c876bd232f87d5dc5ef39eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40040) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000380)={0x2, 0x5e20, @empty}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r5 = shmget(0x2, 0x2000, 0x780002e0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000340)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r6, 0xc0045004, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0x3, 0x0) getdents64(r7, &(0x7f0000003440)=""/92, 0x5c) 32.264879205s ago: executing program 1 (id=440): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80c642, 0x0) write$dsp(r0, &(0x7f00000001c0), 0x0) 32.137501151s ago: executing program 4 (id=441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800002018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 32.115573993s ago: executing program 0 (id=442): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2000, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/31, 0x1f}], 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x20, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x10, 0xb}}, {0x0, 0x0, 0x0, 0x3, @time={0x10001, 0x3ff}, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) 31.713012737s ago: executing program 4 (id=443): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000004d00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'cpuacct.usage_sys\x00'}, {0x20, '#! '}, {0x20, '\xf0?\x9d\x03jY\xd4\x92\xe5\x9f\xa3\x1b\x18l\x906\x92\x9eS\xe4`%\x81aU\"\xee\x8a\x7f\x93W\xa0A\xa3e\x82R\x01\xf1\xd4\xe4\xc6[\x8a4c\xff\xeb\xfbAcZ}\x82\xa0\xb8\xe4\xe9\xcaj\xe9\xe6H\x9dQPa\xc8:\xe1\xd1\xaeL\x8e\x94\xaf};\xc5\xa9)\xda\xeexfvI\x1es\xdbg-\xa2\t\x1fO\xe8\x17\x81\"\xa2\x17\xa0\xa5\x97\xf0\xa0\x95c\xa4{}R\xee\x9f~\x97\x87\xa5\t\xf6w\xd7\xeb\xec\x9a\xac\xdfgOd\xa74\xf1)\x85\xd0r\xf0\x7f=\"\x06\xc66\x9f\x02b\xeaad\x90\xc0C\t?r\xc3+'}, {0x20, 'v\xce\xf6\xfa\x8d\x8a\x98~z \x1f8\xe5]'}], 0xa, "de07625f00ca2a438e06be3d6a88e9be7371e935c0c534cd6feeffa10f21e1feeee61534cec3fe9a85231d687b8111c8aaa1bbec5c"}, 0x10105) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x7) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) epoll_create(0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 31.45298692s ago: executing program 0 (id=444): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000fc06000005"]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r3 = syz_open_dev$loop(&(0x7f0000001640), 0xf01c, 0x50240) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000940)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6>\xd38/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x8e\xd2\xeb\x12\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '[\'+!!\\'}, {0x20, '#! '}, {0x20, '{@Y\xf4\xe4lC\n\x00\xc7t\xe9\xf2\xa1?77g\xa3\xb2t\x1c\x02`\x98\x1e\x0f\xcd\xb928|\x82\xb2WF\xd1;t\x85\xd1mI\xb26\x9b\\/\x7f\xc5\x01\x7f+\xa8D\x10RkY\xcc\xd4L]qN\xdfL\xccA\xa9\x90R|\x9a7\x88\xe8\xeen\a\xff\x00\xa1\x95\xcbW\xb9x\xd0\xae\xd5ny\xe87e-\xd0\x80\xe3BE<\x14\xceN?\xc4\x88\xd1T\r\xfa\xaer\xd8hg\xfb\xce\x03[N\xc5\x9e\x83\xb8\xb1O%\x13\xd8\xb1\xb1\xcan\xd82\x93R,\xab\xden\x83Xv\x8e\xc5[Y^V\x00%\xcfl\x9a_\xce\xf0%\xaf\xdf\x9f\xec3\xe4\x19\xf7\xde\xf5\v\x96KH\xfa\x89\x82\xda\xf4X\xa6=\x01\x8f\x11\xff\xb2=\x962k\bm<\xeb\xf7a\x160\x1a\xe8\xaa\xcay\xb2\xb4\xfb5\xfb~\r\xe1\x16\xd8%{M\xe8u~QEn\xea\xc4 ~\x00\x00\x00\x81\x0e\xfb\x98\xb7\xe4\\ \v\xde!bU\xed`(\xaf\xe2\xdc\xa1\x91h\r\xf5\xee\xd1\xd9?\xe9K\xbb\xdb5s\a\xab\xb9\xd5\x06u\xff\xd4Bb\xdfw7\xb5i\xdd \x903\xd60\x04\x01\xb5\xf5}\x16\xb4W\xf9kh\x83\xba2\xa7\xe1\xef\rdEf\xc3\x8a\x86\xbb\x13\xa7X\xc1\xd9\x1e\xd0aeO\xf2w\xd8\x12\xcbXNI\xcd$\x84Tg\xf4v\x87\x97R\xe9\xb4f?o\xd2\x98\x9b\xc9F#\'I\xff}C[\x10n\xa8\\\xfd\xb4\xc2\xd0\x13\x94Q\xc1\x1d<\t\xb3\x18X\x9f\x1e\xaa\xfe}\xd7]A\x03\xf7]\x95\x7f\x11\xfd7\xa6\xcc\xbd;\x9b\xc7!\x8e\x04\x98e\xf2\x98\x00Yc\x9e\xa3\x0f{\x81Z\x80]d7\x97_&(\xff\xbd0\xc6\xad\xd2P$\xcdB\xab\xe5~\xd6E\x8a\xcb'}]}, 0x2e0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b0109006501000000000020000000000000e50500000700"}}) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fe"], 0x48) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x2, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x4, {0x8, @usage=0x4, 0x0, 0xffffffffffffffff, 0xe, 0x5, 0x3, 0x0, 0x0, @usage, 0xb, 0xffff00, [0x4, 0x763, 0xff, 0x9, 0x5, 0xb]}, {0x2, @usage=0x6, r6, 0x2, 0x8000000000000001, 0x0, 0x3, 0x3, 0x9d, @struct={0x2206, 0x36}, 0x10, 0x6, [0x8, 0x4, 0x1, 0x8, 0x100000001, 0xfffffffffffffffe]}, {0xfffffffffffffffc, @struct={0x677d1314, 0x5}, 0x0, 0x0, 0x9, 0xc359, 0x7, 0x0, 0x518, @usage=0x800, 0x81, 0x5, [0xe309, 0x8000000000000000, 0x7, 0x3, 0x9, 0xa000000000]}, {0x9e, 0x9, 0x7fffffffffffffff}}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x32, 0x40, 0x1a, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x72, 0x3, 0x1, {0x22, 0x16b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0xe0}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x0, 0x10, 0x4, 0x7f, 0x10, 0x1}, 0x48, &(0x7f00000011c0)=ANY=[@ANYBLOB="050f48000414100407637a2b258fadb52683067608b793b44714100400111f2b0b2468a2455f5ed51fc7d2b7b014100a810220000000f00080003f0000f03fff4007100200ab4000"], 0x1, [{0x35, &(0x7f0000001240)=@string={0x35, 0x3, "9058fe931418cc0674595fbb98a80fa1fbdc2e81e7ad16725b9d226899b2402add59bfc9d8bb4bf64cfa03a60dc95600c2ea9c"}}]}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x31, 0xd9, 0x40, 0x0, 0x7}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000200000000000000f40000001825000085a9cb5bf36d2b7eb5c926fb52357df3d418ed1f43c12b2b6ac0a5348de8ce8a319794e95765dccec577978c9493ee8f2d66f0daab4300c0449981db7fbbcf236ca5730cae933509450ea3e6f908c609c1ab93391fa747df650ff1b4f71341e40369ec9e99de1f27c81bd271b3dcfda93c1d71b517cc894b3edf1f959e54c1c78e718e9c", @ANYRES32, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x70, &(0x7f00000001c0)=""/112, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x4, 0x9}, {0x1, 0x1, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x8, @void, @value}, 0x94) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300000000000000000000000000fc0200000000000000000000000000f402000700000000000a"], 0x80}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x10, 0x6, 0xa, {0xa, 0x10, "87912ea0f89e8297"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xc, 0x14, {0x14, 0xb, "b63a5b721d9ac3311ef7120e422840a148c9"}}, &(0x7f0000000600)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "afaa7d64a8ed1281e18ac964b97f393e1d48160261818919467e48d1ce64393b587fd129df5ab8a10f4dc09a4632ac46804c90dce75251266fe54e722d01dbec12fd108c45779cfb325b188c94a67274112981cbec17db1ff38aa65c6996037d2852aeadb912affa660a2319faf58450f0c5c024b16314ffd0ed671c87f199867c5191fa008aebd9e5b85ceee1a752ab38f0c5a4cc19f09d70c07c7676aa1c4cd1092d11217963d40cda8c8153a8867b203ca350d5e19a6b10eaece23738081024066185476b8b"}}, &(0x7f00000012c0)={0x0, 0xf, 0x2ce, {0x5, 0xf, 0x2ce, 0x5, [@generic={0xff, 0x10, 0xb, "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"}, @ssp_cap={0x18, 0x10, 0xa, 0xc9, 0x3, 0x0, 0x0, 0x5, [0x0, 0xc0, 0x0]}, @generic={0xb1, 0x10, 0x1, "3f9066b0473e3e7d0b0d0705690e201d8fd95a291e0245d2acacf85c25243cb771a02d980713a363c3ad52bddbd657694af888bc33ca24428b1567dcfe3ee0dec3f539555287e32b2220617e148717053f00d8ea0d1c3733eda1f50d9d20671235b8e4fb9f071e145ccf21f3f8921c2f0aa2f9bb944740a6a334d5b2feeaab5b227a273e75469bf2301342f0f12572fa61fc2752872e544acd756621f4aaddf551c84cce5ae22e4f87c229896b7d"}, @generic={0xf6, 0x10, 0x2, "0ba6d711afa8b4610b19763518cb0325f67442671c2a5c7e2451fcce15d8b596b7e24e8c125b8b28aeb3c573f459edd3ad9fa154bbce0dc4d3e17fc94520579ca7a8433ed633cccd2407d1099742e467be431eac26b0027970ee33a364728ad3c09226928928410d5ef5ff29456b130ae57c0bb5bd1c6387aa8422fcf8b77e4018befc81961c63aa6a56b981de9083561c654ed3ffa7db9eb19e165412671f360dacd078cd2b6bbec69d09e643beb22e4b292049983fe20d8b70e1f17a7f30d9db64d8bedfce43912a3b29a57983620c3ac9106f2b2b527d9cd35d34b388e1b97cdefb616b906b85780f2b2a53092d48fe5b7c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x1, 0x9, 0xfff7, 0xe}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x2, 0x81, "8567d73f", "ba318102"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x1, 0x9, 0x7, 0xb, 0x1, 0x61}}}, &(0x7f0000001940)={0x84, &(0x7f0000000740)={0x40, 0xc, 0xb8, "1fb6f5269b638f09a54ed710722dc7549158f2b1436fbdeb8929b1fc2bba9fb15d71f1f5447c88f05d9c387045dc05eaf75e9d9c9e6283508ca5c9d850cbab3f2ccc4c07a858f02f7c045aa55db319bad87e373a8bdb5576641061c0f701f8d518a6bd641ec4fc100f8a8193d43c9e112b7cbba49afb7534b161ac4d874fc5de774b296a335b5fc99689060fc4e49efe5de07f18828bb71003156026657bebfc71b791b0dc0cd3257ea8c092b872e559ecbf08cf5d22a50b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001600)={0x20, 0x0, 0x4}, &(0x7f0000001ac0)=ANY=[@ANYBLOB="2000bdbd7500048f1707fa985b036a2907a031e26bff4b4a84f585f64eec7d91653e704408d1655a2ad68f59d90f16834f4f36510ef69c11b708c0d7af4281a8eaf9862075a628260fb08e9ff4ce2aad6743e21f405d40d1224d3ce65fb04d0f21159d2a1a7a3a12df300caf2da4e031646fbe8bf1b3c49f67a010be9f49576b874f152a33441a6a3068f826de3da874b5954746914c5a4e9abc1c5da15fd1f90c779f24973ea6df11ffab7a4404b3566d64e86dcb4f274525691f842b"], &(0x7f0000001680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0xfd}, &(0x7f0000001700)={0x40, 0xb, 0x2, "27d7"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001780)={0x40, 0x13, 0x6, @local}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @random="a12ca6f4c769"}, &(0x7f0000001800)={0x40, 0x19, 0x2, "e0aa"}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000018c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0x4}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 31.435164314s ago: executing program 5 (id=445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000048000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 31.410302125s ago: executing program 2 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 31.308776367s ago: executing program 5 (id=447): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000200000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) 31.306877785s ago: executing program 2 (id=448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) close_range(r0, r0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf80d, 0x81, 0x7, 0x4, 0x9, 0xf22, 0x8b4c}, &(0x7f0000000100)={0x0, 0x8, 0xffffffffffffffff, 0xf4, 0x4, 0x7, 0x0, 0xffffffffffffff93}, &(0x7f0000000140)={0x5, 0xac4f, 0x3, 0x5, 0x6, 0x1ff, 0x2, 0x87}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x8000000000000000]}, 0x8}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x\x00'], 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000380), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6(0xa, 0x80001, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@remote, @in6=@local, 0x4e02, 0x0, 0x4e24, 0x8002, 0xa, 0x0, 0x50, 0x0, 0x0, r8}, {0x1, 0x1000000000000401, 0xfffffffffffffffe, 0x3ffffffd, 0x8, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x2, 0x1, 0x1}}, 0xb8}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe80005002"], 0x0) syz_usb_connect$uac1(0x3, 0xca, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x7, 0xd0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xee}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x5, 0x80, 0xa, 0x4, 0xef}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0xe, "aae3086f"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x7, "d7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x3, 0x1001}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x0, 0x6c, "185f933580"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x40, 0x19, "95608e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x54, 0x8f, {0x7, 0x25, 0x1, 0x0, 0xe, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x0, 0xed, 'l(', 'N'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x63, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x4, 0x8, "3b8e7b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8a, 0x1, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5, 0x1ff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x8, 0x7f, 0x1, 0xff, 0x8}, 0x61, &(0x7f0000000640)={0x5, 0xf, 0x61, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x1, 0x6}, @ptm_cap={0x3}, @generic={0x4f, 0x10, 0xb, "aa212be13f74896dd59062335f1889f51178398a75f7b2c349140b5d6a05a07f4ed22a892350f2a9b13033176ea74fb381e9d904c172faa47cea3544354d9ed57e00a93b4597a3fa540f04de"}]}, 0x4, [{0xb3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x3, &(0x7f0000000700)=@string={0x3, 0x3, ']'}}, {0x2d, &(0x7f0000000900)=@string={0x2d, 0x3, "2e3330ae68a9dbb76113e5cee820b034ab977a80f498ff6340b25c2addf830f6b044b9437dc4a971fcb838"}}]}) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x1200000000000008) 31.201236466s ago: executing program 5 (id=449): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x80, 0xff0000, "cc9aac87ec00d9a36a34fa478da661dadd407c7eca269431", {0x800, 0x200}, 0x36a}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000040)=@random={'btrfs.', 'user.incfs.metadata\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000840)="042a346f234276951da823c4934899ba2c4b8c16f25f228028a7a21c064dce490ebb1e6d1466e440a9a03e4b96e22443dfe863a1dfb1f04046eb8d31a1ff9aacbd3183b5e505b0f5adba040cdc84d9bb9d09f89ddf7833f7882ca983e50f23d11540f64d620351e3b913c7faff54051834f45d57a74f9f", 0xfffffcc2}], 0x1, 0x6) read$FUSE(r2, &(0x7f0000000dc0)={0x2020}, 0x2020) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x17c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x130, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @chsw_timing={0x68, 0x4, {0x9, 0x5}}, @tim={0x5, 0x24, {0x7, 0x7a, 0xa9, "91884ea81a05cdbc87bcd498a63cf9811b65dda01b613d4ef81820bd4c3e89a9d0"}}, @perr={0x84, 0x42, {0x4, 0x4, [{{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x27}, {{}, @device_b, 0x7fff, @void, 0x39}, {{}, @broadcast, 0x80000000, @void, 0x2d}]}}, @chsw_timing={0x68, 0x4, {0xa, 0x6}}, @measure_req={0x26, 0x9a, {0x6, 0x6, 0x7, "cb68d6f3a3e6333b35800246c85363309d344532a6a6567e79514b0d7b752038d528a94d3e442dfd231360c09f94dcded091c6cf3685bb0631b82a01dad8bd0ae3376602b29c63bdfeca149961ceb471dc2fee100b31bd30892e6a9420f1a88807f95484667d398b42773ec2cdab88882001f2aa75185fa25fb76d433065ef0c9628aaa59d89ee0012d246b51cfc36eb2e7a3a96865b14"}}, @supported_rates={0x1, 0x4, [{0x33, 0x1}, {0x24, 0x1}, {0x16, 0x1}, {0x3}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x1, 0x0, 0x0, {0x400, 0x2, 0x0, 0xd, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x5, 0x6}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040850}, 0x40) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r4, 0x402, 0x5) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x36) creat(&(0x7f0000000080)='./file0\x00', 0x86) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r9, 0x0, &(0x7f0000000000)='L', 0x1, 0x2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r9, 0x4}) 31.200732834s ago: executing program 4 (id=450): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000b00), 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000500)={0x2, 0x200, 0x80, 0x9, 0x8001, 0x1}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(0x0, 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r5 = dup(r4) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) read$FUSE(r5, 0x0, 0x0) 31.057849311s ago: executing program 1 (id=451): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 30.943672942s ago: executing program 5 (id=452): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x8b01, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x200000c5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x18) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 30.641476765s ago: executing program 1 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 28.415909168s ago: executing program 1 (id=454): fanotify_init(0x200, 0x0) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2e, 0x2014, 0x0, @value}, 0x20) r1 = syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) (async) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') (async) lseek(r0, 0x2000, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2e, 0x2014, 0x0, @value}, 0x20) (async) syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) 0s ago: executing program 33 (id=444): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000fc06000005"]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r3 = syz_open_dev$loop(&(0x7f0000001640), 0xf01c, 0x50240) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000940)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6>\xd38/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x8e\xd2\xeb\x12\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '[\'+!!