last executing test programs:

13m39.982920623s ago: executing program 32 (id=14):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$getsig(0x4202, r2, 0x6d4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r4, &(0x7f0000000180)='1', 0x1)

13m37.163340354s ago: executing program 33 (id=15):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000600)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "9c7140450ac73c74"}}, 0x48}, 0x2, 0x0, 0x0, 0x50}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000000c0))

13m32.352697469s ago: executing program 34 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

13m32.038438338s ago: executing program 35 (id=18):
mknod$loop(0x0, 0x8, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
getresuid(0x0, 0x0, &(0x7f0000000380))
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
setrlimit(0x40000000000008, 0x0)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89101)
r5 = openat(r4, 0x0, 0x20d843, 0x0)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, 0x0, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a7, 0x4)
select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, 0x0)

11m46.664665583s ago: executing program 36 (id=85):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x2b8}}, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x120004, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='ocfs2_dlmfs\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="020029bd7000fddbdf253000000008000300", @ANYRES32, @ANYBLOB="0c009900000000000b00"], 0x30}, 0x1, 0x0, 0x0, 0xad786d7e733ec451}, 0x8014)
pwrite64(0xffffffffffffffff, &(0x7f0000001000), 0x1000, 0x0)

11m42.217064553s ago: executing program 37 (id=88):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff)

11m38.926136839s ago: executing program 38 (id=96):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x8b5dbbb54c3d7bd3)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800)

10m3.36730205s ago: executing program 39 (id=170):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000))
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6000, 0x3, &(0x7f000056c000/0x6000)=nil)
ioctl$VT_RESIZE(r4, 0x5609, 0x0)
gettid()
r5 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400), 0x0)
syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff04"], 0x0)
gettid()
wait4(0x0, 0x0, 0x2, 0x0)

9m59.344118527s ago: executing program 40 (id=156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/97, 0x61}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x29, 0x5, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)

9m49.955785187s ago: executing program 41 (id=167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pause()
r3 = syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = creat(0x0, 0xc7)
close(r4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xff8, 0x6, 0x1, 0x57, <r6=>r3})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x3, &(0x7f0000000340)=""/71)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x160, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'team_slave_0\x00', 'macsec0\x00', {}, {0xff}, 0x73, 0x1, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010101, 0xff, 0xff, 'lo\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x73, 0x1, 0x51}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0)
bind$xdp(r5, 0x0, 0x0)

7m11.77132716s ago: executing program 42 (id=283):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x3, {0xa, 0x4e24, 0x8000, @remote, 0x5}}}, 0x3a)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES32], 0x3, 0x21f, &(0x7f0000000940)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850)
sendmsg$nl_route_sched(r8, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x3, 0x4800000, 0x60, @remote, @empty, 0x80, 0x8000, 0x8, 0x7}})
connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x101, @private0, 0x6}}}, 0x3a)

7m2.831788412s ago: executing program 43 (id=296):
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$packet(0x11, 0x3, 0x300)
io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2})
socket$tipc(0x1e, 0x4, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

7m0.485075387s ago: executing program 44 (id=300):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0x2})
open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0xff8c, 0x80, 0x402, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x198}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2c1, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10000, 0x2, 0x1ed, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40587e, 0x8200, 0x1, 0x367, 0x0, r11}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0064008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
r12 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x483, @private=0xa010102}})

6m4.573264464s ago: executing program 45 (id=334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
write$uinput_user_dev(r4, 0x0, 0x0)
readv(r4, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r5, 0xd0087000)
r6 = dup(r5)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000580), 0x0, 0x40002000, 0x0)

5m59.524996537s ago: executing program 46 (id=344):
syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
epoll_create1(0x80000)
r1 = landlock_create_ruleset(&(0x7f0000000100)={0x20, 0x3, 0x3, 0x23344, 0x1}, 0x30, 0x3)
landlock_restrict_self(r1, 0x9)
setns(0xc9, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
accept(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_delroute={0xa0, 0x19, 0x320, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0xf6, 0x0, 0x1, 0xc8, 0x5, 0x2000}, [@RTA_NEWDST={0x84, 0x13, [{0xf1}, {0x6}, {0x9, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x1}, {0x3}, {}, {0x8, 0x0, 0x1}, {0x7}, {0xe4, 0x0, 0x1}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x8}, {0x90000, 0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x2, 0x0, 0x1}, {0x4}, {0x1, 0x0, 0x1}, {0x3}, {0x8, 0x0, 0x1}, {0x200}, {0xe, 0x0, 0x1}, {0x5}, {0xa5d7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xa}, {0x81, 0x0, 0x1}, {0x9}, {0x1000}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11)
ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0)
syz_pidfd_open(0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x83, 0x1, 'N'}, 0x0, 0x0})

5m18.554061995s ago: executing program 7 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
unlink(0x0)

5m15.464116509s ago: executing program 7 (id=388):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x5)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U+', 0x7}, 0x16, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0)
r5 = socket$inet(0x2, 0x1, 0x100)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]})
shutdown(r5, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x640100ff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "fbd194a4a0c986ff21c1bac6917bf18aa114b0eb7cd0166f0d67d610e1b6f9f4", 0x0, 0x9, 0x3, 0xfffff001}, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff)
sendfile(r9, r8, 0x0, 0x20000)

5m4.741613754s ago: executing program 6 (id=410):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x62, 0xc9, 0x7f}}}, 0x8)

4m59.185776533s ago: executing program 47 (id=388):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x5)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U+', 0x7}, 0x16, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0)
r5 = socket$inet(0x2, 0x1, 0x100)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]})
shutdown(r5, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x640100ff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "fbd194a4a0c986ff21c1bac6917bf18aa114b0eb7cd0166f0d67d610e1b6f9f4", 0x0, 0x9, 0x3, 0xfffff001}, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff)
sendfile(r9, r8, 0x0, 0x20000)

4m54.676766359s ago: executing program 6 (id=418):
userfaultfd(0x80001)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x300)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1)

4m51.198868975s ago: executing program 48 (id=403):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f00000001c0)={[{@i_version}, {@nodelalloc}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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")

4m51.032070945s ago: executing program 6 (id=422):
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x2, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000}}}}}}, 0x0)

4m50.953733852s ago: executing program 0 (id=423):
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x0, 0x5, {0x8, 0x1}, 0x0, 0x7})
tkill(0x0, 0x7)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='omfs\x00', 0x204000, 0x0)

4m35.25852729s ago: executing program 0 (id=435):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @random="96dc4b6cb0b6"}, 0x4, {0x2, 0x4e22, @multicast2}, 'batadv_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r2, &(0x7f0000000500)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x5d)

4m35.250733628s ago: executing program 6 (id=438):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='10', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3)

4m33.7447649s ago: executing program 0 (id=440):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @random="96dc4b6cb0b6"}, 0x4, {0x2, 0x4e22, @multicast2}, 'batadv_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r2, &(0x7f0000000500)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x5d)

4m31.667062629s ago: executing program 6 (id=427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)

4m31.665866644s ago: executing program 0 (id=428):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)

4m29.291580067s ago: executing program 0 (id=430):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)

4m26.141311471s ago: executing program 6 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)

4m22.891452393s ago: executing program 0 (id=441):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r5=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, <r6=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1})
close(r5)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1})
close(r0)

4m20.700495612s ago: executing program 1 (id=444):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00')
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x8001)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x400448e6, 0x0)
ioctl$sock_bt_hci(r3, 0x400448dc, 0x0)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @remote}, 0x10)

4m19.151569054s ago: executing program 1 (id=445):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='10', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3)

4m9.473375641s ago: executing program 49 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)

4m9.429891303s ago: executing program 1 (id=452):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2/file0\x00', 0x121140, 0xd9)
mprotect(&(0x7f0000ccf000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040))
getpid()
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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")
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000200)=""/51, 0x33)

4m7.08270828s ago: executing program 50 (id=441):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r5=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, <r6=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1})
close(r5)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1})
close(r0)

4m3.261284957s ago: executing program 1 (id=457):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='xfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x2, 0x120)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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")
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2)
chdir(&(0x7f0000000240)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43, 0x50, 0x4f]}, 0x38)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
fchown(r5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)

4m0.247431272s ago: executing program 1 (id=459):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000040), 0x6, 0x62f, &(0x7f0000000cc0)="$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")

3m54.202974403s ago: executing program 1 (id=466):
syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==")

3m53.451330046s ago: executing program 51 (id=466):
syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x1045, &(0x7f0000001140)="$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")

3m15.698817319s ago: executing program 7 (id=467):
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2)

3m13.089798782s ago: executing program 7 (id=500):
r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff00070581024000000705010240000009040001"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x110000000000)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0xd, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)={r3})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff3a, &(0x7f0000000140)="04000000")

3m6.207115486s ago: executing program 7 (id=521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)

3m3.59647032s ago: executing program 7 (id=525):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
r7 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3)
ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107)
fallocate(r7, 0x0, 0x0, 0x200401)
fallocate(r7, 0x0, 0x0, 0x200401)
r8 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_timedsend(r8, &(0x7f0000002300)="a44a486ddbf87c", 0x7, 0x4, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)

2m44.057344267s ago: executing program 52 (id=525):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
r7 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3)
ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107)
fallocate(r7, 0x0, 0x0, 0x200401)
fallocate(r7, 0x0, 0x0, 0x200401)
r8 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_timedsend(r8, &(0x7f0000002300)="a44a486ddbf87c", 0x7, 0x4, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)

19.677077011s ago: executing program 9 (id=862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24)

19.293811456s ago: executing program 9 (id=864):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407})

19.142133312s ago: executing program 2 (id=867):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @random="96dc4b6cb0b6"}, 0x4, {0x2, 0x4e22, @multicast2}, 'batadv_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
keyctl$search(0xa, 0x0, &(0x7f0000000500)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x5d)

18.000329543s ago: executing program 9 (id=871):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
write$uinput_user_dev(r3, 0x0, 0x0)
readv(r3, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r4, 0xd0087000)
dup(r4)
recvmmsg(r4, &(0x7f0000000580), 0x0, 0x40002000, 0x0)

17.82588187s ago: executing program 2 (id=872):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401)
r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_timedsend(r7, &(0x7f0000002300)="a44a486ddbf87c", 0x7, 0x4, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

15.742100534s ago: executing program 9 (id=875):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015"], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

15.590532124s ago: executing program 8 (id=876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0xfffffffb, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800000d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)

14.968277245s ago: executing program 8 (id=881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)
close(0xffffffffffffffff)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
unlink(0x0)

12.916100934s ago: executing program 8 (id=882):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r0)
mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='./mnt\x00', 0x0, 0x291004, 0x0)

12.395277965s ago: executing program 3 (id=884):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @random="96dc4b6cb0b6"}, 0x4, {0x2, 0x4e22, @multicast2}, 'batadv_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
keyctl$search(0xa, 0x0, &(0x7f0000000500)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x5d)

12.222050571s ago: executing program 2 (id=885):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x82, &(0x7f0000000340)=@generic={0x8, 0x0, 0x7a, "de4361fb", "7d68c7c0564fd24908734fef193a7722e33ab98d3b3bfab673209516b9d7bbdc36bd41e460b11f7426cdca7dda8702f73167a9e07a983121b436ba4ad6fbc4a75ffb5fa09ba20b6e97fe4f803ac3952ed75cc695b7d98d7771f4f615e4db6503862063cf8e5bcd0117e2cc7ffa1140ec635f495a4ea81f571ed3"})

11.161723739s ago: executing program 3 (id=888):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

10.827701357s ago: executing program 4 (id=889):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000340)=ANY=[@ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812b372cae837c9e5c5c80c719abec2f0e1d37f96e0ef730264db1304c9f6fcd0b44f81a2583c4b1e50d5065bd8bfde0204c4b2178ec7f063a115baa7010100000000000022042a718d3742f6df4c32f92c9e6991c943ec3cfb707b5168952d8f1c8a47f0db71e8083ec8c7aca0c65aa2f9090d2a72cb7eb0d61a6f79abeadbcb8f55e2113fedfeabd409ec9fd22ed33f2cfbba2c689c00"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0xd, 0x643, &(0x7f0000001380)="$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")
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0)

10.729730002s ago: executing program 5 (id=890):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1})

10.584832365s ago: executing program 3 (id=891):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_get$pid(0x1, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
unlink(0x0)

7.879328629s ago: executing program 3 (id=892):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001000038004"], 0x3c}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9)
write(0xffffffffffffffff, 0x0, 0x0)

6.86328889s ago: executing program 5 (id=893):
r0 = syz_io_uring_setup(0x1413, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x4900, 0x80, 0xe}, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r0, 0x39d7, 0x1, 0x1, 0x0, 0x0)

6.814823858s ago: executing program 2 (id=894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002001dd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0)

6.722965702s ago: executing program 4 (id=895):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

6.432064596s ago: executing program 5 (id=896):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

6.34041542s ago: executing program 9 (id=897):
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
unshare(0x24020400)
ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401)
r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_timedsend(r7, &(0x7f0000002300)="a44a486ddbf87c", 0x7, 0x4, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

6.329228114s ago: executing program 2 (id=898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000)
r4 = syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0)
read$FUSE(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
unlink(0x0)

4.308497243s ago: executing program 2 (id=899):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
write$uinput_user_dev(r4, 0x0, 0x0)
readv(r4, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r5, 0xd0087000)
r6 = dup(r5)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
recvmmsg(r5, &(0x7f0000000580), 0x0, 0x40002000, 0x0)

4.290103231s ago: executing program 3 (id=900):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
write$uinput_user_dev(r3, 0x0, 0x0)
readv(r3, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r4, 0xd0087000)
dup(r4)
recvmmsg(r4, &(0x7f0000000580), 0x0, 0x40002000, 0x0)

4.054245277s ago: executing program 5 (id=901):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fdatasync(r0)

1.82872933s ago: executing program 3 (id=902):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070f0000002a940183"], 0x0}, 0x0)

1.730210578s ago: executing program 8 (id=903):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000002040))

1.598254264s ago: executing program 4 (id=904):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
pwritev2(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)="953a", 0x2}], 0x1, 0x0, 0xc79, 0x4)

1.422759768s ago: executing program 9 (id=905):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2900004e1560254722cb66187f"])

1.220103858s ago: executing program 8 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd0}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.045627783s ago: executing program 8 (id=907):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x68, &(0x7f0000000040)=ANY=[])

1.039853513s ago: executing program 4 (id=908):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

830.098154ms ago: executing program 5 (id=909):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x39d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

772.782151ms ago: executing program 4 (id=910):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0)

148.509203ms ago: executing program 4 (id=911):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
readv(r3, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, 0xffffffffffffffff, 0xd0087000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x40002000, 0x0)

0s ago: executing program 5 (id=912):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c)
readv(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