\\'}, {0x20, '#! '}, {0x20, '{@Y\xf4\xe4lC\n\x00\xc7t\xe9\xf2\xa1?77g\xa3\xb2t\x1c\x02`\x98\x1e\x0f\xcd\xb928|\x82\xb2WF\xd1;t\x85\xd1mI\xb26\x9b\\/\x7f\xc5\x01\x7f+\xa8D\x10RkY\xcc\xd4L]qN\xdfL\xccA\xa9\x90R|\x9a7\x88\xe8\xeen\a\xff\x00\xa1\x95\xcbW\xb9x\xd0\xae\xd5ny\xe87e-\xd0\x80\xe3BE<\x14\xceN?\xc4\x88\xd1T\r\xfa\xaer\xd8hg\xfb\xce\x03[N\xc5\x9e\x83\xb8\xb1O%\x13\xd8\xb1\xb1\xcan\xd82\x93R,\xab\xden\x83Xv\x8e\xc5[Y^V\x00%\xcfl\x9a_\xce\xf0%\xaf\xdf\x9f\xec3\xe4\x19\xf7\xde\xf5\v\x96KH\xfa\x89\x82\xda\xf4X\xa6=\x01\x8f\x11\xff\xb2=\x962k\bm<\xeb\xf7a\x160\x1a\xe8\xaa\xcay\xb2\xb4\xfb5\xfb~\r\xe1\x16\xd8%{M\xe8u~QEn\xea\xc4 ~\x00\x00\x00\x81\x0e\xfb\x98\xb7\xe4\\ \v\xde!bU\xed`(\xaf\xe2\xdc\xa1\x91h\r\xf5\xee\xd1\xd9?\xe9K\xbb\xdb5s\a\xab\xb9\xd5\x06u\xff\xd4Bb\xdfw7\xb5i\xdd \x903\xd60\x04\x01\xb5\xf5}\x16\xb4W\xf9kh\x83\xba2\xa7\xe1\xef\rdEf\xc3\x8a\x86\xbb\x13\xa7X\xc1\xd9\x1e\xd0aeO\xf2w\xd8\x12\xcbXNI\xcd$\x84Tg\xf4v\x87\x97R\xe9\xb4f?o\xd2\x98\x9b\xc9F#\'I\xff}C[\x10n\xa8\\\xfd\xb4\xc2\xd0\x13\x94Q\xc1\x1d<\t\xb3\x18X\x9f\x1e\xaa\xfe}\xd7]A\x03\xf7]\x95\x7f\x11\xfd7\xa6\xcc\xbd;\x9b\xc7!\x8e\x04\x98e\xf2\x98\x00Yc\x9e\xa3\x0f{\x81Z\x80]d7\x97_&(\xff\xbd0\xc6\xad\xd2P$\xcdB\xab\xe5~\xd6E\x8a\xcb'}]}, 0x2e0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b0109006501000000000020000000000000e50500000700"}}) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fe"], 0x48) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x2, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x4, {0x8, @usage=0x4, 0x0, 0xffffffffffffffff, 0xe, 0x5, 0x3, 0x0, 0x0, @usage, 0xb, 0xffff00, [0x4, 0x763, 0xff, 0x9, 0x5, 0xb]}, {0x2, @usage=0x6, r6, 0x2, 0x8000000000000001, 0x0, 0x3, 0x3, 0x9d, @struct={0x2206, 0x36}, 0x10, 0x6, [0x8, 0x4, 0x1, 0x8, 0x100000001, 0xfffffffffffffffe]}, {0xfffffffffffffffc, @struct={0x677d1314, 0x5}, 0x0, 0x0, 0x9, 0xc359, 0x7, 0x0, 0x518, @usage=0x800, 0x81, 0x5, [0xe309, 0x8000000000000000, 0x7, 0x3, 0x9, 0xa000000000]}, {0x9e, 0x9, 0x7fffffffffffffff}}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x32, 0x40, 0x1a, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x72, 0x3, 0x1, {0x22, 0x16b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0xe0}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x0, 0x10, 0x4, 0x7f, 0x10, 0x1}, 0x48, &(0x7f00000011c0)=ANY=[@ANYBLOB="050f48000414100407637a2b258fadb52683067608b793b44714100400111f2b0b2468a2455f5ed51fc7d2b7b014100a810220000000f00080003f0000f03fff4007100200ab4000"], 0x1, [{0x35, &(0x7f0000001240)=@string={0x35, 0x3, "9058fe931418cc0674595fbb98a80fa1fbdc2e81e7ad16725b9d226899b2402add59bfc9d8bb4bf64cfa03a60dc95600c2ea9c"}}]}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x31, 0xd9, 0x40, 0x0, 0x7}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000200000000000000f40000001825000085a9cb5bf36d2b7eb5c926fb52357df3d418ed1f43c12b2b6ac0a5348de8ce8a319794e95765dccec577978c9493ee8f2d66f0daab4300c0449981db7fbbcf236ca5730cae933509450ea3e6f908c609c1ab93391fa747df650ff1b4f71341e40369ec9e99de1f27c81bd271b3dcfda93c1d71b517cc894b3edf1f959e54c1c78e718e9c", @ANYRES32, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x70, &(0x7f00000001c0)=""/112, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x4, 0x9}, {0x1, 0x1, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x8, @void, @value}, 0x94) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300000000000000000000000000fc0200000000000000000000000000f402000700000000000a"], 0x80}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x10, 0x6, 0xa, {0xa, 0x10, "87912ea0f89e8297"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xc, 0x14, {0x14, 0xb, "b63a5b721d9ac3311ef7120e422840a148c9"}}, &(0x7f0000000600)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "afaa7d64a8ed1281e18ac964b97f393e1d48160261818919467e48d1ce64393b587fd129df5ab8a10f4dc09a4632ac46804c90dce75251266fe54e722d01dbec12fd108c45779cfb325b188c94a67274112981cbec17db1ff38aa65c6996037d2852aeadb912affa660a2319faf58450f0c5c024b16314ffd0ed671c87f199867c5191fa008aebd9e5b85ceee1a752ab38f0c5a4cc19f09d70c07c7676aa1c4cd1092d11217963d40cda8c8153a8867b203ca350d5e19a6b10eaece23738081024066185476b8b"}}, &(0x7f00000012c0)={0x0, 0xf, 0x2ce, {0x5, 0xf, 0x2ce, 0x5, [@generic={0xff, 0x10, 0xb, "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"}, @ssp_cap={0x18, 0x10, 0xa, 0xc9, 0x3, 0x0, 0x0, 0x5, [0x0, 0xc0, 0x0]}, @generic={0xb1, 0x10, 0x1, "3f9066b0473e3e7d0b0d0705690e201d8fd95a291e0245d2acacf85c25243cb771a02d980713a363c3ad52bddbd657694af888bc33ca24428b1567dcfe3ee0dec3f539555287e32b2220617e148717053f00d8ea0d1c3733eda1f50d9d20671235b8e4fb9f071e145ccf21f3f8921c2f0aa2f9bb944740a6a334d5b2feeaab5b227a273e75469bf2301342f0f12572fa61fc2752872e544acd756621f4aaddf551c84cce5ae22e4f87c229896b7d"}, @generic={0xf6, 0x10, 0x2, "0ba6d711afa8b4610b19763518cb0325f67442671c2a5c7e2451fcce15d8b596b7e24e8c125b8b28aeb3c573f459edd3ad9fa154bbce0dc4d3e17fc94520579ca7a8433ed633cccd2407d1099742e467be431eac26b0027970ee33a364728ad3c09226928928410d5ef5ff29456b130ae57c0bb5bd1c6387aa8422fcf8b77e4018befc81961c63aa6a56b981de9083561c654ed3ffa7db9eb19e165412671f360dacd078cd2b6bbec69d09e643beb22e4b292049983fe20d8b70e1f17a7f30d9db64d8bedfce43912a3b29a57983620c3ac9106f2b2b527d9cd35d34b388e1b97cdefb616b906b85780f2b2a53092d48fe5b7c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x1, 0x9, 0xfff7, 0xe}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x2, 0x81, "8567d73f", "ba318102"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x1, 0x9, 0x7, 0xb, 0x1, 0x61}}}, &(0x7f0000001940)={0x84, &(0x7f0000000740)={0x40, 0xc, 0xb8, "1fb6f5269b638f09a54ed710722dc7549158f2b1436fbdeb8929b1fc2bba9fb15d71f1f5447c88f05d9c387045dc05eaf75e9d9c9e6283508ca5c9d850cbab3f2ccc4c07a858f02f7c045aa55db319bad87e373a8bdb5576641061c0f701f8d518a6bd641ec4fc100f8a8193d43c9e112b7cbba49afb7534b161ac4d874fc5de774b296a335b5fc99689060fc4e49efe5de07f18828bb71003156026657bebfc71b791b0dc0cd3257ea8c092b872e559ecbf08cf5d22a50b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001600)={0x20, 0x0, 0x4}, &(0x7f0000001ac0)=ANY=[@ANYBLOB="2000bdbd7500048f1707fa985b036a2907a031e26bff4b4a84f585f64eec7d91653e704408d1655a2ad68f59d90f16834f4f36510ef69c11b708c0d7af4281a8eaf9862075a628260fb08e9ff4ce2aad6743e21f405d40d1224d3ce65fb04d0f21159d2a1a7a3a12df300caf2da4e031646fbe8bf1b3c49f67a010be9f49576b874f152a33441a6a3068f826de3da874b5954746914c5a4e9abc1c5da15fd1f90c779f24973ea6df11ffab7a4404b3566d64e86dcb4f274525691f842b"], &(0x7f0000001680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0xfd}, &(0x7f0000001700)={0x40, 0xb, 0x2, "27d7"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001780)={0x40, 0x13, 0x6, @local}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @random="a12ca6f4c769"}, &(0x7f0000001800)={0x40, 0x19, 0x2, "e0aa"}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000018c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0x4}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) kernel console output (not intermixed with test programs): 13, idProduct=0246, bcdDevice=e6.56 [ 108.000266][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.007274][ T6553] tipc: Started in network mode [ 108.013352][ T6553] tipc: Node identity ac1414aa, cluster identity 4711 [ 108.023356][ T5878] usb 3-1: Product: syz [ 108.026818][ T6553] tipc: Enabled bearer , priority 10 [ 108.037864][ T5878] usb 3-1: Manufacturer: syz [ 108.042478][ T5878] usb 3-1: SerialNumber: syz [ 108.047177][ T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 108.119246][ T5878] usb 3-1: config 0 descriptor?? [ 108.164370][ T5878] as10x_usb: device has been detected [ 108.193303][ T5878] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 108.200859][ T974] usb 2-1: config 0 has no interfaces? [ 108.218615][ T974] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 108.246065][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.281697][ T974] usb 2-1: config 0 descriptor?? [ 108.334869][ T5878] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 108.429273][ T5878] as10x_usb: error during firmware upload part1 [ 108.451865][ T5878] Registered device PCTV Systems picoStick (74e) [ 108.470472][ T5878] usb 3-1: USB disconnect, device number 12 [ 108.473737][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 108.500364][ T6566] FAULT_INJECTION: forcing a failure. [ 108.500364][ T6566] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 108.503867][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.553423][ T974] usb 2-1: USB disconnect, device number 11 [ 108.566060][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.0.148 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 108.566080][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 108.566089][ T6566] Call Trace: [ 108.566096][ T6566] [ 108.566103][ T6566] dump_stack_lvl+0x189/0x250 [ 108.566132][ T6566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.566157][ T6566] ? __pfx__printk+0x10/0x10 [ 108.566173][ T6566] ? fs_reclaim_acquire+0x7d/0x100 [ 108.566200][ T6566] should_fail_ex+0x414/0x560 [ 108.566223][ T6566] prepare_alloc_pages+0x213/0x610 [ 108.566240][ T6566] __alloc_frozen_pages_noprof+0x123/0x370 [ 108.566256][ T6566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.566269][ T6566] ? __lock_acquire+0xaac/0xd20 [ 108.566286][ T6566] ? policy_nodemask+0x27c/0x720 [ 108.566300][ T6566] alloc_pages_mpol+0x232/0x4a0 [ 108.566314][ T6566] vma_alloc_folio_noprof+0xe4/0x200 [ 108.566328][ T6566] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 108.566345][ T6566] folio_prealloc+0x30/0x180 [ 108.566358][ T6566] do_wp_page+0x123a/0x5760 [ 108.566379][ T6566] ? __pfx_do_wp_page+0x10/0x10 [ 108.566388][ T6566] ? do_raw_spin_lock+0x121/0x290 [ 108.566400][ T6566] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.566415][ T6566] __handle_mm_fault+0x1028/0x5380 [ 108.566435][ T6566] ? __pfx___handle_mm_fault+0x10/0x10 [ 108.566453][ T6566] ? follow_page_pte+0xdee/0x13c0 [ 108.566469][ T6566] handle_mm_fault+0x3f6/0x8c0 [ 108.566484][ T6566] __get_user_pages+0x16f0/0x2a40 [ 108.566510][ T6566] ? __pfx___get_user_pages+0x10/0x10 [ 108.566525][ T6566] __gup_longterm_locked+0xd66/0x15b0 [ 108.566540][ T6566] ? __lock_acquire+0xaac/0xd20 [ 108.566558][ T6566] pin_user_pages_remote+0xd4/0x120 [ 108.566570][ T6566] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 108.566584][ T6566] ? down_read+0x1ad/0x2e0 [ 108.566597][ T6566] process_vm_rw+0x59e/0xb40 [ 108.566607][ T6566] ? get_pid_task+0x20/0x1f0 [ 108.566625][ T6566] ? __pfx_process_vm_rw+0x10/0x10 [ 108.566634][ T6566] ? rcu_read_lock_any_held+0xb3/0x120 [ 108.566658][ T6566] ? __pfx_vfs_write+0x10/0x10 [ 108.566679][ T6566] ? ksys_write+0x1f0/0x250 [ 108.566690][ T6566] ? rcu_is_watching+0x15/0xb0 [ 108.566707][ T6566] __x64_sys_process_vm_writev+0xe0/0x100 [ 108.566721][ T6566] do_syscall_64+0xf6/0x210 [ 108.566733][ T6566] ? clear_bhb_loop+0x45/0xa0 [ 108.566744][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.566753][ T6566] RIP: 0033:0x7f4a3a18e969 [ 108.566762][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.566769][ T6566] RSP: 002b:00007f4a3afd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 108.566780][ T6566] RAX: ffffffffffffffda RBX: 00007f4a3a3b5fa0 RCX: 00007f4a3a18e969 [ 108.566786][ T6566] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000060 [ 108.566792][ T6566] RBP: 00007f4a3afd7090 R08: 0000000000000229 R09: 0000000000000000 [ 108.566804][ T6566] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 108.566809][ T6566] R13: 0000000000000000 R14: 00007f4a3a3b5fa0 R15: 00007f4a3a4dfa28 [ 108.566827][ T6566] [ 108.579043][ T5878] Unregistered device PCTV Systems picoStick (74e) [ 108.721273][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.2.150'. [ 108.819293][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.843804][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 108.926353][ T5878] as10x_usb: device has been disconnected [ 108.974870][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.002029][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.144930][ T5880] tipc: Node number set to 2886997162 [ 109.203834][ T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.353814][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 109.363728][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 109.379204][ T974] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 109.390136][ T974] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 109.412486][ T974] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 109.422069][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.422243][ T6597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.436595][ T974] usb 2-1: SerialNumber: syz [ 109.526225][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 109.549020][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 109.575694][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 109.581720][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 109.603279][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 109.644620][ T5913] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 109.672838][ T5913] usb 6-1: can't read configurations, error -71 [ 109.679463][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 109.753806][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 109.794550][ T5878] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 109.815788][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.841723][ T5878] usb 3-1: Product: syz [ 109.857486][ T5878] usb 3-1: Manufacturer: syz [ 109.874602][ T5878] usb 3-1: SerialNumber: syz [ 109.915829][ T5878] usb 3-1: config 0 descriptor?? [ 110.031160][ T974] usb 2-1: USB disconnect, device number 12 [ 110.282261][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.5.156'. [ 110.315485][ T5914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 110.483987][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 110.510948][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.542798][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.578651][ T6584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.585860][ T5914] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2a, bcdDevice= 0.00 [ 110.585887][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.595664][ T5914] usb 5-1: config 0 descriptor?? [ 110.728048][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.752120][ T5878] input input7: Device does not respond to id packet P [ 110.784793][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.811670][ T5878] input input7: Device does not respond to id packet B [ 110.828403][ T6612] loop2: detected capacity change from 0 to 7 [ 110.835458][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.849091][ T5878] input input7: Device does not respond to id packet N [ 110.851830][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 110.886094][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 110.895206][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.910689][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 110.913119][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.924082][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.950488][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 111.017162][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.037444][ T5878] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 111.053975][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.072209][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.087909][ T5878] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 111.088974][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 111.116626][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.123343][ T5913] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 111.165048][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 111.173099][ T6612] ldm_validate_partition_table(): Disk read failed. [ 111.203566][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.214310][ T5878] usb 3-1: USB disconnect, device number 13 [ 111.234052][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.263353][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.291730][ T6612] Buffer I/O error on dev loop2, logical block 0, async page read [ 111.292840][ T5913] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 111.345798][ T5913] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 111.355396][ T6612] Dev loop2: unable to read