bridge_slave_1: entered promiscuous mode
[  715.297529][   T30] audit: type=1800 audit(1790908581.575:39): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.472" name=08 dev="sda1" ino=2081 res=0 errno=0
[  715.680146][ T4933] Bluetooth: hci1: command tx timeout
[  716.225009][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.249023][   T60] hsr_slave_0: left promiscuous mode
[  716.249867][   T60] hsr_slave_1: left promiscuous mode
[  716.258209][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.258241][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.262957][ T1212] usb 4-1: USB disconnect, device number 6
[  716.288543][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.288577][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.360483][   T60] veth1_macvtap: left promiscuous mode
[  716.360537][   T60] veth0_macvtap: left promiscuous mode
[  716.365992][   T60] veth1_vlan: left promiscuous mode
[  716.367784][   T60] veth0_vlan: left promiscuous mode
[  718.307980][ T4933] Bluetooth: hci1: command tx timeout
[  720.369431][ T9574] Bluetooth: hci1: command tx timeout
[  720.753587][T10077] loop4: detected capacity change from 0 to 16
[  720.768787][T10077] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 66700)
[  721.318846][   T60] team0 (unregistering): Port device team_slave_1 removed
[  721.375139][   T60] team0 (unregistering): Port device team_slave_0 removed
[  721.376987][T10085] loop4: detected capacity change from 0 to 256
[  721.378236][T10085] exfat: Deprecated parameter 'namecase'
[  721.378362][T10085] exfat: Deprecated parameter 'namecase'
[  722.434064][ T9574] Bluetooth: hci1: command tx timeout
[  723.335857][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.012750][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18
[  724.447996][ T9922] team0: Port device team_slave_0 added
[  725.250339][T10109] autofs: Unknown parameter '00000000000000000000'
[  725.592516][ T9922] team0: Port device team_slave_1 added
[  725.949967][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.950742][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.955787][ T9927] bridge_slave_0: entered allmulticast mode
[  725.960176][ T9927] bridge_slave_0: entered promiscuous mode
[  725.963703][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.963821][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.963984][ T9927] bridge_slave_1: entered allmulticast mode
[  726.162480][ T9927] bridge_slave_1: entered promiscuous mode
[  726.389816][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.389854][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.389901][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.504352][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.504379][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.504428][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.617954][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.637409][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.711846][ T1213] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  726.873233][ T1213] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  726.874589][ T1213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.881145][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.881188][ T1213] usb 5-1: Product: syz
[  726.881215][ T1213] usb 5-1: Manufacturer: syz
[  726.881241][ T1213] usb 5-1: SerialNumber: syz
[  727.050166][   T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.079241][ T9927] team0: Port device team_slave_0 added
[  727.137971][ T9922] hsr_slave_0: entered promiscuous mode
[  727.139477][ T9922] hsr_slave_1: entered promiscuous mode
[  727.140534][ T9922] debugfs: 'hsr0' already exists in 'hsr'
[  727.140593][ T9922] Cannot create hsr debugfs directory
[  727.176221][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19
[  727.180779][ T9927] team0: Port device team_slave_1 added
[  727.229384][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.229413][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.229459][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.317484][   T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.340446][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.340473][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.340580][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.482629][   T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.498462][ T1213] snd-usb-caiaq 5-1:1.0: invalid EPs
[  727.498498][ T1213] usb 5-1: unable to init card! (ret=-22)
[  727.499002][ T1213] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  727.675148][   T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.725841][ T9927] hsr_slave_0: entered promiscuous mode
[  727.727131][ T9927] hsr_slave_1: entered promiscuous mode
[  727.728085][ T9927] debugfs: 'hsr0' already exists in 'hsr'
[  727.728114][ T9927] Cannot create hsr debugfs directory
[  728.580518][T10035] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.580726][T10035] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.580950][T10035] bridge_slave_0: entered allmulticast mode
[  728.589178][T10035] bridge_slave_0: entered promiscuous mode
[  728.592850][T10035] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.592970][T10035] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.596300][T10035] bridge_slave_1: entered allmulticast mode
[  728.600801][T10035] bridge_slave_1: entered promiscuous mode
[  728.648257][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20
[  728.697929][   T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.811580][   T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.826322][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.846510][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.900374][T10035] team0: Port device team_slave_0 added
[  728.951312][   T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.964219][T10035] team0: Port device team_slave_1 added
[  729.013767][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.013791][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.013841][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.016264][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.016286][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.016350][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.144558][   T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.256844][T10035] hsr_slave_0: entered promiscuous mode
[  729.257970][T10035] hsr_slave_1: entered promiscuous mode
[  729.258741][T10035] debugfs: 'hsr0' already exists in 'hsr'
[  729.258790][T10035] Cannot create hsr debugfs directory
[  729.364281][ T9922] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  729.376956][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  729.412530][ T9922] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  729.429126][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  729.474728][ T1212] usb 5-1: USB disconnect, device number 2
[  731.605245][T10176] loop9: detected capacity change from 0 to 2048
[  731.696864][T10176]  loop9: unable to read partition table
[  731.697128][T10176] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  731.706199][ T9922] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  731.743679][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  731.750692][ T9922] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  732.374502][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  735.010654][   T60] bridge_slave_1: left allmulticast mode
[  735.010695][   T60] bridge_slave_1: left promiscuous mode
[  735.010952][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.038066][   T60] bridge_slave_0: left allmulticast mode
[  735.038105][   T60] bridge_slave_0: left promiscuous mode
[  735.053333][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.108481][   T60] bridge_slave_1: left allmulticast mode
[  735.108522][   T60] bridge_slave_1: left promiscuous mode
[  735.108752][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.147961][   T60] bridge_slave_0: left allmulticast mode
[  735.147999][   T60] bridge_slave_0: left promiscuous mode
[  735.148256][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.943469][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.950856][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.975527][   T60] bond0 (unregistering): Released all slaves
[  738.325166][T10216] loop4: detected capacity change from 0 to 512
[  738.349715][T10216] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4701: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  738.349765][T10216] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  738.456147][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  738.491293][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  738.511233][   T60] bond0 (unregistering): Released all slaves
[  738.929935][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16
[  741.087209][T10236] loop3: detected capacity change from 0 to 512
[  741.138493][T10236] EXT4-fs (loop3): corrupt root inode, run e2fsck
[  741.138590][T10236] EXT4-fs (loop3): mount failed
[  742.025782][   T30] audit: type=1800 audit(1790908607.885:40): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.498" name=08 dev="sda1" ino=2081 res=0 errno=0
[  742.390774][   T60] hsr_slave_0: left promiscuous mode
[  742.399437][   T60] hsr_slave_1: left promiscuous mode
[  742.400413][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.400442][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.428649][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.428682][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.474702][   T60] hsr_slave_0: left promiscuous mode
[  742.477184][   T60] hsr_slave_1: left promiscuous mode
[  742.478185][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.478214][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.480917][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.480945][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.540656][   T60] veth1_macvtap: left promiscuous mode
[  742.540709][   T60] veth0_macvtap: left promiscuous mode
[  742.540805][   T60] veth1_vlan: left promiscuous mode
[  742.540877][   T60] veth0_vlan: left promiscuous mode
[  742.564256][   T60] veth1_macvtap: left promiscuous mode
[  742.564307][   T60] veth0_macvtap: left promiscuous mode
[  742.564438][   T60] veth1_vlan: left promiscuous mode
[  742.564657][   T60] veth0_vlan: left promiscuous mode
[  743.155957][   T60] team0 (unregistering): Port device team_slave_1 removed
[  743.169634][   T60] team0 (unregistering): Port device team_slave_0 removed
[  743.251498][  T982] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  743.413861][  T982] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  743.416075][  T982] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  743.419452][  T982] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.419495][  T982] usb 10-1: Product: syz
[  743.419522][  T982] usb 10-1: Manufacturer: syz
[  743.419549][  T982] usb 10-1: SerialNumber: syz
[  743.534599][   T60] team0 (unregistering): Port device team_slave_1 removed
[  743.559747][   T60] team0 (unregistering): Port device team_slave_0 removed
[  743.732611][ T9927] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  743.737880][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  743.739220][ T9927] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  743.770419][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  743.786597][ T5278] 8021q: adding VLAN 0 to HW filter on device eth21
[  743.789838][ T9927] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  743.816812][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  743.818061][ T9927] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  743.852996][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  744.059463][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.071766][  T982] snd-usb-caiaq 10-1:1.0: invalid EPs
[  744.071799][  T982] usb 10-1: unable to init card! (ret=-22)
[  744.074168][  T982] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  744.316962][ T9922] 8021q: adding VLAN 0 to HW filter on device team0
[  744.364666][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19
[  744.398383][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.398478][ T6664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.423957][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.424114][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.639422][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.754437][ T9927] 8021q: adding VLAN 0 to HW filter on device team0
[  744.815782][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.815916][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.855431][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.855583][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.948780][T10035] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  744.964156][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  744.976497][T10035] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  744.995140][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  744.997315][T10035] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  745.020320][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  745.032728][T10035] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  745.038615][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  745.380694][T10035] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.451427][T10035] 8021q: adding VLAN 0 to HW filter on device team0
[  745.479823][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.479950][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  745.517103][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.517230][ T6664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.067818][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.137872][ T5278] 8021q: adding VLAN 0 to HW filter on device eth22
[  746.159802][  T982] usb 10-1: USB disconnect, device number 6
[  746.586802][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  746.586888][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  746.665617][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.999848][ T9922] veth0_vlan: entered promiscuous mode
[  747.020669][ T9922] veth1_vlan: entered promiscuous mode
[  747.169373][ T9922] veth0_macvtap: entered promiscuous mode
[  747.189550][ T9922] veth1_macvtap: entered promiscuous mode
[  747.263240][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  747.298603][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  747.340306][T10035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.341699][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  747.341895][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  747.341961][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  747.342023][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  747.606946][ T9927] veth0_vlan: entered promiscuous mode
[  747.624738][ T1373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.624769][ T1373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  747.641401][ T9927] veth1_vlan: entered promiscuous mode
[  747.728856][ T1373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.728890][ T1373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  747.819539][ T9927] veth0_macvtap: entered promiscuous mode
[  747.863040][ T9927] veth1_macvtap: entered promiscuous mode
[  747.905683][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  747.964152][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.103997][T10357] loop4: detected capacity change from 0 to 256
[  748.114306][ T1415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.114904][ T1415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.145295][T10357] exfat: Deprecated parameter 'namecase'
[  748.150908][T10357] exfat: Deprecated parameter 'namecase'
[  748.167989][ T1415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.231600][ T1212] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  748.241819][ T1415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.272874][ T7647] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  748.299464][T10357] exFAT-fs (loop4): failed to read sector(0x800000080)
[  748.299490][T10357] exFAT-fs (loop4): failed to load upcase table
[  748.299504][T10357] exFAT-fs (loop4): failed to recognize exfat type
[  748.385026][ T1212] usb 4-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00
[  748.388600][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.443617][ T7647] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  748.445412][ T7647] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  748.474007][ T7647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.474051][ T7647] usb 9-1: Product: syz
[  748.474078][ T7647] usb 9-1: Manufacturer: syz
[  748.474105][ T7647] usb 9-1: SerialNumber: syz
[  748.563804][ T1373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.563838][ T1373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.603877][ T1212] rc_core: IR keymap rc-rc6-mce not found
[  748.603900][ T1212] Registered IR keymap rc-empty
[  748.640744][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.653454][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.678623][T10035] veth0_vlan: entered promiscuous mode
[  748.692025][ T1212] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0
[  748.714949][ T1212] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input36
[  748.729571][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.729604][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.765600][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.768008][T10035] veth1_vlan: entered promiscuous mode
[  748.784108][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.811665][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.842772][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.862685][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.881867][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.911924][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.931803][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.951802][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.973088][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  748.987774][T10035] veth0_macvtap: entered promiscuous mode
[  748.996167][ T1212] mceusb 4-1:1.0: Error: mce write urb status = -71
[  749.025138][ T1212] mceusb 4-1:1.0: Registered  with mce emulator interface version 1
[  749.025178][ T1212] mceusb 4-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  749.051829][ T1212] usb 4-1: USB disconnect, device number 7
[  749.065140][T10035] veth1_macvtap: entered promiscuous mode
[  749.218324][T10035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.239268][ T7647] snd-usb-caiaq 9-1:1.0: invalid EPs
[  749.239303][ T7647] usb 9-1: unable to init card! (ret=-22)
[  749.239751][ T7647] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  749.266087][T10035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.362969][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.363056][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.363118][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.363179][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.689400][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.689434][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.765992][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4
[  749.866408][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.866443][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.196578][ T9574] Bluetooth: hci1: Malformed HCI Event
[  752.376271][ T6459] usb 9-1: USB disconnect, device number 5
[  753.981534][  T982] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  754.127642][T10418] loop5: detected capacity change from 0 to 512
[  754.133776][  T982] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  754.141161][  T982] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  754.157680][  T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.157721][  T982] usb 8-1: Product: syz
[  754.157747][  T982] usb 8-1: Manufacturer: syz
[  754.157773][  T982] usb 8-1: SerialNumber: syz
[  754.168701][T10418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  754.190188][T10418] EXT4-fs (loop5): mount failed
[  754.452823][T10422] loop8: detected capacity change from 0 to 1024
[  754.454079][T10422] EXT4-fs: Invalid want_extra_isize 2
[  754.483015][T10425] loop3: detected capacity change from 0 to 164
[  754.535025][T10425] isofs_fill_super: root inode is not a directory. Corrupted media?
[  754.934678][  T982] snd-usb-caiaq 8-1:1.0: invalid EPs
[  754.934712][  T982] usb 8-1: unable to init card! (ret=-22)
[  754.935161][  T982] snd-usb-caiaq 8-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  755.852595][ T7647] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  755.954464][T10436] loop3: detected capacity change from 0 to 2
[  755.977137][T10436] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  756.027334][ T7647] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  756.029895][ T7647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  756.056829][ T7647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.056882][ T7647] usb 5-1: Product: syz
[  756.056908][ T7647] usb 5-1: Manufacturer: syz
[  756.056936][ T7647] usb 5-1: SerialNumber: syz
[  759.509435][ T7647] snd-usb-caiaq 5-1:1.0: can't set alt interface.
[  759.509487][ T7647] usb 5-1: unable to init card! (ret=-5)
[  759.509898][ T7647] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  759.573792][ T5636] usb 8-1: USB disconnect, device number 3
[  759.575624][ T7647] usb 5-1: USB disconnect, device number 3
[  759.790944][T10456] loop8: detected capacity change from 0 to 2048
[  761.936812][T10462] loop4: detected capacity change from 0 to 2048
[  761.990321][T10462] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  762.065282][T10456] NILFS (loop8): invalid segment: Inconsistency found
[  762.065323][T10456] NILFS (loop8): trying rollback from an earlier position
[  762.351062][T10456] NILFS (loop8): norecovery option specified, skipping roll-forward recovery
[  765.734890][T10489] loop9: detected capacity change from 0 to 8
[  765.789471][T10489] SQUASHFS error: lzo decompression failed, data probably corrupt
[  765.789514][T10489] SQUASHFS error: Failed to read block 0x91: -5
[  765.789536][T10489] SQUASHFS error: Unable to read metadata cache entry [8f]
[  765.789556][T10489] SQUASHFS error: Unable to read inode 0x11f
[  767.983433][ T9574] Bluetooth: hci5: unexpected subevent 0x10 length: 5 > 2
[  768.004179][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  768.491443][ T7647] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  768.614349][T10508] loop8: detected capacity change from 0 to 256
[  768.630967][T10508] vfat: Bad value for 'uni_xlate'
[  768.645699][ T7647] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  768.652067][ T7647] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  768.658125][ T7647] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.658167][ T7647] usb 10-1: Product: syz
[  768.658193][ T7647] usb 10-1: Manufacturer: syz
[  768.658220][ T7647] usb 10-1: SerialNumber: syz
[  769.070200][T10514] loop8: detected capacity change from 0 to 8
[  769.105345][T10514] syz.8.537: attempt to access beyond end of device
[  769.105345][T10514] loop8: rw=8390656, sector=36028797018963960, nr_sectors = 16 limit=8
[  769.105461][T10514] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5
[  769.105528][T10514] unable to read xattr id index table
[  769.465234][ T7647] snd-usb-caiaq 10-1:1.0: invalid EPs
[  769.465269][ T7647] usb 10-1: unable to init card! (ret=-22)
[  769.465720][ T7647] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  772.160459][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  772.503189][   T44] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  772.667445][   T44] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  772.668814][   T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  772.672007][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.672048][   T44] usb 4-1: Product: syz
[  772.672082][   T44] usb 4-1: Manufacturer: syz
[  772.672110][   T44] usb 4-1: SerialNumber: syz
[  772.718211][ T5636] usb 10-1: USB disconnect, device number 7
[  773.060413][T10548] loop9: detected capacity change from 0 to 512
[  773.083256][T10548] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  773.275363][T10548] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.541: iget: bad i_size value: 360287970189639680
[  773.275418][T10548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  773.281385][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  773.281419][    C0] EXT4-fs (loop9): initial error at time 1790908639: ext4_orphan_get:1403: inode 15
[  773.281468][    C0] EXT4-fs (loop9): last error at time 1790908639: ext4_orphan_get:1403: inode 15
[  775.489508][ T9574] Bluetooth: hci2: command 0x0406 tx timeout
[  776.235306][T10548] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.541: couldn't read orphan inode 15 (err -117)
[  776.235363][T10548] fserror_report: 1 callbacks suppressed
[  776.235383][T10548] loop9: lost filesystem error report for type 5 error -117
[  776.321248][T10548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  776.490782][   T44] snd-usb-caiaq 4-1:1.0: can't set alt interface.
[  776.490829][   T44] usb 4-1: unable to init card! (ret=-5)
[  776.491232][   T44] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  776.509735][   T44] usb 4-1: USB disconnect, device number 8
[  776.657119][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  776.862815][   T30] audit: type=1800 audit(1790908643.195:41): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.545" name=08 dev="sda1" ino=2081 res=0 errno=0
[  784.062206][T10588] loop5: detected capacity change from 0 to 4096
[  784.135567][T10588] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  784.135613][T10588] ntfs3(loop5): RAW NTFS volume: Filesystem size 0.75 Gb > volume size 0.00 Gb. Mount in read-only.
[  784.454380][T10588] ntfs3(loop5): $Bitmap is corrupted.
[  784.670255][ T9574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  784.693031][ T9574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  784.696692][ T9574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  784.702869][ T9574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  784.720423][ T9574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  786.822560][ T4933] Bluetooth: hci4: command tx timeout
[  787.292417][ T1213] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  787.465543][ T1213] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  787.476861][ T1213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  787.485692][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.485733][ T1213] usb 9-1: Product: syz
[  787.485759][ T1213] usb 9-1: Manufacturer: syz
[  787.485785][ T1213] usb 9-1: SerialNumber: syz
[  788.279365][ T1213] snd-usb-caiaq 9-1:1.0: invalid EPs
[  788.279400][ T1213] usb 9-1: unable to init card! (ret=-22)
[  788.279867][ T1213] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  788.489513][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.912440][ T4933] Bluetooth: hci4: command tx timeout
[  790.158914][ T7647] usb 9-1: USB disconnect, device number 6
[  790.450041][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.823875][ T5919] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  791.501918][ T5919] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  791.503750][ T5919] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  791.506416][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.506455][ T5919] usb 4-1: Product: syz
[  791.506481][ T5919] usb 4-1: Manufacturer: syz
[  791.506508][ T5919] usb 4-1: SerialNumber: syz
[  791.702304][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.921871][ T4933] Bluetooth: hci4: command tx timeout
[  794.289074][T10653] loop8: detected capacity change from 0 to 4096
[  794.310726][T10653] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  794.330809][T10653] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  794.396062][ T5919] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  794.472882][ T5919] usb 4-1: unit 2 not found!
[  794.565179][ T5919] usb 4-1: disable ehci-hcd to run US-144
[  794.579622][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.600159][T10653] ntfs3(loop8): Failed to load $LogFile (-22).
[  794.600688][ T5919] usb 4-1: USB disconnect, device number 9
[  794.813185][T10542] udevd[10542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  795.052177][   T44] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  797.010676][ T4933] Bluetooth: hci4: command tx timeout
[  797.102643][   T44] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  797.106001][   T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  797.134400][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.134446][   T44] usb 6-1: Product: syz
[  797.134473][   T44] usb 6-1: Manufacturer: syz
[  797.134500][   T44] usb 6-1: SerialNumber: syz
[  797.320789][   T13] bridge_slave_1: left allmulticast mode
[  797.320830][   T13] bridge_slave_1: left promiscuous mode
[  797.321164][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.372418][   T13] bridge_slave_0: left allmulticast mode
[  797.372490][   T13] bridge_slave_0: left promiscuous mode
[  797.372796][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.853967][   T44] snd-usb-caiaq 6-1:1.0: invalid EPs
[  797.854001][   T44] usb 6-1: unable to init card! (ret=-22)
[  797.854458][   T44] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  798.070486][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.085431][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.090868][   T13] bond0 (unregistering): Released all slaves
[  798.159204][ T5278] 8021q: adding VLAN 0 to HW filter on device eth23
[  798.355738][T10674] loop4: detected capacity change from 0 to 512
[  798.449201][T10674] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  798.482800][T10674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  798.482945][T10674] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  798.623496][ T9524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.849645][T10686] loop3: detected capacity change from 0 to 2048
[  798.887746][T10686]  loop3: p1 < > p4
[  798.887746][T10686]  p4: <netbsd: >
[  798.909159][T10686] loop3: p4 size 722688 extends beyond EOD, truncated
[  798.944682][T10598] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.944849][T10598] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.945035][T10598] bridge_slave_0: entered allmulticast mode
[  798.968516][T10598] bridge_slave_0: entered promiscuous mode
[  799.269034][   T30] audit: type=1800 audit(1790908665.555:42): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.561" name=08 dev="sda1" ino=2081 res=0 errno=0
[  800.003485][ T5636] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  800.140576][T10598] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.140694][T10598] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.140888][T10598] bridge_slave_1: entered allmulticast mode
[  800.166880][T10598] bridge_slave_1: entered promiscuous mode
[  800.253282][ T5636] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  800.271169][ T5636] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  800.285598][   T44] usb 6-1: USB disconnect, device number 4
[  800.313270][ T5636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.313316][ T5636] usb 10-1: Product: syz
[  800.313343][ T5636] usb 10-1: Manufacturer: syz
[  800.313370][ T5636] usb 10-1: SerialNumber: syz
[  802.738809][ T4933] Bluetooth: hci2: unexpected event for opcode 0x2019
[  802.852975][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.949956][   T13] hsr_slave_0: left promiscuous mode
[  802.967279][   T13] hsr_slave_1: left promiscuous mode
[  802.968456][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.968488][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.977621][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.977655][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.994467][ T5636] snd-usb-caiaq 10-1:1.0: can't set alt interface.
[  802.994510][ T5636] usb 10-1: unable to init card! (ret=-5)
[  802.994891][ T5636] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  804.938389][   T13] veth1_macvtap: left promiscuous mode
[  804.938444][   T13] veth0_macvtap: left promiscuous mode
[  804.938592][   T13] veth1_vlan: left promiscuous mode
[  804.938703][   T13] veth0_vlan: left promiscuous mode
[  804.979910][ T5636] usb 10-1: USB disconnect, device number 8
[  805.110430][T10711] loop5: detected capacity change from 0 to 4096
[  805.320007][T10711] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  805.411805][ T4933] Bluetooth: hci2: unexpected event for opcode 0x2028
[  805.424982][T10711] ntfs3(loop5): ino=1a, mi_enum_attr
[  805.425137][T10711] ntfs3(loop5): ino=1a, mi_enum_attr
[  805.425168][T10711] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  805.738581][   T30] audit: type=1800 audit(1790908672.085:43): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.577" name="file1" dev="loop5" ino=30 res=0 errno=0
[  805.864901][T10711] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex
[  806.356060][T10726] loop5: detected capacity change from 0 to 4096
[  806.450299][T10718] loop9: detected capacity change from 0 to 32768
[  806.476047][T10726] ntfs3(loop5): ino=0, mi_enum_attr
[  806.493986][   T13] team0 (unregistering): Port device team_slave_1 removed
[  806.519385][T10718] (syz.9.567,10718,0):ocfs2_find_slot:490 ERROR: no free slots available!
[  806.519427][T10718] (syz.9.567,10718,0):ocfs2_mount_volume:1750 ERROR: status = -22
[  806.559099][   T13] team0 (unregistering): Port device team_slave_0 removed
[  806.560639][T10718] (syz.9.567,10718,0):ocfs2_fill_super:1177 ERROR: status = -22
[  806.651639][T10726] ntfs3(loop5): ino=0, mi_enum_attr
[  806.651689][T10726] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  806.660024][T10726] ntfs3(loop5): ino=0, mi_enum_attr
[  806.798925][T10730] loop4: detected capacity change from 0 to 512