RDB block 0 [ 111.361320][ T6612] loop2: unable to read partition table [ 111.380614][ T6612] loop2: partition table beyond EOD, truncated [ 111.396065][ T6612] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.419423][ T5828] ldm_validate_partition_table(): Disk read failed. [ 111.437878][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.459509][ T5828] Dev loop2: unable to read RDB block 0 [ 111.480374][ T5913] usb 6-1: Product: syz [ 111.498251][ T5828] loop2: unable to read partition table [ 111.508074][ T5913] usb 6-1: Manufacturer: syz [ 111.569602][ T5913] usb 6-1: SerialNumber: syz [ 111.575750][ T5828] loop2: partition table beyond EOD, truncated [ 111.601604][ T6641] ldm_validate_partition_table(): Disk read failed. [ 111.609911][ T5913] usb 6-1: config 0 descriptor?? [ 111.626456][ T6635] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 111.636422][ T6641] Dev loop2: unable to read RDB block 0 [ 111.653502][ T5913] usb 6-1: ucan: probing device on interface #0 [ 111.660347][ T6641] loop2: unable to read partition table [ 111.671738][ T5913] usb 6-1: ucan: invalid endpoint configuration [ 111.680290][ T6641] loop2: partition table beyond EOD, truncated [ 111.690238][ T5913] usb 6-1: ucan: probe failed; try to update the device firmware [ 111.700154][ T6641] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.756751][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 111.781546][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.794096][ T974] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 111.843541][ T5914] usb 5-1: USB disconnect, device number 14 [ 111.882628][ T5880] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.936501][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.946669][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.960465][ T974] usb 2-1: config 0 has no interfaces? [ 111.973599][ T974] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 111.992684][ T5880] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.003580][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.005198][ T5878] usb 6-1: USB disconnect, device number 9 [ 112.036415][ T974] usb 2-1: Product: syz [ 112.043937][ T974] usb 2-1: Manufacturer: syz [ 112.062642][ T974] usb 2-1: SerialNumber: syz [ 112.089933][ T974] usb 2-1: config 0 descriptor?? [ 112.419370][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.462291][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.823786][ T5878] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 112.945502][ T52] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 113.000013][ T5878] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 113.046632][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.086242][ T5878] usb 5-1: Product: syz [ 113.102568][ T5878] usb 5-1: Manufacturer: syz [ 113.107742][ T5878] usb 5-1: SerialNumber: syz [ 113.145307][ T52] usb 6-1: Using ep0 maxpacket: 32 [ 113.163595][ T52] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.173083][ T52] usb 6-1: config 0 has no interface number 0 [ 113.180936][ T5878] usb 5-1: config 0 descriptor?? [ 113.191682][ T52] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.217652][ T52] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.243520][ T52] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 113.273653][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.297939][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 113.335397][ T52] usb 6-1: config 0 descriptor?? [ 113.546772][ T6704] warning: `syz.0.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.618322][ T5878] airspy 5-1:0.0: Board ID: 00 [ 113.625714][ T5878] airspy 5-1:0.0: Firmware version: [ 113.655105][ T6678] syz.5.164 uses obsolete (PF_INET,SOCK_PACKET) [ 114.142316][ T52] uclogic 0003:28BD:0094.0003: pen parameters not found [ 114.206847][ T52] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 114.452513][ T52] usb 6-1: USB disconnect, device number 10 [ 114.631027][ T5878] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 114.641259][ T5878] airspy 5-1:0.0: Registered as swradio24 [ 114.649372][ T5878] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 114.674004][ T5878] usb 5-1: USB disconnect, device number 15 [ 114.786041][ T974] usb 2-1: USB disconnect, device number 13 [ 114.995096][ T6723] capability: warning: `syz.0.170' uses 32-bit capabilities (legacy support in use) [ 115.084081][ T6728] netlink: 'syz.2.171': attribute type 237 has an invalid length. [ 115.312755][ T6739] netlink: 277 bytes leftover after parsing attributes in process `syz.1.174'. [ 115.332559][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 115.351979][ T6741] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 115.365592][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.175'. [ 115.377464][ T6741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.414175][ T5914] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.433433][ T6738] IPv6: sit1: Disabled Multicast RS [ 115.494509][ T6749] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 115.726280][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 115.758913][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.838960][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.853914][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 115.903997][ T5914] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2a, bcdDevice= 0.00 [ 115.951052][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.154619][ T5878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 116.166312][ T5878] usb 5-1: can't read configurations, error -61 [ 116.168962][ T5914] usb 6-1: config 0 descriptor?? [ 116.826594][ T6732] loop2: detected capacity change from 0 to 7 [ 116.845404][ T6732] buffer_io_error: 42 callbacks suppressed [ 116.845421][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.868824][ T6753] syz.2.177 (6753): drop_caches: 2 [ 116.883954][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 116.939792][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.035552][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.127775][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.144461][ T5878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.152331][ T5878] usb 5-1: can't read configurations, error -61 [ 117.182386][ T5878] usb usb5-port1: attempt power cycle [ 117.204425][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.212618][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.246658][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.279447][ T6732] ldm_validate_partition_table(): Disk read failed. [ 117.293485][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.305652][ T6765] veth0_macvtap: left promiscuous mode [ 117.324910][ T6765] macvtap0: entered promiscuous mode [ 117.337803][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.365807][ T6765] input: syz0 as /devices/virtual/input/input8 [ 117.374591][ T6732] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.434096][ T6732] Dev loop2: unable to read RDB block 0 [ 117.480754][ T6732] loop2: unable to read partition table [ 117.496984][ T6732] loop2: partition table beyond EOD, truncated [ 117.519523][ T6732] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.553758][ T5878] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 117.626987][ T5878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.681282][ T5828] ldm_validate_partition_table(): Disk read failed. [ 117.717649][ T5878] usb 5-1: can't read configurations, error -61 [ 117.758372][ T5828] Dev loop2: unable to read RDB block 0 [ 117.812064][ T5828] loop2: unable to read partition table [ 117.855360][ T5828] loop2: partition table beyond EOD, truncated [ 117.877938][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 117.891883][ T6760] ldm_validate_partition_table(): Disk read failed. [ 117.914435][ T6760] Dev loop2: unable to read RDB block 0 [ 117.924101][ T6760] loop2: unable to read partition table [ 117.972040][ T6760] loop2: partition table beyond EOD, truncated [ 117.973922][ T5878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.997456][ T5878] usb 5-1: can't read configurations, error -61 [ 118.009817][ T5878] usb usb5-port1: unable to enumerate USB device [ 118.046715][ T6760] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.173403][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 118.183911][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 118.216978][ T5914] usb 6-1: USB disconnect, device number 11 [ 118.248824][ T5825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 118.325614][ T6785] ip6tnl1: entered promiscuous mode [ 118.473781][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 118.520908][ T5825] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.603318][ T5825] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.632256][ T5825] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.647511][ T5825] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.670886][ T5825] usb 2-1: Product: syz [ 118.679558][ T5825] usb 2-1: Manufacturer: syz [ 118.732013][ T5825] hub 2-1:4.0: USB hub found [ 118.923308][ T5825] hub 2-1:4.0: 6 ports detected [ 118.931165][ T5825] hub 2-1:4.0: insufficient power available to use all downstream ports [ 119.126215][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.138333][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.194082][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 119.204971][ T5825] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 119.254007][ T5825] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 119.306642][ T5825] usb 2-1: USB disconnect, device number 14 [ 119.326005][ T5880] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 119.364280][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 119.374130][ T5878] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 119.414846][ T5878] usb 6-1: config 1 interface 0 has no altsetting 0 [ 119.427216][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.453686][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.463844][ T5880] usb 5-1: device descriptor read/64, error -71 [ 119.471907][ T5878] usb 6-1: Product: ÐŽ [ 119.482027][ T5878] usb 6-1: Manufacturer: О [ 119.492152][ T5878] usb 6-1: SerialNumber: 讉럔å±ä‰´ä ‚â¼’ï²äšœå¯‰ç‡œçž†éŠ£ï‡¬å‘µë´¬â‚¸æ˜¹ï–ªà´„à»å–’䮨쎠 [ 119.639830][ T6795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 119.733938][ T5880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 119.887706][ T5878] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 119.896040][ T5880] usb 5-1: device descriptor read/64, error -71 [ 119.953742][ T5878] usb 6-1: USB disconnect, device number 12 [ 120.005972][ T5880] usb usb5-port1: attempt power cycle [ 120.373236][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 120.417139][ T5880] usb 5-1: device descriptor read/8, error -71 [ 120.467766][ T6837] binder: 6836:6837 ioctl 5000940a 200000000480 returned -22 [ 120.484825][ T6837] binder: BINDER_SET_CONTEXT_MGR already set [ 120.507344][ T6837] binder: 6836:6837 ioctl 4018620d 200000000040 returned -16 [ 120.685434][ T5880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 120.775244][ T5880] usb 5-1: device descriptor read/8, error -71 [ 120.927943][ T5880] usb usb5-port1: unable to enumerate USB device [ 121.544936][ T6861] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 121.583820][ T6861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.152450][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 122.240259][ T6887] vlan2: entered allmulticast mode [ 122.270691][ T6887] geneve1: entered allmulticast mode [ 122.443105][ T6895] vivid-007: ================= START STATUS ================= [ 122.674106][ T6895] vivid-007: Enable Output Cropping: true [ 122.679970][ T6895] vivid-007: Enable Output Composing: true [ 122.694696][ T6895] vivid-007: Enable Output Scaler: true [ 122.700354][ T6895] vivid-007: Tx RGB Quantization Range: Automatic [ 122.707469][ T6895] vivid-007: Transmit Mode: HDMI [ 122.712455][ T6895] vivid-007: Hotplug Present: 0x00000000 [ 122.718527][ T6895] vivid-007: RxSense Present: 0x00000000 [ 122.725656][ T6895] vivid-007: EDID Present: 0x00000000 [ 122.733948][ T6895] vivid-007: ================== END STATUS ================== [ 123.588394][ T974] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 123.825718][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.861911][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.927133][ T974] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 123.964992][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.010888][ T974] usb 5-1: config 0 descriptor?? [ 124.377316][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 124.377332][ T30] audit: type=1804 audit(1746684659.916:22): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.205" name="/newroot/47/file0" dev="tmpfs" ino=259 res=1 errno=0 [ 124.453410][ T6914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.478065][ T6914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.950821][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 126.099983][ T6924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.198210][ T974] usbhid 5-1:0.0: can't add hid device: -71 [ 126.241354][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.397085][ T974] usb 5-1: USB disconnect, device number 24 [ 127.193837][ T1544] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 127.373831][ T1544] usb 6-1: Using ep0 maxpacket: 32 [ 127.382821][ T1544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.398013][ T1544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.422261][ T1544] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.442001][ T1544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.456282][ T6939] fuse: Unknown parameter 'default_p' [ 127.464614][ T1544] usb 6-1: config 0 descriptor?? [ 127.479950][ T1544] hub 6-1:0.0: USB hub found [ 127.688222][ T1544] hub 6-1:0.0: 26 ports detected [ 127.715411][ T1544] hub 6-1:0.0: insufficient power available to use all downstream ports [ 127.952311][ T1544] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 127.964857][ T1544] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 127.982002][ T1544] usbhid 6-1:0.0: can't add hid device: -71 [ 127.992110][ T1544] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 128.025321][ T1544] usb 6-1: USB disconnect, device number 13 [ 132.777389][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784499][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.727055][ T1544] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.817376][ T5878] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 147.828651][ T6982] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 147.893944][ T1544] usb 3-1: Using ep0 maxpacket: 8 [ 147.909734][ T1544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.941892][ T1544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.978698][ T1544] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 147.996260][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 148.015307][ T1544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.015747][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 148.051804][ T1544] usb 3-1: config 0 descriptor?? [ 148.057328][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.076001][ T5878] usb 5-1: config 0 descriptor?? [ 148.111131][ T5878] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 148.315691][ T5878] gspca_sonixj: reg_r err -32 [ 148.330064][ T5878] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 148.370712][ T5878] usb 5-1: USB disconnect, device number 25 [ 148.676280][ T1544] usbhid 3-1:0.0: can't add hid device: -71 [ 148.692396][ T1544] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.732177][ T1544] usb 3-1: USB disconnect, device number 14 [ 149.082083][ T7005] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7005] [ 150.633915][ T974] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.799525][ T974] usb 2-1: config 0 has no interfaces? [ 151.025969][ T974] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.035507][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.044955][ T974] usb 2-1: Product: syz [ 151.061955][ T7027] FAULT_INJECTION: forcing a failure. [ 151.061955][ T7027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.075716][ T974] usb 2-1: Manufacturer: syz [ 151.133034][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.0.235 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 