[  806.813245][T10730] EXT4-fs (loop4): first meta block group too large: 8 (group descriptor block count 1)
[  807.168800][T10735] loop4: detected capacity change from 0 to 8
[  807.272259][T10735] SQUASHFS error: xz decompression failed, data probably corrupt
[  807.272302][T10735] SQUASHFS error: Failed to read block 0x108: -5
[  807.272324][T10735] SQUASHFS error: Unable to read metadata cache entry [106]
[  807.272345][T10735] SQUASHFS error: Unable to read inode 0x11f
[  807.428332][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.610086][T10598] team0: Port device team_slave_0 added
[  807.644268][T10598] team0: Port device team_slave_1 added
[  807.690393][T10740] loop4: detected capacity change from 0 to 16
[  807.713864][T10740] erofs (device loop4): mounted with root inode @ nid 36.
[  807.826664][T10742] loop8: detected capacity change from 0 to 128
[  807.851160][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.851188][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.851237][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.852218][T10742] FAT-fs (loop8): bogus number of FAT structure
[  807.852245][T10742] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  807.852273][T10742] FAT-fs (loop8): Can't find a valid FAT filesystem
[  807.872767][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.872793][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.872840][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.029719][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  808.029800][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  808.228997][T10598] hsr_slave_0: entered promiscuous mode
[  808.230213][T10598] hsr_slave_1: entered promiscuous mode
[  808.231042][T10598] debugfs: 'hsr0' already exists in 'hsr'
[  808.231071][T10598] Cannot create hsr debugfs directory
[  808.270887][T10748] loop3: detected capacity change from 0 to 512
[  808.341772][T10748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  808.399198][T10748] EXT4-fs (loop3): mount failed
[  808.656238][T10736] loop5: detected capacity change from 0 to 40427
[  808.685369][T10736] F2FS-fs (loop5): invalid crc value
[  809.013209][T10736] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  809.046153][T10736] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  809.074911][T10767] loop8: detected capacity change from 0 to 16
[  809.183781][T10767] erofs (device loop8): mounted with root inode @ nid 36.
[  809.542965][T10770] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  810.247627][T10786] set_capacity_and_notify: 2 callbacks suppressed
[  810.247658][T10786] loop8: detected capacity change from 0 to 512
[  810.271869][ T6459] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  810.280373][T10786] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  810.311878][T10786] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.591: bad orphan inode 131083
[  810.311928][T10786] loop8: lost filesystem error report for type 5 error -117
[  810.329218][T10786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.422336][ T6459] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  810.426282][ T6459] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  810.437230][ T6459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.437272][ T6459] usb 4-1: Product: syz
[  810.437299][ T6459] usb 4-1: Manufacturer: syz
[  810.437326][ T6459] usb 4-1: SerialNumber: syz
[  810.719991][ T9922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.093696][T10801] loop4: detected capacity change from 0 to 64
[  811.127868][ T6459] snd-usb-caiaq 4-1:1.0: invalid EPs
[  811.127902][ T6459] usb 4-1: unable to init card! (ret=-22)
[  811.128358][ T6459] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  811.199874][T10806] loop5: detected capacity change from 0 to 256
[  811.407880][T10801] hfs: get root inode failed
[  811.520938][T10598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  811.545533][T10598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  811.553910][T10598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  811.565946][T10810] loop5: detected capacity change from 0 to 512
[  811.586732][T10598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  811.600024][T10598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  811.623817][T10810] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  811.632036][T10810] EXT4-fs (loop5): couldn't read superblock of external journal
[  811.638921][T10598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  811.648358][T10598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  811.683693][T10598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  811.700212][T10813] loop8: detected capacity change from 0 to 64
[  811.885821][T10813] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  811.910599][T10598] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.980524][T10598] 8021q: adding VLAN 0 to HW filter on device team0
[  812.008761][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.008895][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.049329][T10822] loop4: detected capacity change from 0 to 1764
[  812.062833][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.062965][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  812.191158][T10822] iso9660: Corrupted directory entry in block 14 of inode 1920
[  812.677799][T10840] loop9: detected capacity change from 0 to 16
[  812.728961][T10840] erofs (device loop9): mounted with root inode @ nid 36.
[  812.822435][ T5636] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  812.861623][ T1213] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  812.972331][ T5636] usb 5-1: Using ep0 maxpacket: 32
[  812.974843][ T5636] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  813.016204][ T5636] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  813.016251][ T5636] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  813.016289][ T5636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  813.016324][ T5636] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  813.016392][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  813.016467][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.062293][   T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  813.097892][ T1213] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  813.113937][ T1213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  813.135977][ T5636] usb 5-1: config 0 descriptor??
[  813.141526][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.141565][ T1213] usb 9-1: Product: syz
[  813.141593][ T1213] usb 9-1: Manufacturer: syz
[  813.141618][ T1213] usb 9-1: SerialNumber: syz
[  813.205643][ T5762] usb 4-1: USB disconnect, device number 10
[  813.217119][   T44] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  813.238544][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.238583][   T44] usb 6-1: Product: syz
[  813.238603][   T44] usb 6-1: Manufacturer: syz
[  813.238624][   T44] usb 6-1: SerialNumber: syz
[  813.361148][ T7647] usb 5-1: USB disconnect, device number 4
[  813.751629][   T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  813.751713][   T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  813.756281][   T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  813.756355][   T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  813.803752][   T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  813.846354][   T44] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  813.878653][   T44] usb 6-1: USB disconnect, device number 5
[  813.904777][ T1213] snd-usb-caiaq 9-1:1.0: invalid EPs
[  813.904812][ T1213] usb 9-1: unable to init card! (ret=-22)
[  813.905257][ T1213] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  814.084763][T10863] loop9: detected capacity change from 0 to 24
[  814.103925][T10863] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  814.175881][T10863] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  814.239760][T10863] romfs: read error for inode 0x70040
[  814.304375][T10866] loop3: detected capacity change from 0 to 128
[  814.406493][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  816.652656][  T982] usb 9-1: USB disconnect, device number 7
[  816.681186][T10598] veth0_vlan: entered promiscuous mode
[  816.724084][T10598] veth1_vlan: entered promiscuous mode
[  816.887326][T10598] veth0_macvtap: entered promiscuous mode
[  816.928944][T10598] veth1_macvtap: entered promiscuous mode
[  816.988581][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.007788][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  817.052763][ T1373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  817.125139][ T5636] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  817.261535][ T1445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.272728][ T1373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  817.274716][ T1445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  817.283390][ T5636] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  817.317733][ T5636] usb 9-1: config 1 has an invalid interface number: 105 but max is 0
[  817.317778][ T5636] usb 9-1: config 1 has no interface number 0
[  817.317840][ T5636] usb 9-1: config 1 interface 105 has no altsetting 0
[  817.347146][ T5636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.347190][ T5636] usb 9-1: Product: syz
[  817.347217][ T5636] usb 9-1: Manufacturer: syz
[  817.347243][ T5636] usb 9-1: SerialNumber: syz
[  820.276246][ T1373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.276279][ T1373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.365162][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.365195][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.484297][T10894] loop5: detected capacity change from 0 to 16
[  820.485979][ T5636] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71
[  820.516857][ T5636] usb 9-1: USB disconnect, device number 8
[  820.543230][T10894] erofs (device loop5): mounted with root inode @ nid 36.
[  820.631724][ T6459] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[  820.795140][ T6459] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  820.797889][ T6459] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  820.837057][ T6459] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.837102][ T6459] usb 10-1: Product: syz
[  820.837129][ T6459] usb 10-1: Manufacturer: syz
[  820.837156][ T6459] usb 10-1: SerialNumber: syz
[  820.899460][T10899] loop2: detected capacity change from 0 to 8
[  820.925209][T10899] unable to read fragment index table
[  821.519333][ T6459] snd-usb-caiaq 10-1:1.0: invalid EPs
[  821.519368][ T6459] usb 10-1: unable to init card! (ret=-22)
[  821.519812][ T6459] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  821.714777][T10915] loop5: detected capacity change from 0 to 128
[  824.031476][ T7647] usb 10-1: USB disconnect, device number 9
[  824.199669][T10923] loop8: detected capacity change from 0 to 4096
[  824.512825][T10923] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  824.630329][T10929] loop9: detected capacity change from 0 to 32768
[  824.735972][T10929] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  824.812064][T10923] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  824.868402][T10933] loop5: detected capacity change from 0 to 2048
[  824.933239][T10933] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  825.802992][ T5621] Bluetooth: hci7: command 0x0406 tx timeout
[  825.803061][T10920] Bluetooth: hci5: command 0x0406 tx timeout
[  825.909355][T10940] loop3: detected capacity change from 0 to 16
[  826.001096][T10941] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  826.057926][T10940] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 143300)
[  826.271137][ T8619] ocfs2: Unmounting device (7,9) on (node local)
[  826.920177][T10955] loop8: detected capacity change from 0 to 512
[  826.983435][T10955] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  827.022680][T10958] loop3: detected capacity change from 0 to 16
[  827.033230][T10958] erofs (device loop3): mounted with root inode @ nid 36.
[  828.208847][T10966] autofs: Unknown parameter '00000000000000000000'
[  829.441226][T10973] capability: warning: `syz.5.636' uses deprecated v2 capabilities in a way that may be insecure
[  829.566991][T10980] loop9: detected capacity change from 0 to 256
[  829.690316][T10980] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  829.752669][ T5636] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  829.894037][T10987] openvswitch: netlink: Duplicate or invalid key (type 0).
[  829.913569][ T5636] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  829.915088][ T5636] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  829.919019][ T5636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.919059][ T5636] usb 9-1: Product: syz
[  829.919085][ T5636] usb 9-1: Manufacturer: syz
[  829.919111][ T5636] usb 9-1: SerialNumber: syz
[  830.279201][T10993] loop9: detected capacity change from 0 to 16
[  830.349476][T10993] erofs (device loop9): rootino(nid 36) is not a directory(i_mode 143300)
[  830.426588][T10989] loop4: detected capacity change from 0 to 32768
[  830.478449][T10989] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  830.591446][ T5919] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  830.745537][ T5919] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  830.747475][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  830.799205][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.799252][ T5919] usb 3-1: Product: syz
[  830.799280][ T5919] usb 3-1: Manufacturer: syz
[  830.799308][ T5919] usb 3-1: SerialNumber: syz
[  830.945459][ T5636] snd-usb-caiaq 9-1:1.0: invalid EPs
[  830.945493][ T5636] usb 9-1: unable to init card! (ret=-22)
[  830.945940][ T5636] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  832.031743][ T5762] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  832.127507][ T9524] ocfs2: Unmounting device (7,4) on (node local)
[  832.255349][ T5762] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  832.256860][ T5762] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  832.256909][ T5762] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  832.256945][ T5762] usb 10-1: config 220 has no interface number 2
[  832.257025][ T5762] usb 10-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56
[  832.257073][ T5762] usb 10-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[  832.257114][ T5762] usb 10-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  832.257164][ T5762] usb 10-1: config 220 interface 0 has no altsetting 0
[  832.257199][ T5762] usb 10-1: config 220 interface 76 has no altsetting 0
[  832.257234][ T5762] usb 10-1: config 220 interface 1 has no altsetting 0
[  832.273298][ T5762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.273342][ T5762] usb 10-1: Product: syz
[  832.273369][ T5762] usb 10-1: Manufacturer: syz
[  832.273395][ T5762] usb 10-1: SerialNumber: syz
[  832.484810][ T5919] snd-usb-caiaq 3-1:1.0: invalid EPs
[  832.484846][ T5919] usb 3-1: unable to init card! (ret=-22)
[  832.485298][ T5919] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  832.540999][T11000] loop3: detected capacity change from 0 to 32768
[  834.731545][T11000] read_mapping_page failed!
[  834.731566][T11000] diRead: diIAGRead returned -5
[  834.938579][ T5762] usb 10-1: selecting invalid altsetting 0
[  834.951833][ T5762] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  834.951886][ T5762] uvcvideo 10-1:220.0: No valid video chain found.
[  835.077972][ T5762] usb 10-1: selecting invalid altsetting 0
[  835.078016][ T5762] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  835.194566][ T5762] usb 10-1: USB disconnect, device number 10
[  835.201449][ T5636] usb 9-1: USB disconnect, device number 9
[  835.239306][ T1213] usb 3-1: USB disconnect, device number 2
[  835.439267][T11027] loop8: detected capacity change from 0 to 16
[  835.466281][T11027] erofs (device loop8): mounted with root inode @ nid 36.
[  836.051724][ T1213] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  836.202315][ T1213] usb 3-1: Using ep0 maxpacket: 32
[  836.204391][ T1213] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  836.207896][ T1213] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  836.207938][ T1213] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  836.207974][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.208022][ T1213] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  836.208088][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  836.208151][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.209562][T11038] loop9: detected capacity change from 0 to 512
[  836.402356][ T1213] usb 3-1: config 0 descriptor??
[  836.497447][T11039] loop5: detected capacity change from 0 to 736
[  836.586635][T11038] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 49)
[  836.773332][ T1213] usb 3-1: USB disconnect, device number 3
[  836.858473][T11039] rock: directory entry would overflow storage
[  836.858494][T11039] rock: sig=0x3b10, size=4, remaining=3
[  836.898362][T11023] loop3: detected capacity change from 0 to 40427