151.133059][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 151.133068][ T7027] Call Trace: [ 151.133075][ T7027] [ 151.133084][ T7027] dump_stack_lvl+0x189/0x250 [ 151.133121][ T7027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.133140][ T7027] ? __pfx__printk+0x10/0x10 [ 151.133155][ T7027] ? fs_reclaim_acquire+0x7d/0x100 [ 151.133178][ T7027] should_fail_ex+0x414/0x560 [ 151.133201][ T7027] prepare_alloc_pages+0x213/0x610 [ 151.133224][ T7027] __alloc_frozen_pages_noprof+0x123/0x370 [ 151.133245][ T7027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.133261][ T7027] ? __lock_acquire+0xaac/0xd20 [ 151.133283][ T7027] ? policy_nodemask+0x27c/0x720 [ 151.133303][ T7027] alloc_pages_mpol+0x232/0x4a0 [ 151.133323][ T7027] vma_alloc_folio_noprof+0xe4/0x200 [ 151.133340][ T7027] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 151.133365][ T7027] folio_prealloc+0x30/0x180 [ 151.133382][ T7027] do_wp_page+0x123a/0x5760 [ 151.133412][ T7027] ? __pfx_do_wp_page+0x10/0x10 [ 151.133423][ T7027] ? do_raw_spin_lock+0x121/0x290 [ 151.133439][ T7027] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 151.133460][ T7027] __handle_mm_fault+0x1028/0x5380 [ 151.133488][ T7027] ? __pfx___handle_mm_fault+0x10/0x10 [ 151.133512][ T7027] ? follow_page_pte+0xdee/0x13c0 [ 151.133533][ T7027] handle_mm_fault+0x3f6/0x8c0 [ 151.133555][ T7027] __get_user_pages+0x16f0/0x2a40 [ 151.133591][ T7027] ? __pfx___get_user_pages+0x10/0x10 [ 151.133612][ T7027] __gup_longterm_locked+0xd66/0x15b0 [ 151.133635][ T7027] ? __lock_acquire+0xaac/0xd20 [ 151.133664][ T7027] pin_user_pages_remote+0xd4/0x120 [ 151.133683][ T7027] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 151.133701][ T7027] ? down_read+0x1ad/0x2e0 [ 151.133718][ T7027] process_vm_rw+0x59e/0xb40 [ 151.133732][ T7027] ? get_pid_task+0x20/0x1f0 [ 151.133757][ T7027] ? __pfx_process_vm_rw+0x10/0x10 [ 151.133770][ T7027] ? rcu_read_lock_any_held+0xb3/0x120 [ 151.133809][ T7027] ? __pfx_vfs_write+0x10/0x10 [ 151.133839][ T7027] ? ksys_write+0x1f0/0x250 [ 151.133852][ T7027] ? rcu_is_watching+0x15/0xb0 [ 151.133875][ T7027] __x64_sys_process_vm_writev+0xe0/0x100 [ 151.133893][ T7027] do_syscall_64+0xf6/0x210 [ 151.133909][ T7027] ? clear_bhb_loop+0x45/0xa0 [ 151.133925][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.133937][ T7027] RIP: 0033:0x7f4a3a18e969 [ 151.133955][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.133965][ T7027] RSP: 002b:00007f4a3afb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 151.133979][ T7027] RAX: ffffffffffffffda RBX: 00007f4a3a3b6080 RCX: 00007f4a3a18e969 [ 151.133988][ T7027] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000009b [ 151.133996][ T7027] RBP: 00007f4a3afb6090 R08: 0000000000000229 R09: 0000000000000000 [ 151.134004][ T7027] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 151.134011][ T7027] R13: 0000000000000000 R14: 00007f4a3a3b6080 R15: 00007f4a3a4dfa28 [ 151.134032][ T7027] [ 151.440851][ T974] usb 2-1: SerialNumber: syz [ 151.753245][ T974] usb 2-1: config 0 descriptor?? [ 151.963862][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.134068][ T1544] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 152.204146][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 152.215398][ T5914] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 184, using maximum allowed: 30 [ 152.233761][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 152.257019][ T5914] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 152.266521][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.275008][ T5914] usb 3-1: Product: syz [ 152.279268][ T5914] usb 3-1: Manufacturer: syz [ 152.284231][ T5914] usb 3-1: SerialNumber: syz [ 152.302790][ T5914] usb 3-1: config 0 descriptor?? [ 152.332620][ T5914] as10x_usb: device has been detected [ 152.346066][ T5914] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 152.360067][ T1544] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 152.371197][ T5914] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 152.383099][ T1544] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 152.394402][ T5914] as10x_usb: error during firmware upload part1 [ 152.396265][ T1544] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.419264][ T5914] Registered device Abilis Systems DVB-Titan [ 152.432148][ T1544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.475559][ T7038] tap0: tun_chr_ioctl cmd 1074025678 [ 152.483710][ T7038] tap0: group set to 0 [ 152.537163][ T1544] usb 3-1: USB disconnect, device number 15 [ 152.580314][ T1544] Unregistered device Abilis Systems DVB-Titan [ 152.592222][ T1544] as10x_usb: device has been disconnected [ 153.147914][ T7050] veth1_macvtap: left promiscuous mode [ 153.188619][ T5914] usb 2-1: USB disconnect, device number 15 [ 153.883719][ T1544] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 153.964485][ T5825] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.088978][ T1544] usb 5-1: config 0 has no interfaces? [ 154.105843][ T1544] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.119328][ T1544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.197595][ T1544] usb 5-1: Product: syz [ 154.242847][ T1544] usb 5-1: Manufacturer: syz [ 154.258016][ T5825] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 154.270472][ T1544] usb 5-1: SerialNumber: syz [ 154.277749][ T5825] usb 2-1: config 0 has no interface number 0 [ 154.313691][ T5825] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 154.329381][ T1544] usb 5-1: config 0 descriptor?? [ 154.339361][ T5825] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 154.646366][ T5825] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 154.656971][ T5883] usb 6-1: USB disconnect, device number 14 [ 154.661050][ T5825] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 154.673596][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.681722][ T5825] usb 2-1: Product: syz [ 154.685950][ T5825] usb 2-1: Manufacturer: syz [ 154.690586][ T5825] usb 2-1: SerialNumber: syz [ 154.725825][ T5825] usb 2-1: config 0 descriptor?? [ 154.735326][ T7065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.814330][ T7065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.504174][ T7065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.530750][ T7065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.554446][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 155.561847][ T5825] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -22 [ 155.743747][ T5913] usb 6-1: device descriptor read/64, error -71 [ 155.804586][ T5825] usb 2-1: USB disconnect, device number 16 [ 155.983907][ T5913] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 156.123774][ T5913] usb 6-1: device descriptor read/64, error -71 [ 156.274289][ T5913] usb usb6-port1: attempt power cycle [ 156.402437][ T5825] usb 5-1: USB disconnect, device number 26 [ 156.597880][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 156.623968][ T5913] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 156.625128][ T7099] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 156.650048][ T7096] netlink: 44 bytes leftover after parsing attributes in process `syz.1.251'. [ 156.664952][ T5913] usb 6-1: device descriptor read/8, error -71 [ 156.688455][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 156.732894][ T7102] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 156.756341][ T7104] pim6reg9: entered allmulticast mode [ 156.833217][ T7099] veth3: entered promiscuous mode [ 156.849505][ T7099] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 156.914305][ T5913] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 156.937124][ T5913] usb 6-1: device descriptor read/8, error -71 [ 157.044076][ T5913] usb usb6-port1: unable to enumerate USB device [ 157.236144][ T5825] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 157.267801][ T5914] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 157.293786][ T5914] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.405551][ T5825] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 157.433848][ T5825] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 157.465339][ T5825] usb 3-1: config 0 has no interface number 0 [ 157.471491][ T5825] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.505108][ T5825] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 157.517612][ T5825] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.530986][ T5825] usb 3-1: config 0 interface 52 has no altsetting 0 [ 157.575831][ T5825] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 157.593591][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 157.690993][ T5825] usb 3-1: Product: syz [ 157.729983][ T5825] usb 3-1: SerialNumber: syz [ 157.752959][ T5825] usb 3-1: config 0 descriptor?? [ 157.997377][ T5825] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input10 [ 158.791543][ T7136] netlink: 4304 bytes leftover after parsing attributes in process `syz.1.263'. [ 159.315741][ T5914] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.429593][ T7148] fuse: Bad value for 'fd' [ 159.524704][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 159.798365][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.809865][ T5914] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.821196][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.836860][ T5914] usb 2-1: config 0 descriptor?? [ 160.039198][ T5825] usb 3-1: USB disconnect, device number 16 [ 160.080790][ T5914] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.269327][ T7161] binder: 7160:7161 ioctl c0306201 2000000003c0 returned -14 [ 160.576991][ T1544] usb 2-1: USB disconnect, device number 17 [ 160.605309][ T5825] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 160.692074][ T7176] input: syz0 as /devices/virtual/input/input11 [ 160.798037][ T5825] usb 3-1: config 0 has no interfaces? [ 160.810021][ T5825] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.820394][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.841207][ T5825] usb 3-1: Product: syz [ 160.855493][ T5825] usb 3-1: Manufacturer: syz [ 160.860271][ T5825] usb 3-1: SerialNumber: syz [ 160.878969][ T5825] usb 3-1: config 0 descriptor?? [ 161.133565][ T30] audit: type=1326 audit(1746684696.756:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.2.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d0b58e969 code=0x0 [ 161.289467][ T1544] usb 3-1: USB disconnect, device number 17 [ 162.072991][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 162.102076][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 162.118327][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 162.159225][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 162.233850][ T5883] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.320842][ T7211] FAULT_INJECTION: forcing a failure. [ 162.320842][ T7211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.340732][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.0.284 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 162.340753][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 162.340760][ T7211] Call Trace: [ 162.340765][ T7211] [ 162.340769][ T7211] dump_stack_lvl+0x189/0x250 [ 162.340790][ T7211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.340803][ T7211] ? __pfx__printk+0x10/0x10 [ 162.340813][ T7211] ? fs_reclaim_acquire+0x7d/0x100 [ 162.340831][ T7211] should_fail_ex+0x414/0x560 [ 162.340849][ T7211] prepare_alloc_pages+0x213/0x610 [ 162.340866][ T7211] __alloc_frozen_pages_noprof+0x123/0x370 [ 162.340881][ T7211] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.340894][ T7211] ? __lock_acquire+0xaac/0xd20 [ 162.340910][ T7211] ? policy_nodemask+0x27c/0x720 [ 162.340925][ T7211] alloc_pages_mpol+0x232/0x4a0 [ 162.340939][ T7211] vma_alloc_folio_noprof+0xe4/0x200 [ 162.340952][ T7211] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 162.340970][ T7211] folio_prealloc+0x30/0x180 [ 162.340982][ T7211] do_wp_page+0x123a/0x5760 [ 162.341004][ T7211] ? __pfx_do_wp_page+0x10/0x10 [ 162.341012][ T7211] ? do_raw_spin_lock+0x121/0x290 [ 162.341024][ T7211] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 162.341039][ T7211] __handle_mm_fault+0x1028/0x5380 [ 162.341059][ T7211] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.341076][ T7211] ? follow_page_pte+0xdee/0x13c0 [ 162.341092][ T7211] handle_mm_fault+0x3f6/0x8c0 [ 162.341108][ T7211] __get_user_pages+0x16f0/0x2a40 [ 162.341134][ T7211] ? __pfx___get_user_pages+0x10/0x10 [ 162.341149][ T7211] __gup_longterm_locked+0xd66/0x15b0 [ 162.341165][ T7211] ? __lock_acquire+0xaac/0xd20 [ 162.341182][ T7211] pin_user_pages_remote+0xd4/0x120 [ 162.341195][ T7211] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 162.341208][ T7211] ? down_read+0x1ad/0x2e0 [ 162.341224][ T7211] process_vm_rw+0x59e/0xb40 [ 162.341234][ T7211] ? get_pid_task+0x20/0x1f0 [ 162.341253][ T7211] ? __pfx_process_vm_rw+0x10/0x10 [ 162.341262][ T7211] ? rcu_read_lock_any_held+0xb3/0x120 [ 162.341285][ T7211] ? __pfx_vfs_write+0x10/0x10 [ 162.341307][ T7211] ? ksys_write+0x1f0/0x250 [ 162.341316][ T7211] ? rcu_is_watching+0x15/0xb0 [ 162.341333][ T7211] __x64_sys_process_vm_writev+0xe0/0x100 [ 162.341347][ T7211] do_syscall_64+0xf6/0x210 [ 162.341360][ T7211] ? clear_bhb_loop+0x45/0xa0 [ 162.341371][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.341379][ T7211] RIP: 0033:0x7f4a3a18e969 [ 162.341389][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.341396][ T7211] RSP: 002b:00007f4a3afd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 162.341406][ T7211] RAX: ffffffffffffffda RBX: 00007f4a3a3b5fa0 RCX: 00007f4a3a18e969 [ 162.341418][ T7211] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000ca [ 162.341424][ T7211] RBP: 00007f4a3afd7090 R08: 0000000000000229 R09: 0000000000000000 [ 162.341430][ T7211] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 162.341435][ T7211] R13: 0000000000000000 R14: 00007f4a3a3b5fa0 R15: 00007f4a3a4dfa28 [ 162.341449][ T7211] [ 162.664594][ T5883] usb 2-1: device descriptor read/64, error -71 [ 162.903722][ T5883] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 163.033771][ T5883] usb 2-1: device descriptor read/64, error -71 [ 163.157123][ T5883] usb usb2-port1: attempt power cycle [ 163.173021][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.174057][ T1544] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 163.190479][ T5825] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 163.196916][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.357008][ T1544] usb 6-1: Using ep0 maxpacket: 32 [ 163.372756][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.382090][ T5825] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 163.392939][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.403351][ T1544] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 163.413331][ T1544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.421629][ T1544] usb 6-1: Product: syz [ 163.427491][ T1544] usb 6-1: Manufacturer: syz [ 163.432788][ T5825] usb 5-1: config 0 descriptor?? [ 163.443982][ T1544] usb 6-1: SerialNumber: syz [ 163.456741][ T1544] usb 6-1: config 0 descriptor?? [ 163.478295][ T1544] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 163.503746][ T5883] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 163.524355][ T5883] usb 2-1: device descriptor read/8, error -71 [ 163.679172][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.712636][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.763733][ T5883] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 163.837452][ T5883] usb 2-1: device descriptor read/8, error -71 [ 163.873050][ T1544] gspca_sunplus: reg_w_riv err -71 [ 163.878587][ T1544] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 163.966589][ T1544] usb 6-1: USB disconnect, device number 19 [ 163.984985][ T5883] usb usb2-port1: unable to enumerate USB device [ 164.263329][ T7230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.286'. [ 164.285719][ T5825] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 164.388433][ T7247] tipc: Invalid UDP bearer configuration [ 164.388657][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 164.713982][ T5913] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 164.885432][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.903237][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.916768][ T5913] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.927084][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.937464][ T5913] usb 6-1: SerialNumber: syz [ 165.152024][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.216528][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.313020][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.325596][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.325601][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.325921][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.382091][ T5913] usb 6-1: 0:2 : does not exist [ 165.477043][ T5913] usb 6-1: USB disconnect, device number 20 [ 165.513747][ T5825] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 165.579164][ T7265] FAULT_INJECTION: forcing a failure. [ 165.579164][ T7265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.602672][ T7040] udevd[7040]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.653506][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.5.298 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 165.653531][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 165.653541][ T7265] Call Trace: [ 165.653548][ T7265] [ 165.653555][ T7265] dump_stack_lvl+0x189/0x250 [ 165.653584][ T7265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.653605][ T7265] ? __pfx__printk+0x10/0x10 [ 165.653627][ T7265] ? fs_reclaim_acquire+0x7d/0x100 [ 165.653655][ T7265] should_fail_ex+0x414/0x560 [ 165.653682][ T7265] prepare_alloc_pages+0x213/0x610 [ 165.653711][ T7265] __alloc_frozen_pages_noprof+0x123/0x370 [ 165.653736][ T7265] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.653756][ T7265] ? __lock_acquire+0xaac/0xd20 [ 165.653782][ T7265] ? policy_nodemask+0x27c/0x720 [ 165.653817][ T7265] alloc_pages_mpol+0x232/0x4a0 [ 165.653838][ T7265] vma_alloc_folio_noprof+0xe4/0x200 [ 165.653856][ T7265] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 165.653880][ T7265] folio_prealloc+0x30/0x180 [ 165.653897][ T7265] do_wp_page+0x123a/0x5760 [ 165.653927][ T7265] ? __pfx_do_wp_page+0x10/0x10 [ 165.653939][ T7265] ? do_raw_spin_lock+0x121/0x290 [ 165.653955][ T7265] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 165.653977][ T7265] __handle_mm_fault+0x1028/0x5380 [ 165.654005][ T7265] ? __pfx___handle_mm_fault+0x10/0x10 [ 165.654031][ T7265] ? follow_page_pte+0xdee/0x13c0 [ 165.654055][ T7265] handle_mm_fault+0x3f6/0x8c0 [ 165.654077][ T7265] __get_user_pages+0x16f0/0x2a40 [ 165.654115][ T7265] ? __pfx___get_user_pages+0x10/0x10 [ 165.654136][ T7265] __gup_longterm_locked+0xd66/0x15b0 [ 165.654157][ T7265] ? __lock_acquire+0xaac/0xd20 [ 165.654182][ T7265] pin_user_pages_remote+0xd4/0x120 [ 165.654199][ T7265] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 165.654217][ T7265] ? down_read+0x1ad/0x2e0 [ 165.654235][ T7265] process_vm_rw+0x59e/0xb40 [ 165.654249][ T7265] ? get_pid_task+0x20/0x1f0 [ 165.654273][ T7265] ? __pfx_process_vm_rw+0x10/0x10 [ 165.654286][ T7265] ? rcu_read_lock_any_held+0xb3/0x120 [ 165.654319][ T7265] ? __pfx_vfs_write+0x10/0x10 [ 165.654355][ T7265] ? ksys_write+0x1f0/0x250 [ 165.654367][ T7265] ? rcu_is_watching+0x15/0xb0 [ 165.654390][ T7265] __x64_sys_process_vm_writev+0xe0/0x100 [ 165.654409][ T7265] do_syscall_64+0xf6/0x210 [ 165.654425][ T7265] ? clear_bhb_loop+0x45/0xa0 [ 165.654441][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.654453][ T7265] RIP: 0033:0x7f81a4f8e969 [ 165.654465][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.654476][ T7265] RSP: 002b:00007f81a5e21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 165.654490][ T7265] RAX: ffffffffffffffda RBX: 00007f81a51b6080 RCX: 00007f81a4f8e969 [ 165.654500][ T7265] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000a2 [ 165.654508][ T7265] RBP: 00007f81a5e21090 R08: 0000000000000229 R09: 0000000000000000 [ 165.654516][ T7265] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 165.654524][ T7265] R13: 0000000000000000 R14: 00007f81a51b6080 R15: 00007f81a52dfa28 [ 165.654544][ T7265] [ 166.043823][ T5825] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 166.059339][ T5825] usb 2-1: config 1 has no interface number 0 [ 166.083811][ T5876] usb 5-1: USB disconnect, device number 27 [ 166.110225][ T5825] usb 2-1: New USB device found, idVendor=30ba, idProduct=5000, bcdDevice=f4.88 [ 166.146155][ T5825] usb 2-1: New USB device strings: Mfr=131, Product=0, SerialNumber=0 [ 166.160034][ T5825] usb 2-1: Manufacturer: syz [ 166.314539][ T1544] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.403285][ T7281] tipc: Enabling of bearer rejected, already enabled [ 166.438289][ T7285] fuse: Bad value for 'fd' [ 166.483915][ T1544] usb 3-1: Using ep0 maxpacket: 8 [ 166.501138][ T1544] usb 3-1: config 253 has no interfaces? [ 166.530814][ T1544] usb 3-1: New USB device found, idVendor=0c44, idProduct=03a2, bcdDevice=fc.ce [ 166.543779][ T1544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.561641][ T1544] usb 3-1: Product: syz [ 166.579635][ T1544] usb 3-1: Manufacturer: syz [ 166.587700][ T1544] usb 3-1: SerialNumber: syz [ 167.073717][ T5913] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 167.174752][ T5883] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 167.226720][ T5913] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 167.237326][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.246909][ T5913] usb 6-1: Product: syz [ 167.251445][ T5913] usb 6-1: Manufacturer: syz [ 167.257559][ T5913] usb 6-1: SerialNumber: syz [ 167.272150][ T5913] usb 6-1: config 0 descriptor?? [ 167.281463][ T5913] ch341 6-1:0.0: ch341-uart converter detected [ 167.343438][ T5883] usb 5-1: config 0 has no interfaces? [ 167.357846][ T5883] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 167.367100][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.378539][ T5883] usb 5-1: Product: syz [ 167.382970][ T5883] usb 5-1: Manufacturer: syz [ 167.388301][ T5883] usb 5-1: SerialNumber: syz [ 167.401585][ T5883] usb 5-1: config 0 descriptor?? [ 167.624393][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 168.140711][ T5876] usb 2-1: USB disconnect, device number 22 [ 168.774266][ T5913] usb 6-1: failed to send control message: -110 [ 168.780640][ T5913] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 169.059598][ T7319] loop8: detected capacity change from 0 to 1 [ 169.073016][ T7319] Dev loop8: unable to read RDB block 1 [ 169.080500][ T7319] loop8: unable to read partition table [ 169.087393][ T7319] loop8: partition table beyond EOD, truncated [ 169.096651][ T7319] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 169.243363][ T7322] tipc: Enabling of bearer rejected, failed to enable media [ 169.423091][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 169.434566][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 169.512124][ T5876] usb 6-1: USB disconnect, device number 21 [ 169.522187][ T5876] ch341 6-1:0.0: device disconnected [ 169.683390][ T7329] FAULT_INJECTION: forcing a failure. [ 169.683390][ T7329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.700124][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.1.318 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 169.700142][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 169.700149][ T7329] Call Trace: [ 169.700153][ T7329] [ 169.700159][ T7329] dump_stack_lvl+0x189/0x250 [ 169.700178][ T7329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.700192][ T7329] ? __pfx__printk+0x10/0x10 [ 169.700203][ T7329] ? fs_reclaim_acquire+0x7d/0x100 [ 169.700220][ T7329] should_fail_ex+0x414/0x560 [ 169.700238][ T7329] prepare_alloc_pages+0x213/0x610 [ 169.700255][ T7329] __alloc_frozen_pages_noprof+0x123/0x370 [ 169.700270][ T7329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.700283][ T7329] ? __lock_acquire+0xaac/0xd20 [ 169.700300][ T7329] ? policy_nodemask+0x27c/0x720 [ 169.700315][ T7329] alloc_pages_mpol+0x232/0x4a0 [ 169.700329][ T7329] vma_alloc_folio_noprof+0xe4/0x200 [ 169.700342][ T7329] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 169.700360][ T7329] folio_prealloc+0x30/0x180 [ 169.700373][ T7329] do_wp_page+0x123a/0x5760 [ 169.700400][ T7329] ? __pfx_do_wp_page+0x10/0x10 [ 169.700409][ T7329] ? do_raw_spin_lock+0x121/0x290 [ 169.700421][ T7329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 169.700436][ T7329] __handle_mm_fault+0x1028/0x5380 [ 169.700457][ T7329] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.700474][ T7329] ? follow_page_pte+0xdee/0x13c0 [ 169.700491][ T7329] handle_mm_fault+0x3f6/0x8c0 [ 169.700507][ T7329] __get_user_pages+0x16f0/0x2a40 [ 169.700533][ T7329] ? __pfx___get_user_pages+0x10/0x10 [ 169.700548][ T7329] __gup_longterm_locked+0xd66/0x15b0 [ 169.700563][ T7329] ? __lock_acquire+0xaac/0xd20 [ 169.700581][ T7329] pin_user_pages_remote+0xd4/0x120 [ 169.700594][ T7329] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 169.700607][ T7329] ? down_read+0x1ad/0x2e0 [ 169.700620][ T7329] process_vm_rw+0x59e/0xb40 [ 169.700630][ T7329] ? get_pid_task+0x20/0x1f0 [ 169.700652][ T7329] ? __pfx_process_vm_rw+0x10/0x10 [ 169.700666][ T7329] ? rcu_read_lock_any_held+0xb3/0x120 [ 169.700751][ T7329] ? __pfx_vfs_write+0x10/0x10 [ 169.700789][ T7329] ? ksys_write+0x1f0/0x250 [ 169.700808][ T7329] __x64_sys_process_vm_writev+0xe0/0x100 [ 169.700822][ T7329] do_syscall_64+0xf6/0x210 [ 169.700834][ T7329] ? clear_bhb_loop+0x45/0xa0 [ 169.700846][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.700855][ T7329] RIP: 0033:0x7fddc3f8e969 [ 169.700864][ T7329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.700872][ T7329] RSP: 002b:00007fddc4d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 169.700883][ T7329] RAX: ffffffffffffffda RBX: 00007fddc41b5fa0 RCX: 00007fddc3f8e969 [ 169.700889][ T7329] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000f3 [ 169.700895][ T7329] RBP: 00007fddc4d7e090 R08: 0000000000000229 R09: 0000000000000000 [ 169.700901][ T7329] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 169.700907][ T7329] R13: 0000000000000000 R14: 00007fddc41b5fa0 R15: 00007fddc42dfa28 [ 169.700921][ T7329] [ 170.003820][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.102119][ T5876] usb 5-1: USB disconnect, device number 28 [ 170.434725][ T5825] usb 3-1: USB disconnect, device number 18 [ 170.687169][ T7358] tipc: Enabling of bearer rejected, failed to enable media [ 171.171229][ T7376] FAULT_INJECTION: forcing a failure. [ 171.171229][ T7376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.187390][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.5.331 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 171.187413][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.187423][ T7376] Call Trace: [ 171.187430][ T7376] [ 171.187438][ T7376] dump_stack_lvl+0x189/0x250 [ 171.187466][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.187487][ T7376] ? __pfx__printk+0x10/0x10 [ 171.187500][ T7376] ? fs_reclaim_acquire+0x7d/0x100 [ 171.187518][ T7376] should_fail_ex+0x414/0x560 [ 171.187536][ T7376] prepare_alloc_pages+0x213/0x610 [ 171.187554][ T7376] __alloc_frozen_pages_noprof+0x123/0x370 [ 171.187576][ T7376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.187589][ T7376] ? __lock_acquire+0xaac/0xd20 [ 171.187606][ T7376] ? policy_nodemask+0x27c/0x720 [ 171.187620][ T7376] alloc_pages_mpol+0x232/0x4a0 [ 171.187634][ T7376] vma_alloc_folio_noprof+0xe4/0x200 [ 171.187647][ T7376] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 171.187665][ T7376] folio_prealloc+0x30/0x180 [ 171.187678][ T7376] do_wp_page+0x123a/0x5760 [ 171.187699][ T7376] ? __pfx_do_wp_page+0x10/0x10 [ 171.187708][ T7376] ? do_raw_spin_lock+0x121/0x290 [ 171.187720][ T7376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.187735][ T7376] __handle_mm_fault+0x1028/0x5380 [ 171.187795][ T7376] ? __pfx___handle_mm_fault+0x10/0x10 [ 171.187817][ T7376] ? follow_page_pte+0xdee/0x13c0 [ 171.187833][ T7376] handle_mm_fault+0x3f6/0x8c0 [ 171.187849][ T7376] __get_user_pages+0x16f0/0x2a40 [ 171.187878][ T7376] ? __pfx___get_user_pages+0x10/0x10 [ 171.187902][ T7376] __gup_longterm_locked+0xd66/0x15b0 [ 171.187928][ T7376] ? __lock_acquire+0xaac/0xd20 [ 171.187958][ T7376] pin_user_pages_remote+0xd4/0x120 [ 171.187977][ T7376] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 171.187991][ T7376] ? down_read+0x1ad/0x2e0 [ 171.188005][ T7376] process_vm_rw+0x59e/0xb40 [ 171.188016][ T7376] ? get_pid_task+0x20/0x1f0 [ 171.188034][ T7376] ? __pfx_process_vm_rw+0x10/0x10 [ 171.188043][ T7376] ? rcu_read_lock_any_held+0xb3/0x120 [ 171.188068][ T7376] ? __pfx_vfs_write+0x10/0x10 [ 171.188090][ T7376] ? ksys_write+0x1f0/0x250 [ 171.188104][ T7376] __x64_sys_process_vm_writev+0xe0/0x100 [ 171.188118][ T7376] do_syscall_64+0xf6/0x210 [ 171.188131][ T7376] ? clear_bhb_loop+0x45/0xa0 [ 171.188143][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.188152][ T7376] RIP: 0033:0x7f81a4f8e969 [ 171.188161][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.188169][ T7376] RSP: 002b:00007f81a5e42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 171.188180][ T7376] RAX: ffffffffffffffda RBX: 00007f81a51b5fa0 RCX: 00007f81a4f8e969 [ 171.188187][ T7376] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000b5 [ 171.188193][ T7376] RBP: 00007f81a5e42090 R08: 0000000000000229 R09: 0000000000000000 [ 171.188198][ T7376] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 171.188204][ T7376] R13: 0000000000000000 R14: 00007f81a51b5fa0 R15: 00007f81a52dfa28 [ 171.188219][ T7376] [ 171.553746][ T5825] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.696602][ T5825] usb 3-1: device descriptor read/64, error -71 [ 171.933814][ T5825] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 172.073749][ T5825] usb 3-1: device descriptor read/64, error -71 [ 172.197542][ T5825] usb usb3-port1: attempt power cycle [ 172.241338][ T7398] tipc: Enabling of bearer rejected, failed to enable media [ 172.303839][ T5913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 172.495728][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 172.511849][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 172.529239][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 172.544763][ T5825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 172.546152][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 172.566804][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.577147][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.584292][ T5825] usb 3-1: device descriptor read/8, error -71 [ 172.588870][ T5913] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 172.602030][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.610165][ T5913] usb 2-1: Product: syz [ 172.616115][ T5913] usb 2-1: Manufacturer: syz [ 172.620727][ T5913] usb 2-1: SerialNumber: syz [ 172.629439][ T5913] usb 2-1: config 0 descriptor?? [ 172.637265][ T5913] port100 2-1:0.0: NFC: Could not get supported command types [ 172.703837][ T5914] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 172.843861][ T5825] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 172.861419][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.871825][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 172.879542][ T5914] usb 6-1: can't read configurations, error -71 [ 172.892066][ T5825] usb 3-1: device descriptor read/8, error -71 [ 172.937806][ T5913] usb 2-1: USB disconnect, device number 23 [ 173.004778][ T5825] usb usb3-port1: unable to enumerate USB device [ 173.973858][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 174.129234][ T7425] tipc: Enabling of bearer rejected, failed to enable media [ 174.142187][ T5880] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 174.172695][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.196230][ T5880] usb 2-1: Product: syz [ 174.200430][ T5880] usb 2-1: Manufacturer: syz [ 174.217481][ T5880] usb 2-1: SerialNumber: syz [ 174.252872][ T5880] usb 2-1: config 0 descriptor?? [ 174.271803][ T5880] ch341 2-1:0.0: ch341-uart converter detected [ 174.292989][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.331513][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.345590][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.404949][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.533821][ T5825] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 174.893733][ T5825] usb 5-1: device not accepting address 29, error -71 [ 175.320752][ T5880] ch341-uart ttyUSB0: break control not supported, using simulated break [ 175.345896][ T5880] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 175.359800][ T5880] usb 2-1: USB disconnect, device number 24 [ 175.390751][ T5880] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 175.409211][ T7454] program syz.2.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.421188][ T5880] ch341 2-1:0.0: device disconnected [ 175.510507][ T7454] IPv6: addrconf: prefix option has invalid lifetime [ 175.887743][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 176.094779][ T5883] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 176.167109][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.210229][ T30] audit: type=1326 audit(1746684711.836:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.269851][ T5825] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 176.283793][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 176.283923][ T30] audit: type=1326 audit(1746684711.866:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.313476][ T30] audit: type=1326 audit(1746684711.866:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.313755][ T5883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.491512][ T30] audit: type=1326 audit(1746684711.866:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.517719][ T30] audit: type=1326 audit(1746684711.866:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.539700][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.550736][ T30] audit: type=1326 audit(1746684711.866:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.572850][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.573740][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 176.579189][ T5883] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 176.604762][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.654188][ T5883] usb 6-1: Product: syz [ 176.669956][ T5883] usb 6-1: Manufacturer: syz [ 176.679930][ T5883] usb 6-1: SerialNumber: syz [ 176.687131][ T5825] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 161, changing to 11 [ 176.700567][ T5825] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.742138][ T30] audit: type=1326 audit(1746684711.866:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.769075][ T30] audit: type=1326 audit(1746684711.866:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.791162][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.802569][ T5883] usb 6-1: config 0 descriptor?? [ 176.813965][ T5825] usb 2-1: config 1 interface 0 has no altsetting 0 [ 176.818007][ T5883] gs_usb 6-1:0.0: Required endpoints not found [ 176.839337][ T5825] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 176.849824][ T30] audit: type=1326 audit(1746684711.866:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.871955][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.880991][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.911626][ T30] audit: type=1326 audit(1746684711.866:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753238e969 code=0x7ffc0000 [ 176.934993][ T5825] usb 2-1: Product: á°Š [ 176.939192][ T5825] usb 2-1: Manufacturer: à°š [ 177.008112][ T5825] usb 2-1: SerialNumber: ꀥ娻⻑裢åƒê¸ æ™ç‚˜ä¬‹ [ 177.288447][ T5825] usbhid 2-1:1.0: can't add hid device: -71 [ 177.296508][ T5825] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 177.419941][ T5825] usb 2-1: USB disconnect, device number 25 [ 177.567786][ T5883] usb 6-1: USB disconnect, device number 24 [ 178.264095][ T5825] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 178.416291][ T5883] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 178.712873][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.742531][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.779285][ T5883] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 178.789116][ T5825] usb 2-1: config 0 has no interfaces? [ 178.805723][ T5825] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 178.814827][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.822794][ T5825] usb 2-1: Product: syz [ 178.827040][ T5825] usb 2-1: Manufacturer: syz [ 178.831677][ T5825] usb 2-1: SerialNumber: syz [ 178.845269][ T5825] usb 2-1: config 0 descriptor?? [ 178.981818][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.007788][ T5883] usb 3-1: config 0 descriptor?? [ 179.112665][ T7498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.183056][ T2139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.218618][ T2139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.437942][ T5883] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 179.470013][ T5883] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 179.497167][ T7522] netlink: 'syz.5.380': attribute type 1 has an invalid length. [ 179.629501][ T5883] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 179.783857][ T5825] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 179.943947][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 179.951294][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.045707][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.056467][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.084633][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.096071][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.117511][ T5883] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 180.130471][ T5883] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 180.133938][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.176055][ T5883] usb 3-1: USB disconnect, device number 23 [ 180.206065][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.260966][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.448510][ T5825] usb 6-1: Product: syz [ 180.452734][ T5825] usb 6-1: Manufacturer: syz [ 180.543092][ T5825] usb 6-1: SerialNumber: syz [ 180.664278][ T5825] usb 6-1: config 0 descriptor?? [ 180.725896][ T5825] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.862717][ T5825] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 181.127271][ T1544] usb 2-1: USB disconnect, device number 26 [ 181.334686][ T5825] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 181.341874][ T5825] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 181.673818][ T5914] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 181.850278][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 182.171715][ T5825] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 182.189800][ T5825] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 182.208087][ T5825] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 182.286980][ T5825] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 182.301275][ T5825] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 182.309085][ T5825] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 182.337214][ T5825] usb 6-1: USB disconnect, device number 25 [ 182.424741][ T5883] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 182.734593][ T1544] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 182.903826][ T1544] usb 3-1: Using ep0 maxpacket: 8 [ 182.916682][ T1544] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.926069][ T1544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.936798][ T1544] usb 3-1: Product: syz [ 182.945935][ T1544] usb 3-1: Manufacturer: syz [ 182.954694][ T1544] usb 3-1: SerialNumber: syz [ 182.994209][ T1544] usb 3-1: config 0 descriptor?? [ 183.222981][ T1544] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.623896][ T5825] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 183.795644][ T5825] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.805308][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.831008][ T5825] usb 6-1: config 0 descriptor?? [ 183.867527][ T5825] cp210x 6-1:0.0: cp210x converter detected [ 184.243733][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.268579][ T5914] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 184.280756][ T5914] usb 2-1: can't read configurations, error -71 [ 184.303537][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.312325][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.327045][ T5825] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 184.348008][ T5825] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 184.418266][ T5825] usb 6-1: cp210x converter now attached to ttyUSB0 [ 184.454177][ T5825] usb 6-1: USB disconnect, device number 26 [ 184.470719][ T1544] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 184.485520][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.499174][ T1544] usb 3-1: USB disconnect, device number 24 [ 184.517541][ T5825] cp210x 6-1:0.0: device disconnected [ 184.663745][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 184.864985][ T5914] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 184.893388][ T5914] usb 2-1: config 0 has no interface number 0 [ 184.926748][ T5914] usb 2-1: config 0 interface 43 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 184.940229][ T5914] usb 2-1: config 0 interface 43 altsetting 0 endpoint 0x4 has invalid maxpacket 48417, setting to 64 [ 184.952353][ T5914] usb 2-1: config 0 interface 43 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 184.963842][ T5914] usb 2-1: config 0 interface 43 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.003779][ T5914] usb 2-1: config 0 interface 43 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.016959][ T5914] usb 2-1: config 0 interface 43 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 185.028588][ T5914] usb 2-1: config 0 interface 43 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.041057][ T7598] bridge0: port 3(veth0_to_bridge) entered blocking state [ 185.048870][ T7598] bridge0: port 3(veth0_to_bridge) entered disabled state [ 185.056900][ T7598] veth0_to_bridge: entered allmulticast mode [ 185.068795][ T7598] veth0_to_bridge: entered promiscuous mode [ 185.078036][ T7598] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.118359][ T5914] usb 2-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=31.cc [ 185.136809][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.151903][ T7598] bridge0: port 3(veth0_to_bridge) entered blocking state [ 185.159295][ T7598] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 185.191409][ T5914] usb 2-1: config 0 descriptor?? [ 185.214880][ T7592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.236450][ T7592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.272149][ T5914] option 2-1:0.43: GSM modem (1-port) converter detected [ 185.526302][ T7610] netlink: 9 bytes leftover after parsing attributes in process `syz.4.408'. [ 185.538939][ T7610] gretap0: entered promiscuous mode [ 185.549971][ T7610] netlink: 5 bytes leftover after parsing attributes in process `syz.4.408'. [ 185.564726][ T7610] 0ªX¹¦D: renamed from gretap0 [ 185.574219][ T7610] 0ªX¹¦D: left promiscuous mode [ 185.579102][ T7610] 0ªX¹¦D: entered allmulticast mode [ 185.586667][ T7610] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 185.924214][ T5825] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 186.084154][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 186.093240][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.107987][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.118127][ T5825] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2a, bcdDevice= 0.00 [ 186.134677][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.161810][ T5825] usb 5-1: config 0 descriptor?? [ 186.163737][ T5914] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 186.335079][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 186.344580][ T5914] usb 3-1: config 2 has an invalid interface number: 18 but max is 0 [ 186.352915][ T5914] usb 3-1: config 2 has no interface number 0 [ 186.375011][ T5914] usb 3-1: config 2 interface 18 altsetting 192 has an endpoint descriptor with address 0x3A, changing to 0xA [ 186.388943][ T5914] usb 3-1: config 2 interface 18 altsetting 192 endpoint 0xA has invalid wMaxPacketSize 0 [ 186.399336][ T5914] usb 3-1: config 2 interface 18 has no altsetting 0 [ 186.409358][ T5914] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=33.ac [ 186.456671][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.466397][ T7614] loop2: detected capacity change from 0 to 7 [ 186.467925][ T5914] usb 3-1: Product: syz [ 186.473249][ T7614] buffer_io_error: 52 callbacks suppressed [ 186.473261][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.477915][ T5914] usb 3-1: Manufacturer: syz [ 186.501723][ T5914] usb 3-1: SerialNumber: syz [ 186.582509][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.654046][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.666966][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.678894][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.696718][ T7640] bridge_slave_0: left allmulticast mode [ 186.705830][ T7640] bridge_slave_0: left promiscuous mode [ 186.712874][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.739602][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.753466][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.765767][ T7640] bridge_slave_1: left allmulticast mode [ 186.863985][ T7640] bridge_slave_1: left promiscuous mode [ 186.910051][ T7614] ldm_validate_partition_table(): Disk read failed. [ 186.955472][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.976121][ T5914] usb 3-1: USB disconnect, device number 25 [ 186.984635][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.993231][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.038438][ T7614] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.046581][ T7614] Dev loop2: unable to read RDB block 0 [ 187.055728][ T7614] loop2: unable to read partition table [ 187.062973][ T7614] loop2: partition table beyond EOD, truncated [ 187.069341][ T7614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.114256][ T7040] ldm_validate_partition_table(): Disk read failed. [ 187.123006][ T7640] bond0: (slave bond_slave_0): Releasing backup interface [ 187.287979][ T7630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.306872][ T7040] Dev loop2: unable to read RDB block 0 [ 187.312766][ T7040] loop2: unable to read partition table [ 187.334941][ T7040] loop2: partition table beyond EOD, truncated [ 187.345912][ T5913] usb 2-1: USB disconnect, device number 28 [ 187.347041][ T7640] bond0: (slave bond_slave_1): Releasing backup interface [ 187.360155][ T7636] ldm_validate_partition_table(): Disk read failed. [ 187.367569][ T7636] Dev loop2: unable to read RDB block 0 [ 187.392389][ T7636] loop2: unable to read partition table [ 187.401732][ T5913] option 2-1:0.43: device disconnected [ 187.423411][ T7636] loop2: partition table beyond EOD, truncated [ 187.457444][ T7640] team0: Port device team_slave_0 removed [ 187.468727][ T7636] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.517970][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 187.531145][ T5825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.532755][ T7640] team0: Port device team_slave_1 removed [ 187.642297][ T5825] usb 5-1: USB disconnect, device number 32 [ 187.650387][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.661246][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.683601][ T7648] netlink: 'syz.1.418': attribute type 23 has an invalid length. [ 187.700783][ T7648] xt_hashlimit: max too large, truncated to 1048576 [ 187.708809][ T7648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.742221][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.807266][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.389486][ T7675] netlink: 112 bytes leftover after parsing attributes in process `syz.1.427'. [ 189.687372][ T7685] binder: 7683:7685 ioctl 4018620d 0 returned -22 [ 189.768148][ T7689] netlink: 'syz.5.432': attribute type 10 has an invalid length. [ 189.794322][ T7689] veth0_vlan: left promiscuous mode [ 189.802936][ T7689] veth0_vlan: entered promiscuous mode [ 189.812489][ T7689] team0: Device veth0_vlan failed to register rx_handler [ 189.851810][ T7689] syz.5.432 (7689) used greatest stack depth: 20264 bytes left [ 189.983871][ T5878] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 190.131685][ T7698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.244218][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 190.277656][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.290243][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.301907][ T5878] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2a, bcdDevice= 0.00 [ 190.319565][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.336468][ T5878] usb 5-1: config 0 descriptor?? [ 190.589809][ T7688] loop2: detected capacity change from 0 to 7 [ 190.617509][ T7688] ldm_validate_partition_table(): Disk read failed. [ 190.644128][ T7688] Dev loop2: unable to read RDB block 0 [ 190.864117][ T7688] loop2: unable to read partition table [ 190.869986][ T7688] loop2: partition table beyond EOD, truncated [ 190.905917][ T7688] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.022340][ T7040] ldm_validate_partition_table(): Disk read failed. [ 191.062690][ T7040] Dev loop2: unable to read RDB block 0 [ 191.089889][ T7040] loop2: unable to read partition table [ 191.101433][ T7040] loop2: partition table beyond EOD, truncated [ 191.176712][ T7709] ldm_validate_partition_table(): Disk read failed. [ 191.485448][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.678703][ T7709] buffer_io_error: 87 callbacks suppressed [ 191.678722][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.714511][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.876070][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.899963][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.917098][ T7709] Dev loop2: unable to read RDB block 0 [ 191.933064][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.979007][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 192.022971][ T7709] Buffer I/O error on dev loop2, logical block 0, async page read [ 192.043141][ T7709] loop2: unable to read partition table [ 192.071886][ T7709] loop2: partition table beyond EOD, truncated [ 192.108146][ T7040] Buffer I/O error on dev loop2, logical block 0, async page read [ 192.119703][ T7040] Buffer I/O error on dev loop2, logical block 0, async page read [ 192.127732][ T7709] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.192190][ T7040] Buffer I/O error on dev loop2, logical block 0, async page read [ 192.235937][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 192.296020][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.344899][ T5878] usb 5-1: USB disconnect, device number 33 [ 193.735403][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 193.735421][ T30] audit: type=1326 audit(1746684729.366:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 193.791026][ T30] audit: type=1326 audit(1746684729.396:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 193.904320][ T30] audit: type=1326 audit(1746684729.396:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 193.942239][ T30] audit: type=1326 audit(1746684729.396:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 194.010482][ T30] audit: type=1326 audit(1746684729.396:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 194.033951][ T30] audit: type=1326 audit(1746684729.396:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 194.074466][ T30] audit: type=1326 audit(1746684729.396:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 194.334557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348600][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582028][ T30] audit: type=1326 audit(1746684729.396:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 194.660807][ T5914] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.792563][ T7757] input: syz1 as /devices/virtual/input/input12 [ 196.109328][ T5914] usb 3-1: device descriptor read/64, error -71 [ 196.185285][ T30] audit: type=1326 audit(1746684729.396:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 196.325001][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 196.331116][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 196.346849][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 196.352903][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 196.373726][ T30] audit: type=1326 audit(1746684729.396:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a4f8e969 code=0x7ffc0000 [ 196.535767][ T5914] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.341543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.345143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.354485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.365691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.377644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.391034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.401488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.413403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.425289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.437983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.903652][ C1] sched: DL replenish lagged too much [ 204.343899][ C0] net_ratelimit: 19582 callbacks suppressed [ 204.343919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.344605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.350196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.362124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.373964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.386601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.397821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.409790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.421631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.434269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.994403][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 208.986160][ T5914] usb 3-1: device descriptor read/64, error -110 [ 209.353862][ C0] net_ratelimit: 21702 callbacks suppressed [ 209.353882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.354152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.360135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.373126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.384044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.396061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.407815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.420772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.431720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.443717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.363945][ C0] net_ratelimit: 18310 callbacks suppressed [ 214.363965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.364047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.370229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.382175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.394003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.406692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.417914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.429836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.441683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.454443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.829384][ T5914] usb usb3-port1: attempt power cycle [ 219.373714][ C1] net_ratelimit: 18760 callbacks suppressed [ 219.373734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 219.373793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.380017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.392076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.404730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.415978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.427870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 219.439758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.451589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.463664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.383644][ C0] net_ratelimit: 20222 callbacks suppressed [ 224.383663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.383781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 224.389912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.401911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.413930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.426533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.437755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.453809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 224.461549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.473426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.393887][ C0] net_ratelimit: 22287 callbacks suppressed [ 229.393906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.394158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.400163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.412107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 229.423964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.435924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.447886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.460564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.471784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.483712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 234.403792][ C0] net_ratelimit: 24054 callbacks suppressed [ 234.403812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.403862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 234.410065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.421942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.433951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.446564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.457771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.473863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 234.481558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.493406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.413658][ C0] net_ratelimit: 21790 callbacks suppressed [ 239.413677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.414346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.419965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.431860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 239.443803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.455638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.467589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.480134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.491437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.503335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 244.423691][ C1] net_ratelimit: 21385 callbacks suppressed [ 244.423711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.423823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.430038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 244.441851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.453788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.465686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.478718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.489801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.501801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 244.513644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.433865][ C0] net_ratelimit: 23830 callbacks suppressed [ 249.433884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.434457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.440126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.452084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 249.463931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.475810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.487789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.504557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.511610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.523528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 254.443734][ C0] net_ratelimit: 19771 callbacks suppressed [ 254.443754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.444014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.450064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.461939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 254.473861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.485718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.497754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.510347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.521630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.533502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 259.453670][ C0] net_ratelimit: 18428 callbacks suppressed [ 259.453689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.453690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.454076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 259.460014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.471892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.483818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.496444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.507776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.519692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 259.531535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.463694][ C1] net_ratelimit: 18404 callbacks suppressed [ 264.463713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.464038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.469999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 264.481955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.493853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.505828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.518426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.529773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.541670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 264.553539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.378872][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.396570][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.473787][ C0] net_ratelimit: 19170 callbacks suppressed [ 269.473806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.474191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.480115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.492019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 269.503952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.515784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.527773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.540355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.551616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.563489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 274.483752][ C1] net_ratelimit: 18596 callbacks suppressed [ 274.483772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.483793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.490733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.502146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.514127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 274.525981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.537882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.549886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.562487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.573778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.493660][ C0] net_ratelimit: 18681 callbacks suppressed [ 279.493680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.493855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 279.499967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.511948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.523952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.536563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.547792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.559711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 279.571564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.583419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.503804][ C0] net_ratelimit: 21514 callbacks suppressed [ 284.503825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.503912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 284.510090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.522052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.533969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.546741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.557845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.569798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 284.581606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.593509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.513976][ C0] net_ratelimit: 22907 callbacks suppressed [ 289.513996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.514004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.514363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 289.520255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.532155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.544049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.556794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.567918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.579949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 