[  836.913438][T11023] F2FS-fs (loop3): Invalid log blocks per segment (1)
[  836.913475][T11023] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  836.913873][T11023] F2FS-fs (loop3): Image doesn't support compression
[  836.913902][T11023] F2FS-fs (loop3): build fault injection rate: 690
[  836.913928][T11023] F2FS-fs (loop3): build fault injection type: 0x35f7
[  836.925146][T11023] F2FS-fs (loop3): invalid crc value
[  837.020137][T11046] loop9: detected capacity change from 0 to 256
[  837.094310][T11046] FAT-fs (loop9): Directory bread(block 1285) failed
[  837.094360][T11046] FAT-fs (loop9): Directory bread(block 1286) failed
[  837.094398][T11046] FAT-fs (loop9): Directory bread(block 1287) failed
[  837.094594][T11046] FAT-fs (loop9): Directory bread(block 1288) failed
[  837.182880][T11046] FAT-fs (loop9): Directory bread(block 1285) failed
[  837.182930][T11046] FAT-fs (loop9): Directory bread(block 1286) failed
[  837.182970][T11046] FAT-fs (loop9): Directory bread(block 1287) failed
[  837.183011][T11046] FAT-fs (loop9): Directory bread(block 1288) failed
[  837.390437][T11053] netlink: zone id is out of range
[  837.390459][T11053] netlink: zone id is out of range
[  837.390472][T11053] netlink: zone id is out of range
[  837.390524][T11053] netlink: del zone limit has 4 unknown bytes
[  837.780173][T11023] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  837.783028][T11061] loop2: detected capacity change from 0 to 1024
[  837.857557][T11023] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  837.857599][T11023] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  837.857671][T11023] F2FS-fs (loop3): Start checkpoint disabled!
[  838.089288][T11023] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  838.091157][T11061] hfsplus: xattr search failed
[  838.143078][T11023] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  838.143119][T11023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  838.207115][T11069] loop9: detected capacity change from 0 to 256
[  838.648218][ T1494] kworker/u8:14: attempt to access beyond end of device
[  838.648218][ T1494] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  838.685232][ T1494] CPU: 0 UID: 0 PID: 1494 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.685289][ T1494] Tainted: [L]=SOFTLOCKUP
[  838.685303][ T1494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  838.685328][ T1494] Workqueue: writeback wb_workfn (flush-7:3)
[  838.685379][ T1494] Call Trace:
[  838.685392][ T1494]  <TASK>
[  838.685406][ T1494]  dump_stack_lvl+0x100/0x190
[  838.685463][ T1494]  f2fs_stop_checkpoint+0x5e6/0xb30
[  838.685512][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.685557][ T1494]  ? errseq_set+0xe3/0x150
[  838.685610][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.685664][ T1494]  f2fs_write_end_bio+0xef9/0x12d0
[  838.685728][ T1494]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  838.685781][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.685832][ T1494]  ? find_held_lock+0x2b/0x80
[  838.685887][ T1494]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  838.685932][ T1494]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  838.685969][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.686023][ T1494]  f2fs_write_end_io+0xc8/0x240
[  838.686072][ T1494]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  838.686125][ T1494]  bio_endio+0x7ba/0x9c0
[  838.686169][ T1494]  submit_bio_noacct+0x22a/0x2130
[  838.686236][ T1494]  f2fs_submit_write_bio+0x133/0x330
[  838.686287][ T1494]  __submit_merged_bio+0x330/0x7b0
[  838.686339][ T1494]  ? rcu_is_watching+0x13/0xc0
[  838.686399][ T1494]  __submit_merged_write_cond+0x3fe/0x510
[  838.686464][ T1494]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  838.686532][ T1494]  ? __pfx___might_resched+0x10/0x10
[  838.686591][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.686636][ T1494]  ? folio_clear_dirty_for_io+0x178/0x960
[  838.686700][ T1494]  f2fs_write_cache_pages+0x20e9/0x2630
[  838.686776][ T1494]  ? unwind_next_frame+0x3be/0x2090
[  838.686834][ T1494]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  838.686903][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.686941][ T1494]  ? unwind_next_frame+0x3c8/0x2090
[  838.686991][ T1494]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  838.687049][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687105][ T1494]  ? __lock_acquire+0x5c0/0x1f40
[  838.687159][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687201][ T1494]  ? lock_acquire+0x1d1/0x380
[  838.687236][ T1494]  ? __update_page_owner_handle+0x63/0x530
[  838.687312][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687352][ T1494]  ? find_held_lock+0x2b/0x80
[  838.687401][ T1494]  ? __page_table_check_zero+0x27f/0x410
[  838.687444][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687486][ T1494]  ? rcu_is_watching+0x13/0xc0
[  838.687535][ T1494]  f2fs_write_data_pages+0x799/0x16d0
[  838.687604][ T1494]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  838.687674][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687716][ T1494]  ? __lock_acquire+0x5c0/0x1f40
[  838.687754][ T1494]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  838.687814][ T1494]  do_writepages+0x278/0x600
[  838.687869][ T1494]  ? __pfx_do_writepages+0x10/0x10
[  838.687927][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.687972][ T1494]  ? reacquire_held_locks+0xdd/0x1f0
[  838.688014][ T1494]  ? writeback_sb_inodes+0x3e1/0x1c50
[  838.688058][ T1494]  __writeback_single_inode+0x164/0x1560
[  838.688097][ T1494]  ? wbc_attach_and_unlock_inode+0xf7/0x120
[  838.688162][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688211][ T1494]  ? __pfx___writeback_single_inode+0x10/0x10
[  838.688250][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688296][ T1494]  ? do_raw_spin_unlock+0x145/0x1e0
[  838.688347][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688402][ T1494]  writeback_sb_inodes+0x766/0x1c50
[  838.688463][ T1494]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  838.688500][ T1494]  ? __lock_acquire+0x5c0/0x1f40
[  838.688603][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688649][ T1494]  ? rcu_is_watching+0x13/0xc0
[  838.688701][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688747][ T1494]  ? queue_io+0x287/0x530
[  838.688808][ T1494]  wb_writeback+0x1c0/0xb50
[  838.688858][ T1494]  ? __pfx_wb_writeback+0x10/0x10
[  838.688894][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.688960][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.689006][ T1494]  ? mark_held_locks+0x40/0x70
[  838.689046][ T1494]  ? _raw_spin_unlock_irq+0x23/0x50
[  838.689094][ T1494]  wb_workfn+0x143/0xc80
[  838.689142][ T1494]  ? __pfx_wb_workfn+0x10/0x10
[  838.689183][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.689229][ T1494]  ? lock_acquire+0x1d1/0x380
[  838.689268][ T1494]  ? process_one_work+0xa2c/0x1b10
[  838.689327][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.689376][ T1494]  ? process_one_work+0x906/0x1b10
[  838.689433][ T1494]  ? process_one_work+0x906/0x1b10
[  838.689489][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.689545][ T1494]  process_one_work+0xac7/0x1b10
[  838.689623][ T1494]  ? __pfx_process_one_work+0x10/0x10
[  838.689684][ T1494]  ? lock_acquire+0x1d1/0x380
[  838.689737][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.689790][ T1494]  worker_thread+0x5ef/0xe50
[  838.689866][ T1494]  ? kthread+0x13a/0x450
[  838.689921][ T1494]  ? __pfx_worker_thread+0x10/0x10
[  838.689977][ T1494]  kthread+0x373/0x450
[  838.690027][ T1494]  ? __pfx_kthread+0x10/0x10
[  838.690082][ T1494]  ret_from_fork+0x730/0xd60
[  838.690124][ T1494]  ? __pfx_ret_from_fork+0x10/0x10
[  838.690166][ T1494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.690212][ T1494]  ? __switch_to+0x800/0x10f0
[  838.690262][ T1494]  ? __switch_to_asm+0x39/0x70
[  838.690299][ T1494]  ? __pfx_kthread+0x10/0x10
[  838.690355][ T1494]  ret_from_fork_asm+0x1a/0x30
[  838.690417][ T1494]  </TASK>
[  838.720302][ T1494] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  838.876160][   T44] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  839.135831][   T44] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  839.151049][T11079] loop4: detected capacity change from 0 to 256
[  839.156035][   T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.218411][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.218454][   T44] usb 3-1: Product: syz
[  839.218480][   T44] usb 3-1: Manufacturer: syz
[  839.218506][   T44] usb 3-1: SerialNumber: syz
[  839.302753][ T1213] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[  839.493640][ T1213] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  839.495014][ T1213] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.527964][ T1213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.528008][ T1213] usb 10-1: Product: syz
[  839.528037][ T1213] usb 10-1: Manufacturer: syz
[  839.528064][ T1213] usb 10-1: SerialNumber: syz
[  839.834844][T11059] loop5: detected capacity change from 0 to 32768
[  839.919747][   T44] snd-usb-caiaq 3-1:1.0: invalid EPs
[  839.919782][   T44] usb 3-1: unable to init card! (ret=-22)
[  839.920244][   T44] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  840.229486][ T1213] snd-usb-caiaq 10-1:1.0: invalid EPs
[  840.229519][ T1213] usb 10-1: unable to init card! (ret=-22)
[  840.229975][ T1213] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  841.137201][T11088] loop4: detected capacity change from 0 to 32768
[  841.153271][T11108] loop3: detected capacity change from 0 to 64
[  843.688566][ T5919] usb 3-1: USB disconnect, device number 4
[  843.806675][   T44] usb 10-1: USB disconnect, device number 11
[  843.911661][T11118] loop4: detected capacity change from 0 to 1764
[  843.940872][T11122] loop2: detected capacity change from 0 to 512
[  844.038489][T11122] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size
[  844.344070][T11130] loop9: detected capacity change from 0 to 2048
[  844.373723][T11132] loop2: detected capacity change from 0 to 1024
[  844.586018][T11118] iso9660: Corrupted directory entry in block 2 of inode 1920
[  845.012367][T11140] loop5: detected capacity change from 0 to 512
[  845.028859][T11140] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  845.067285][T11140] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.677: casefold flag without casefold feature
[  845.067338][T11140] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  845.071374][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  845.071408][    C1] EXT4-fs (loop5): initial error at time 1790908711: ext4_orphan_get:1403: inode 15
[  845.071483][    C1] EXT4-fs (loop5): last error at time 1790908711: ext4_orphan_get:1403: inode 15
[  845.079163][T11140] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.677: couldn't read orphan inode 15 (err -117)
[  845.079213][T11140] loop5: lost filesystem error report for type 5 error -117
[  845.156363][T11140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  845.235833][T11140] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #2: block 4: comm syz.5.677: lblock 0 mapped to illegal pblock 4 (length 1)
[  846.948288][ T9927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.902531][ T5636] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  848.095438][ T5636] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  848.096858][ T5636] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  848.131006][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.131049][ T5636] usb 3-1: Product: syz
[  848.131077][ T5636] usb 3-1: Manufacturer: syz
[  848.131104][ T5636] usb 3-1: SerialNumber: syz
[  848.399928][T11172] loop8: detected capacity change from 0 to 16
[  848.414109][T11172] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  848.778513][ T5636] snd-usb-caiaq 3-1:1.0: invalid EPs
[  848.778547][ T5636] usb 3-1: unable to init card! (ret=-22)
[  848.779008][ T5636] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  849.141931][ T5762] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  849.307635][ T5762] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  849.309448][ T5762] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  849.343281][ T5762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.343326][ T5762] usb 9-1: Product: syz
[  849.343353][ T5762] usb 9-1: Manufacturer: syz
[  849.343379][ T5762] usb 9-1: SerialNumber: syz
[  852.269667][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9
[  852.273270][T11197] loop3: detected capacity change from 0 to 16
[  852.282795][T11197] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  852.408440][T10542] udevd[10542]: incorrect cramfs checksum on /dev/loop3
[  852.448163][ T7647] usb 3-1: USB disconnect, device number 5
[  852.493985][ T5762] snd-usb-caiaq 9-1:1.0: can't set alt interface.
[  852.494020][ T5762] usb 9-1: unable to init card! (ret=-5)
[  852.494408][ T5762] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  852.498104][ T5762] usb 9-1: USB disconnect, device number 10
[  852.542831][T10542] udevd[10542]: incorrect cramfs checksum on /dev/loop3
[  852.672756][T11210] loop8: detected capacity change from 0 to 1024
[  852.679941][T11210] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  852.744363][T11210] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.693: lblock 2 mapped to illegal pblock 2 (length 1)
[  852.744434][T11210] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  852.745826][T11210] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  852.745881][T11210] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 48: comm syz.8.693: lblock 0 mapped to illegal pblock 48 (length 1)
[  852.745935][T11210] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  852.746871][T11210] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  852.746901][T11210] EXT4-fs error (device loop8): ext4_acquire_dquot:7067: comm syz.8.693: Failed to acquire dquot type 0
[  852.746939][T11210] loop8: lost filesystem error report for type 5 error -117
[  852.751251][T11210] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  852.751349][    C0] EXT4-fs (loop8): error count since last fsck: 3
[  852.751377][    C0] EXT4-fs (loop8): initial error at time 1790908719: ext4_map_blocks:790: inode 3: block 2
[  852.751446][    C0] EXT4-fs (loop8): last error at time 1790908719: ext4_acquire_dquot:7067
[  852.885987][T11210] loop8: lost filesystem error report for type 5 error -117
[  852.890350][T11210] EXT4-fs error (device loop8): ext4_evict_inode:269: inode #11: comm syz.8.693: mark_inode_dirty error
[  852.890398][T11210] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  852.890689][T11210] EXT4-fs warning (device loop8): ext4_evict_inode:271: couldn't mark inode dirty (err -117)
[  852.890806][T11210] EXT4-fs (loop8): 1 orphan inode deleted
[  852.925104][T10970] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1)
[  852.925166][T10970] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  852.949574][T11210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  852.986595][T10970] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  852.986715][T10970] EXT4-fs error (device loop8): ext4_release_dquot:7103: comm kworker/u8:20: Failed to release dquot type 0
[  854.878892][ T9922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.903364][   T59] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  854.903450][   T59] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  854.906676][   T59] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  854.906727][   T59] EXT4-fs error (device loop8): ext4_release_dquot:7103: comm kworker/u8:4: Failed to release dquot type 0
[  854.906765][   T59] loop8: lost filesystem error report for type 5 error -117
[  854.989445][ T9922] EXT4-fs error (device loop8): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0
[  854.989498][ T9922] loop8: lost filesystem error report for type 5 error -117
[  855.030071][ T9922] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  855.030113][ T9922] loop8: lost filesystem error report for type 5 error -117
[  855.049639][ T9922] EXT4-fs error (device loop8): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  855.049687][ T9922] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  855.053454][ T9922] EXT4-fs error (device loop8): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0
[  855.053502][ T9922] loop8: lost filesystem error report for type 5 error -117
[  855.159546][T11222] loop9: detected capacity change from 0 to 4096
[  855.256038][T11214] loop4: detected capacity change from 0 to 32768
[  855.374652][T11225] loop2: detected capacity change from 0 to 1764
[  855.431237][T11222] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  855.437918][T11222] ntfs3(loop9): Failed to load $Extend (-22).
[  855.437950][T11222] ntfs3(loop9): Failed to initialize $Extend.
[  855.479956][T11214] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  855.536851][T11214] JBD2: Ignoring recovery information on journal
[  855.584958][T11232] loop8: detected capacity change from 0 to 16
[  855.655980][T11232] erofs (device loop8): mounted with root inode @ nid 36.
[  855.669142][T11225] iso9660: Corrupted directory entry in block 14 of inode 1920
[  855.781893][T11214] JBD2: journal reset failed
[  855.781913][T11214] (syz.4.694,11214,0):ocfs2_journal_load:1163 ERROR: Failed to load journal!
[  855.781954][T11214] (syz.4.694,11214,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4
[  856.208830][ T1494] ntfs3(loop9): ino=9, ntfs3_write_inode failed, -22.
[  856.210244][ T8619] ntfs3(loop9): ino=9, ntfs_sync_fs failed, -22.
[  856.230683][T11240] loop2: detected capacity change from 0 to 2048
[  856.375883][T11240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  856.695057][T11247] loop9: detected capacity change from 0 to 16
[  856.722520][T11242] loop8: detected capacity change from 0 to 32768
[  856.765496][T11247] erofs (device loop9): mounted with root inode @ nid 36.
[  856.787860][T11242] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  856.906995][T11247] erofs (device loop9): not enough plain data on disk @ la 4097 of nid 89
[  856.907036][T11247] erofs (device loop9): readahead error at folio 2 @ nid 89
[  856.907311][T11247] syz.9.704: attempt to access beyond end of device
[  856.907311][T11247] loop9: rw=524288, sector=8, nr_sectors = 16 limit=16
[  857.185892][T11247] erofs (device loop9): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  857.185955][T11247] erofs (device loop9): read error -117 @ 0 of nid 89
[  857.952027][ T1213] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  858.172244][ T1213] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  858.173738][ T1213] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  858.180134][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.180173][ T1213] usb 3-1: Product: syz
[  858.180199][ T1213] usb 3-1: Manufacturer: syz
[  858.180226][ T1213] usb 3-1: SerialNumber: syz
[  858.295644][T11258] loop4: detected capacity change from 0 to 256
[  858.352499][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12
[  858.392560][ T9922] ocfs2: Unmounting device (7,8) on (node local)
[  863.363176][ T1213] snd-usb-caiaq 3-1:1.0: can't set alt interface.
[  863.363206][ T1213] usb 3-1: unable to init card! (ret=-5)
[  863.363548][ T1213] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  864.935345][ T5762] usb 3-1: USB disconnect, device number 6
[  865.597077][T11283] loop9: detected capacity change from 0 to 16
[  865.671242][T11283] erofs (device loop9): mounted with root inode @ nid 36.
[  865.684813][T11284] netlink: 'syz.3.697': attribute type 1 has an invalid length.
[  865.684843][T11284] netlink: 244 bytes leftover after parsing attributes in process `syz.3.697'.
[  865.684868][T11284] NCSI netlink: No device for ifindex 0
[  865.770880][T11283] syz.9.711: attempt to access beyond end of device
[  865.770880][T11283] loop9: rw=8388608, sector=34359736320, nr_sectors = 8 limit=16
[  865.828487][T11286] geneve2: entered allmulticast mode
[  866.292030][T11293] loop3: detected capacity change from 0 to 1024
[  866.404937][T11298] loop2: detected capacity change from 0 to 1764
[  866.405220][T11293] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  866.405284][T11293] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  866.405317][T11293] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.716: Failed to acquire dquot type 0
[  866.405356][T11293] loop3: lost filesystem error report for type 5 error -117
[  866.411337][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  866.411368][    C1] EXT4-fs (loop3): initial error at time 1790908732: ext4_acquire_dquot:7067
[  866.411405][    C1] EXT4-fs (loop3): last error at time 1790908732: ext4_acquire_dquot:7067
[  866.434485][T11298] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  866.471264][T11298] iso9660: Corrupted directory entry in block 2 of inode 1920
[  866.504430][T11293] EXT4-fs error (device loop3): mb_free_blocks:2046: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  866.563580][T11293] EXT4-fs (loop3): 1 truncate cleaned up
[  866.589247][T11293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.642103][T11293] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  866.642262][T11293] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  866.642296][T11293] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.716: Failed to acquire dquot type 0
[  866.909035][ T7043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.986199][T11310] loop9: detected capacity change from 0 to 65
[  867.059827][T11310] BFS-fs: bfs_fill_super(): NOTE: filesystem loop9 was created with 512 inodes, the real maximum is 511, mounting anyway
[  867.457189][T11307] loop2: detected capacity change from 0 to 32768
[  867.547408][T11307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  867.582769][ T1213] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  869.478999][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  869.479056][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  869.542891][ T1213] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  869.796889][ T1213] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  869.817897][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.817939][ T1213] usb 6-1: Product: syz
[  869.817965][ T1213] usb 6-1: Manufacturer: syz
[  869.817991][ T1213] usb 6-1: SerialNumber: syz
[  870.275226][T11328] loop9: detected capacity change from 0 to 256
[  870.473579][ T1213] snd-usb-caiaq 6-1:1.0: can't set alt interface.
[  870.473615][ T1213] usb 6-1: unable to init card! (ret=-5)
[  870.473993][ T1213] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  870.478659][ T1213] usb 6-1: USB disconnect, device number 6
[  870.712909][T10598] ocfs2: Unmounting device (7,2) on (node local)
[  870.850700][T11332] loop5: detected capacity change from 0 to 2048
[  870.992933][T11333] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  871.070935][T11332] syz.5.726: attempt to access beyond end of device
[  871.070935][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.070995][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.095626][T11332] syz.5.726: attempt to access beyond end of device
[  871.095626][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.095683][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.095786][T11332] syz.5.726: attempt to access beyond end of device
[  871.095786][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.095834][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.095940][T11332] syz.5.726: attempt to access beyond end of device
[  871.095940][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.095988][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.096084][T11332] syz.5.726: attempt to access beyond end of device
[  871.096084][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.096132][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.097045][T11332] syz.5.726: attempt to access beyond end of device
[  871.097045][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.097095][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.097192][T11332] syz.5.726: attempt to access beyond end of device
[  871.097192][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.097240][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.097360][T11332] syz.5.726: attempt to access beyond end of device
[  871.097360][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.097409][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.097505][T11332] syz.5.726: attempt to access beyond end of device
[  871.097505][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.097553][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.100156][   T30] audit: type=1800 audit(1790908737.445:44): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.726" name="file2" dev="loop5" ino=16 res=0 errno=0
[  871.100206][T11332] syz.5.726: attempt to access beyond end of device
[  871.100206][T11332] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  871.100249][T11332] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  871.100336][T11332] NILFS (loop5): error -5 truncating bmap (ino=16)
[  871.459606][T11342] loop8: detected capacity change from 0 to 64
[  872.060969][T11349] loop4: detected capacity change from 0 to 1024
[  872.146617][T11354] loop9: detected capacity change from 0 to 256
[  872.168790][T11349] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  872.168862][T11349] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  872.168895][T11349] EXT4-fs error (device loop4): ext4_acquire_dquot:7067: comm syz.4.714: Failed to acquire dquot type 0
[  872.168946][T11349] loop4: lost filesystem error report for type 5 error -117
[  872.172803][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  872.172836][    C1] EXT4-fs (loop4): initial error at time 1790908738: ext4_acquire_dquot:7067
[  872.172876][    C1] EXT4-fs (loop4): last error at time 1790908738: ext4_acquire_dquot:7067
[  872.247777][T11349] EXT4-fs error (device loop4): mb_free_blocks:2046: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  872.309125][T11349] EXT4-fs (loop4): 1 truncate cleaned up
[  872.335764][T11349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.359714][T11354] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  872.434384][T11354] exFAT-fs (loop9): valid_size(562949953421322) is greater than size(10)
[  872.436761][T11348] loop8: detected capacity change from 0 to 4096
[  872.508765][T11349] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  872.508909][T11349] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  872.508944][T11349] EXT4-fs error (device loop4): ext4_acquire_dquot:7067: comm syz.4.714: Failed to acquire dquot type 0
[  872.665146][ T9524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.735700][T11348] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  872.823191][T11360] loop5: detected capacity change from 0 to 16
[  872.850171][T11360] erofs (device loop5): mounted with root inode @ nid 36.
[  873.315118][T11348] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  873.572287][T11367] loop4: detected capacity change from 0 to 512
[  873.591888][T11367] EXT4-fs: Ignoring removed mblk_io_submit option
[  873.660327][T11367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  873.660464][T11367] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  873.730519][T11367] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.735: corrupted xattr block 33: invalid header
[  873.758012][T11369] loop5: detected capacity change from 0 to 2048
[  873.813033][T11369] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=16307, location=16307
[  873.844133][T11369] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  873.860752][T11367] fscrypt (loop4, inode 15): Error -117 getting encryption context
[  873.875678][T11369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  874.010537][T11376] loop8: detected capacity change from 0 to 256
[  874.063622][T11376] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  874.063660][T11376] FAT-fs (loop8): Filesystem has been set read-only
[  874.198395][ T9524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.391390][ T5763] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  878.105446][ T5763] usb 10-1: device descriptor read/all, error -71
[  878.287634][T11403] loop4: detected capacity change from 0 to 136
[  878.312666][T11403] Attempt to read inode for relocated directory
[  878.382277][T11406] loop9: detected capacity change from 0 to 64
[  878.468185][T11406] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  878.528809][T11409] loop3: detected capacity change from 0 to 8
[  878.878305][T11415] loop2: detected capacity change from 0 to 1024
[  878.909974][T11415] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  878.968295][T11415] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.749: lblock 2 mapped to illegal pblock 2 (length 1)
[  878.968360][T11415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  878.969407][T11415] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  878.969468][T11415] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.749: lblock 0 mapped to illegal pblock 48 (length 1)
[  878.969523][T11415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  878.971351][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  878.971381][    C0] EXT4-fs (loop2): initial error at time 1790908745: ext4_map_blocks:790: inode 3: block 2
[  878.971445][    C0] EXT4-fs (loop2): last error at time 1790908745: ext4_map_blocks:790: inode 3: block 48
[  878.972253][T11415] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  878.972283][T11415] EXT4-fs error (device loop2): ext4_acquire_dquot:7067: comm syz.2.749: Failed to acquire dquot type 0
[  878.972322][T11415] loop2: lost filesystem error report for type 5 error -117
[  878.978088][T11415] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  878.978123][T11415] loop2: lost filesystem error report for type 5 error -117
[  878.978442][T11415] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.749: mark_inode_dirty error
[  878.978485][T11415] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.978727][T11415] EXT4-fs warning (device loop2): ext4_evict_inode:271: couldn't mark inode dirty (err -117)
[  878.978836][T11415] EXT4-fs (loop2): 1 orphan inode deleted
[  878.983113][T11415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  879.031513][ T1445] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  879.056877][ T1445] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  879.056930][ T1445] EXT4-fs error (device loop2): ext4_release_dquot:7103: comm kworker/u8:12: Failed to release dquot type 0
[  879.152189][T11415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.156600][T11415] EXT4-fs error (device loop2): __ext4_get_inode_loc:4915: comm syz.2.749: Invalid inode table block 1 in block_group 0
[  879.156646][T11415] loop2: lost filesystem error report for type 5 error -117
[  879.158491][T11415] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  879.158525][T11415] loop2: lost filesystem error report for type 5 error -117
[  879.158794][T11415] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz.2.749: mark_inode_dirty error
[  879.158837][T11415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  879.164439][T11415] EXT4-fs error (device loop2): __ext4_get_inode_loc:4915: comm syz.2.749: Invalid inode table block 1 in block_group 0
[  879.164487][T11415] loop2: lost filesystem error report for type 5 error -117
[  881.297999][T11431] loop4: detected capacity change from 0 to 64
[  881.438159][T11431] syz.4.754: attempt to access beyond end of device
[  881.438159][T11431] loop4: rw=8388608, sector=3584, nr_sectors = 2 limit=64
[  881.438402][T11431] Buffer I/O error on dev loop4, logical block 1792, async page read
[  881.479579][T11431] syz.4.754: attempt to access beyond end of device
[  881.479579][T11431] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  881.479630][T11431] Buffer I/O error on dev loop4, logical block 56576, async page read
[  882.113903][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13
[  882.172762][ T5763] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  882.201523][  T982] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  882.211517][   T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  882.352505][  T982] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  882.353855][  T982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  882.356009][ T5763] usb 4-1: Using ep0 maxpacket: 8
[  882.356525][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.356565][  T982] usb 5-1: Product: syz
[  882.356591][  T982] usb 5-1: Manufacturer: syz
[  882.356618][  T982] usb 5-1: SerialNumber: syz
[  882.373187][ T5763] usb 4-1: unable to get BOS descriptor or descriptor too short
[  882.373246][ T5763] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  882.377417][ T5763] usb 4-1: config 4 has an invalid interface number: 112 but max is 0
[  882.377461][ T5763] usb 4-1: config 4 has no interface number 0
[  882.377505][ T5763] usb 4-1: config 4 interface 112 has no altsetting 0
[  882.380152][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.380190][ T5763] usb 4-1: Product: syz
[  882.380216][ T5763] usb 4-1: Manufacturer: syz
[  882.380243][ T5763] usb 4-1: SerialNumber: syz
[  882.467185][   T44] usb 3-1: Using ep0 maxpacket: 8
[  882.478204][   T44] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  882.488757][   T44] usb 3-1: config index 0 descriptor too short (expected 30482, got 18)
[  882.488799][   T44] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  882.488837][   T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101
[  882.490837][   T44] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  882.490877][   T44] usb 3-1: Product: syz
[  882.490903][   T44] usb 3-1: Manufacturer: syz
[  882.557597][   T44] usb 3-1: config 0 descriptor??
[  882.609704][   T44] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  882.637726][   T44] usb 3-1: Detected FT2232C/D
[  883.021527][   T44] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  883.033935][ T5763] pcwd_usb: The device isn't a Human Interface Device
[  883.048131][ T5763] usb 4-1: USB disconnect, device number 11