289.591806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.523755][ C0] net_ratelimit: 24270 callbacks suppressed [ 294.523775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.524127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.530034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.542012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 294.553847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.565721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.577672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.590352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.601567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.613471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 299.533648][ C0] net_ratelimit: 22917 callbacks suppressed [ 299.533669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.534366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.539957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.551880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 299.563820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.575687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.587720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.600344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.611588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.623538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 304.543834][ C1] net_ratelimit: 21111 callbacks suppressed [ 304.543855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 304.543920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.550147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.562135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.574848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.586036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.598342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 304.609827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.621759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.633723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.553733][ C0] net_ratelimit: 16804 callbacks suppressed [ 309.553755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.554084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.560063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.571978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 309.583863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.596516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.607690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.620284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.631541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.643472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 314.563661][ C0] net_ratelimit: 15219 callbacks suppressed [ 314.563682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.564245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.570016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.581903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 314.593805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.606674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.617647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.630238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.641491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.653370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 319.573882][ C1] net_ratelimit: 15283 callbacks suppressed [ 319.573902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.574005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.581089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.592178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.604089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 319.615955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.628515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.639775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.652345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.663636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.963644][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 319.970617][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7752/1:b..l [ 319.978996][ C0] rcu: (detected by 0, t=10503 jiffies, g=23409, q=1560 ncpus=2) [ 319.986817][ C0] task:syz.2.448 state:R running task stack:25176 pid:7752 tgid:7745 ppid:5841 task_flags:0x40054c flags:0x00004004 [ 320.001274][ C0] Call Trace: [ 320.004567][ C0] [ 320.007510][ C0] __schedule+0x16e2/0x4cd0 [ 320.012039][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 320.017942][ C0] ? preempt_schedule_common+0x83/0xd0 [ 320.023410][ C0] ? __pfx___schedule+0x10/0x10 [ 320.028270][ C0] ? do_raw_spin_lock+0x121/0x290 [ 320.033313][ C0] ? preempt_schedule+0xae/0xc0 [ 320.038170][ C0] preempt_schedule_common+0x83/0xd0 [ 320.043462][ C0] preempt_schedule+0xae/0xc0 [ 320.048143][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 320.053532][ C0] preempt_schedule_thunk+0x16/0x30 [ 320.058742][ C0] _raw_spin_unlock+0x3f/0x50 [ 320.063423][ C0] unmap_page_range+0x3756/0x4210 [ 320.068468][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 320.073804][ C0] ? mas_next_slot+0xc20/0xcf0 [ 320.078589][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 320.083985][ C0] ? unmap_single_vma+0x1b2/0x2a0 [ 320.089031][ C0] unmap_vmas+0x25d/0x3c0 [ 320.093469][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 320.098358][ C0] exit_mmap+0x245/0xba0 [ 320.102617][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 320.107388][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 320.113043][ C0] ? __pfx_exit_aio+0x10/0x10 [ 320.117748][ C0] ? uprobe_clear_state+0x274/0x290 [ 320.122961][ C0] __mmput+0x118/0x420 [ 320.127042][ C0] exit_mm+0x1da/0x2c0 [ 320.131212][ C0] ? __pfx_exit_mm+0x10/0x10 [ 320.135811][ C0] ? taskstats_exit+0x43c/0xa30 [ 320.140678][ C0] ? tty_audit_exit+0x153/0x200 [ 320.145543][ C0] do_exit+0x859/0x2550 [ 320.149720][ C0] ? do_raw_spin_lock+0x121/0x290 [ 320.154753][ C0] ? __pfx_do_exit+0x10/0x10 [ 320.159353][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.164748][ C0] do_group_exit+0x21c/0x2d0 [ 320.169348][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.174558][ C0] get_signal+0x125e/0x1310 [ 320.179105][ C0] arch_do_signal_or_restart+0x95/0x780 [ 320.184655][ C0] ? __fget_files+0x2a/0x420 [ 320.189264][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.195437][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 320.201343][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 320.206898][ C0] do_syscall_64+0x103/0x210 [ 320.211500][ C0] ? clear_bhb_loop+0x45/0xa0 [ 320.216208][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.222105][ C0] RIP: 0033:0x7f6d0b58d37c [ 320.226528][ C0] RSP: 002b:00007f6d0c433fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.234950][ C0] RAX: fffffffffffffe00 RBX: 00002000000042c0 RCX: 00007f6d0b58d37c [ 320.242926][ C0] RDX: 0000000000002000 RSI: 00002000000042c0 RDI: 0000000000000006 [ 320.250903][ C0] RBP: 00007f6d0b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 320.258881][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000006 [ 320.266859][ C0] R13: 00002000000062c0 R14: 00007f6d0b7b6160 R15: 00007f6d0b8dfa28 [ 320.274853][ C0] [ 320.277881][ C0] rcu: rcu_preempt kthread starved for 1524 jiffies! g23409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 320.288986][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 320.298955][ C0] rcu: RCU grace-period kthread stack dump: [ 320.304845][ C0] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 320.318346][ C0] Call Trace: [ 320.321630][ C0] [ 320.324572][ C0] __schedule+0x16e2/0x4cd0 [ 320.329090][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 320.334304][ C0] ? schedule+0x165/0x360 [ 320.338718][ C0] ? __pfx___schedule+0x10/0x10 [ 320.343586][ C0] ? schedule+0x91/0x360 [ 320.347837][ C0] schedule+0x165/0x360 [ 320.352004][ C0] schedule_timeout+0x12b/0x270 [ 320.356867][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 320.362245][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 320.368149][ C0] ? __pfx_process_timeout+0x10/0x10 [ 320.373444][ C0] ? prepare_to_swait_event+0x341/0x380 [ 320.379003][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 320.383864][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.389084][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 320.394031][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 320.400190][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 320.405481][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 320.410699][ C0] ? finish_swait+0xcd/0x1f0 [ 320.415302][ C0] rcu_gp_kthread+0x99/0x390 [ 320.419906][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.425113][ C0] ? __kthread_parkme+0x7b/0x200 [ 320.430055][ C0] ? __kthread_parkme+0x1a1/0x200 [ 320.435090][ C0] kthread+0x70e/0x8a0 [ 320.439172][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.444378][ C0] ? __pfx_kthread+0x10/0x10 [ 320.448974][ C0] ? __pfx_kthread+0x10/0x10 [ 320.453569][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.458773][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.463976][ C0] ? __pfx_kthread+0x10/0x10 [ 320.468568][ C0] ret_from_fork+0x4b/0x80 [ 320.472990][ C0] ? __pfx_kthread+0x10/0x10 [ 320.477583][ C0] ret_from_fork_asm+0x1a/0x30 [ 320.482368][ C0] [ 320.485387][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 320.491725][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 320.503357][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 320.513412][ C0] RIP: 0010:__rcu_read_unlock+0x63/0xe0 [ 320.518982][ C0] Code: 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 <3d> 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc [ 320.538591][ C0] RSP: 0018:ffffc90000006fe8 EFLAGS: 00000246 [ 320.544668][ C0] RAX: 0000000000000001 RBX: ffffffff8dc95684 RCX: bd58ddf36c024800 [ 320.552648][ C0] RDX: 0000000000000001 RSI: ffffffff8d935a6f RDI: ffffffff8dc95240 [ 320.560620][ C0] RBP: dffffc0000000000 R08: ffffc90000007458 R09: 0000000000000000 [ 320.568599][ C0] R10: ffffc90000007138 R11: fffff52000000e29 R12: 1ffffffff1b92ad0 [ 320.576577][ C0] R13: ffffc90000000000 R14: ffffc900000070e8 R15: dffffc0000000000 [ 320.584553][ C0] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 320.593485][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.600068][ C0] CR2: 00002000002f8030 CR3: 000000007e7e6000 CR4: 00000000003526f0 [ 320.608044][ C0] DR0: 0000000000000038 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.616019][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 320.623995][ C0] Call Trace: [ 320.627273][ C0] [ 320.630122][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.635244][ C0] unwind_next_frame+0x19ae/0x2390 [ 320.640371][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.645490][ C0] ? kasan_save_track+0x3e/0x80 [ 320.650350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.656509][ C0] arch_stack_walk+0x11c/0x150 [ 320.661283][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 320.666314][ C0] stack_trace_save+0x9c/0xe0 [ 320.670999][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 320.676379][ C0] ? __lock_acquire+0xaac/0xd20 [ 320.681245][ C0] kasan_save_track+0x3e/0x80 [ 320.685926][ C0] ? kasan_save_track+0x3e/0x80 [ 320.690831][ C0] __kasan_slab_alloc+0x6c/0x80 [ 320.695693][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 320.701159][ C0] ? skb_ext_add+0x148/0x8f0 [ 320.705762][ C0] skb_ext_add+0x148/0x8f0 [ 320.710191][ C0] br_nf_pre_routing_ipv6+0x132/0x6b0 [ 320.715578][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 320.721484][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 320.726704][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 320.732170][ C0] br_handle_frame+0x97f/0x14c0 [ 320.737040][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 320.742331][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 320.748234][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 320.753526][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 320.759256][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 320.763935][ C0] ? kmem_cache_free+0x192/0x3f0 [ 320.768884][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 320.773583][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 320.779668][ C0] ? __lock_acquire+0xaac/0xd20 [ 320.784536][ C0] ? do_raw_spin_lock+0x121/0x290 [ 320.789570][ C0] ? __lock_acquire+0xaac/0xd20 [ 320.794434][ C0] ? process_backlog+0x2d5/0x14f0 [ 320.799465][ C0] ? process_backlog+0x2d5/0x14f0 [ 320.804495][ C0] __netif_receive_skb+0x72/0x380 [ 320.809525][ C0] ? process_backlog+0x2d5/0x14f0 [ 320.814566][ C0] process_backlog+0x60e/0x14f0 [ 320.819439][ C0] ? __pfx_process_backlog+0x10/0x10 [ 320.824730][ C0] ? do_raw_spin_lock+0x121/0x290 [ 320.829768][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.835148][ C0] __napi_poll+0xc4/0x480 [ 320.839480][ C0] ? net_rx_action+0x447/0xdf0 [ 320.844250][ C0] net_rx_action+0x6ea/0xdf0 [ 320.848859][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 320.854005][ C0] handle_softirqs+0x283/0x870 [ 320.858783][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 320.863551][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 320.868855][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 320.874062][ C0] __irq_exit_rcu+0xca/0x1f0 [ 320.878656][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 320.883862][ C0] irq_exit_rcu+0x9/0x30 [ 320.888106][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 320.893748][ C0] [ 320.896678][ C0] [ 320.899628][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.905618][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 320.911346][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 eb 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 320.930969][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 320.937054][ C0] RAX: bd58ddf36c024800 RBX: ffffffff81974f28 RCX: bd58ddf36c024800 [ 320.945037][ C0] RDX: 0000000000000001 RSI: ffffffff8d74aa4f RDI: ffffffff8bc1d1e0 [ 320.953015][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 320.960996][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ed970 [ 320.968980][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 320.976964][ C0] ? do_idle+0x1e8/0x510 [ 320.981225][ C0] default_idle+0x13/0x20 [ 320.985563][ C0] default_idle_call+0x74/0xb0 [ 320.990336][ C0] do_idle+0x1e8/0x510 [ 320.994416][ C0] ? __pfx_do_idle+0x10/0x10 [ 320.999025][ C0] cpu_startup_entry+0x44/0x60 [ 321.003792][ C0] rest_init+0x2de/0x300 [ 321.008044][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 321.013602][ C0] start_kernel+0x470/0x4f0 [ 321.018117][ C0] x86_64_start_reservations+0x2a/0x30 [ 321.023590][ C0] x86_64_start_kernel+0x66/0x70 [ 321.028547][ C0] common_startup_64+0x13e/0x147 [ 321.033517][ C0] [ 322.085305][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.103119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.583698][ C0] net_ratelimit: 15472 callbacks suppressed [ 324.583718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.584098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.589990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.602578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.614848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.625782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 324.637616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.650258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.661488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.674317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.593640][ C0] net_ratelimit: 19171 callbacks suppressed [ 329.593675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.593741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.599956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.611913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.623817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.635640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:3c:58:91:a4:a8, vlan:0) [ 329.647608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.660301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.671491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.684122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)