[  883.065372][   T44] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  883.105378][   T44] usb 3-1: USB disconnect, device number 7
[  883.144893][   T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  883.148212][   T44] ftdi_sio 3-1:0.0: device disconnected
[  883.309413][  T982] snd-usb-caiaq 5-1:1.0: invalid EPs
[  883.309448][  T982] usb 5-1: unable to init card! (ret=-22)
[  883.309919][  T982] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  883.782180][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14
[  885.833318][   T44] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  885.879400][T11477] netlink: 'syz.3.762': attribute type 1 has an invalid length.
[  885.929375][T11480] loop9: detected capacity change from 0 to 16
[  885.983739][T11480] erofs (device loop9): mounted with root inode @ nid 36.
[  886.009126][T11480] erofs (device loop9): corrupted dir block 0 @ nid 36
[  886.019632][ T5763] usb 5-1: USB disconnect, device number 5
[  886.098248][   T44] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  886.117890][   T44] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  886.134470][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.134514][   T44] usb 9-1: Product: syz
[  886.134542][   T44] usb 9-1: Manufacturer: syz
[  886.134568][   T44] usb 9-1: SerialNumber: syz
[  886.677083][T11493] loop9: detected capacity change from 0 to 16
[  886.713478][T11493] erofs (device loop9): mounted with root inode @ nid 36.
[  886.760893][T11493] erofs (device loop9): invalid h_shared_count 83 @ nid 46
[  886.943188][   T44] snd-usb-caiaq 9-1:1.0: invalid EPs
[  886.943223][   T44] usb 9-1: unable to init card! (ret=-22)
[  886.943669][   T44] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  887.280142][T11501] loop5: detected capacity change from 0 to 256
[  887.297588][T11504] loop9: detected capacity change from 0 to 16
[  887.305379][T11504] erofs (device loop9): mounted with root inode @ nid 36.
[  887.519107][T11504] syz.9.769: attempt to access beyond end of device
[  887.519107][T11504] loop9: rw=524288, sector=671088648, nr_sectors = 8 limit=16
[  887.519637][T11504] syz.9.769: attempt to access beyond end of device
[  887.519637][T11504] loop9: rw=0, sector=671088648, nr_sectors = 8 limit=16
[  887.519797][T11504] erofs (device loop9): read error -5 @ 0 of nid 89
[  887.520046][   T30] audit: type=1800 audit(1790908753.865:45): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.769" name="file3" dev="loop9" ino=89 res=0 errno=0
[  888.005077][T11509] loop5: detected capacity change from 0 to 512
[  888.014010][T11509] EXT4-fs: Ignoring removed i_version option
[  888.109060][T11509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  888.109187][T11509] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  888.375685][ T5763] usb 9-1: USB disconnect, device number 11
[  888.435671][ T9927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.481180][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15
[  890.864958][T11531] loop3: detected capacity change from 0 to 1024
[  890.897003][T11531] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  890.934450][T11531] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.776: lblock 2 mapped to illegal pblock 2 (length 1)
[  890.934515][T11531] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  890.934829][T11531] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  890.934884][T11531] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.776: lblock 0 mapped to illegal pblock 48 (length 1)
[  890.934946][T11531] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  890.936129][T11531] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  890.936161][T11531] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.776: Failed to acquire dquot type 0
[  890.936200][T11531] loop3: lost filesystem error report for type 5 error -117
[  890.936554][T11531] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  890.936588][T11531] loop3: lost filesystem error report for type 5 error -117
[  890.936905][T11531] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.776: mark_inode_dirty error
[  890.936957][T11531] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  890.937210][T11531] EXT4-fs warning (device loop3): ext4_evict_inode:271: couldn't mark inode dirty (err -117)
[  890.937319][T11531] EXT4-fs (loop3): 1 orphan inode deleted
[  891.070339][ T1282] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  891.070401][ T1282] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  891.070783][ T1282] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  891.070834][ T1282] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:8: Failed to release dquot type 0
[  891.070873][ T1282] loop3: lost filesystem error report for type 5 error -117
[  891.077770][T11531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  891.103016][ T7647] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  891.264244][ T7647] usb 6-1: Using ep0 maxpacket: 16
[  891.279355][ T7647] usb 6-1: unable to get BOS descriptor or descriptor too short
[  891.279416][ T7647] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  891.283609][ T7647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  891.283646][ T7647] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  891.283710][ T7647] usb 6-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0
[  891.297623][ T7647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.297664][ T7647] usb 6-1: Product: syz
[  891.297690][ T7647] usb 6-1: Manufacturer: syz
[  891.297717][ T7647] usb 6-1: SerialNumber: syz
[  891.331907][ T1494] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:14: lblock 2 mapped to illegal pblock 2 (length 1)
[  891.494068][ T1494] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  891.494123][ T1494] EXT4-fs error (device loop3): ext4_write_dquot:7047: comm kworker/u8:14: Failed to commit dquot type 0
[  891.535340][ T1494] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  891.535461][ T1494] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  891.584416][ T1494] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  891.584478][ T1494] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:14: Failed to release dquot type 0
[  891.624033][ T7647] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  891.624093][ T7647] cdc_ncm 6-1:1.0: bind() failure
[  891.667533][ T7647] usb 6-1: USB disconnect, device number 7
[  891.744384][ T7043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  891.780236][ T7043] EXT4-fs error (device loop3): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0
[  891.780288][ T7043] loop3: lost filesystem error report for type 5 error -117
[  891.780646][ T7043] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  891.780681][ T7043] loop3: lost filesystem error report for type 5 error -117
[  891.786216][ T7043] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  891.786260][ T7043] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  891.790754][ T7043] EXT4-fs error (device loop3): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0
[  891.790801][ T7043] loop3: lost filesystem error report for type 5 error -117
[  894.131470][ T7647] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  894.253169][T11550] loop8: detected capacity change from 0 to 32768
[  894.292675][ T7647] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  894.295605][ T7647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  894.306705][ T7647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.306748][ T7647] usb 3-1: Product: syz
[  894.306805][ T7647] usb 3-1: Manufacturer: syz
[  894.306831][ T7647] usb 3-1: SerialNumber: syz
[  894.346750][T11550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.784 (11550)
[  894.449778][T11550] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  894.449830][T11550] BTRFS info (device loop8): using sha256 checksum algorithm
[  894.473391][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  894.476147][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  894.476499][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  894.477869][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  894.480054][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  894.480352][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  894.480653][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  894.544762][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  894.545591][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  894.545962][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  894.547716][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  894.548034][T11550] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  894.549739][T11550] BTRFS error (device loop8): open_ctree failed: -ENOMEM
[  895.078108][ T7647] snd-usb-caiaq 3-1:1.0: invalid EPs
[  895.078142][ T7647] usb 3-1: unable to init card! (ret=-22)
[  895.078589][ T7647] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  898.143260][   T25] usb 3-1: USB disconnect, device number 8
[  898.908292][T11615] loop5: detected capacity change from 0 to 16
[  898.976155][T11615] erofs (device loop5): mounted with root inode @ nid 36.
[  898.976394][T11616] loop2: detected capacity change from 0 to 128
[  899.169705][T11619] loop4: detected capacity change from 0 to 64
[  899.283853][T11616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  899.284342][T11616] hpfs: filesystem error: improperly stopped
[  899.284371][T11616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  899.284396][T11616] hpfs: You really don't want any checks? You are crazy...
[  899.284414][T11616] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  899.284441][T11616] hpfs: code page support is disabled
[  899.295075][T11616] hpfs: hpfs_map_4sectors(): unaligned read
[  899.295336][T11616] hpfs: hpfs_map_4sectors(): unaligned read
[  899.295354][T11616] hpfs: filesystem error: unable to find root dir
[  901.769669][T11635] geneve2: entered allmulticast mode
[  902.222981][T11646] loop4: detected capacity change from 0 to 2048
[  902.254751][T11646] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  902.277789][T11646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  902.459105][   T30] audit: type=1800 audit(1790908768.805:46): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.806" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  904.712081][ T5624] Bluetooth: hci4: command tx timeout
[  904.875095][ T9438] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  904.980905][T11669] loop4: detected capacity change from 0 to 256
[  905.021377][ T9438] usb 4-1: Using ep0 maxpacket: 16
[  905.022286][ T9438] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  905.023663][ T9438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7
[  905.023717][ T9438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024
[  905.026780][ T9438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.026820][ T9438] usb 4-1: Product: syz
[  905.026846][ T9438] usb 4-1: Manufacturer: syz
[  905.026874][ T9438] usb 4-1: SerialNumber: syz
[  905.101729][ T9438] usb 4-1: config 0 descriptor??
[  905.119042][ T9438] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  905.119101][ T9438] em28xx 4-1:0.0: DVB interface 0 found: isoc
[  905.327752][T11672] loop9: detected capacity change from 0 to 256
[  905.420448][T11672] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  905.435638][ T9438] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  905.540377][ T9438] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  905.540458][ T9438] em28xx 4-1:0.0: board has no eeprom
[  905.621414][ T9438] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  905.621466][ T9438] em28xx 4-1:0.0: dvb set to isoc mode.
[  905.629162][  T982] em28xx 4-1:0.0: Binding DVB extension
[  905.666977][ T9438] usb 4-1: USB disconnect, device number 12
[  905.669120][ T9438] em28xx 4-1:0.0: Disconnecting em28xx
[  907.626008][ T9574] Bluetooth: hci4: command 0x0406 tx timeout
[  907.938611][  T982] em28xx 4-1:0.0: Registering input extension
[  907.948246][ T9438] em28xx 4-1:0.0: Closing input extension
[  908.064037][T11690] loop9: detected capacity change from 0 to 16
[  908.109546][ T9438] em28xx: Freeing device
[  908.116555][T11686] loop3: detected capacity change from 0 to 1764
[  908.132000][T11690] erofs (device loop9): mounted with root inode @ nid 36.
[  908.196227][T11690] erofs (device loop9): xattr_isize 12 of nid 86 is not supported yet
[  908.386867][T11686] syz.3.817: attempt to access beyond end of device
[  908.386867][T11686] loop3: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764
[  908.386921][T11686] Buffer I/O error on dev loop3, logical block 1795162143, async page read
[  908.453833][T11686] syz.3.817: attempt to access beyond end of device
[  908.453833][T11686] loop3: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764
[  908.453889][T11686] Buffer I/O error on dev loop3, logical block 1795162143, async page read
[  908.454179][   T30] audit: type=1800 audit(1790908774.805:47): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.817" name="file0" dev="loop3" ino=1923 res=0 errno=0
[  909.025186][T11709] loop3: detected capacity change from 0 to 64
[  909.280746][T11712] loop9: detected capacity change from 0 to 1024
[  909.327213][T11712] EXT4-fs (loop9): orphan cleanup on readonly fs
[  909.384023][T11712] EXT4-fs (loop9): 1 truncate cleaned up
[  909.431931][T11712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  911.579339][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.051992][ T5624] Bluetooth: hci4: unexpected event for opcode 0x2005
[  912.421682][   T44] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  912.533752][T11741] loop4: detected capacity change from 0 to 16
[  912.551508][T11741] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  912.604476][   T44] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[  912.609892][T10699] udevd[10699]: incorrect cramfs checksum on /dev/loop4
[  912.619104][   T44] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7
[  912.633068][   T44] usb 10-1: string descriptor 0 read error: -22
[  912.633231][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.794642][T10699] udevd[10699]: incorrect cramfs checksum on /dev/loop4
[  912.819921][   T44] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  912.888550][T11745] loop2: detected capacity change from 0 to 256
[  912.956005][   T44] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2
[  913.209835][   T44] usb 10-1: USB disconnect, device number 14
[  913.480020][T11750] loop4: detected capacity change from 0 to 4096
[  913.512635][T11750] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  913.676632][T11755] loop5: detected capacity change from 0 to 256
[  913.693411][T11750] ntfs3(loop4): ino=19, mi_enum_attr
[  913.708178][T11755] exFAT-fs (loop5): invalid fs_name
[  913.708200][T11755] exFAT-fs (loop5): failed to read boot sector
[  913.708217][T11755] exFAT-fs (loop5): failed to recognize exfat type
[  914.240265][T11747] loop2: detected capacity change from 0 to 32768
[  914.396835][T11747] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  914.657083][T11747] XFS (loop2): Ending clean mount
[  914.783123][T11780] loop8: detected capacity change from 0 to 1024
[  914.906131][T10598] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  918.812093][ T7647] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  919.046800][ T7647] usb 6-1: device descriptor read/all, error -71
[  919.811102][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.847'.
[  919.811142][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.9.847'.
[  919.811171][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.9.847'.
[  922.498016][T11838] netlink: 'syz.9.854': attribute type 1 has an invalid length.
[  922.964946][T11841] loop9: detected capacity change from 0 to 4096
[  923.125200][T11841] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  923.348436][T11841] ntfs3(loop9): ino=21, The size of extended attributes must not exceed 64KiB
[  925.593912][T11857] loop3: detected capacity change from 0 to 2048
[  925.627662][T11857] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  925.802231][ T5624] Bluetooth: latency 65520 > 499
[  925.875402][T11859] udevd[11859]: incorrect nilfs2 checksum on /dev/loop3
[  925.991026][T11868] comedi comedi1: 8255: I/O port conflict (0x4,4)
[  926.085892][T11859] udevd[11859]: incorrect nilfs2 checksum on /dev/loop3
[  926.267528][T11857] syz.3.857: attempt to access beyond end of device
[  926.267528][T11857] loop3: rw=8388608, sector=3120, nr_sectors = 2 limit=2048
[  926.295679][T11857] Buffer I/O error on dev loop3, logical block 1560, async page read
[  926.352984][   T30] audit: type=1800 audit(1790908792.705:48): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.857" name="file2" dev="loop3" ino=16 res=0 errno=0
[  926.609727][T11879] loop9: detected capacity change from 0 to 512
[  926.760471][T11879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  926.760604][T11879] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  927.861427][ T5624] Bluetooth: hci7: command 0x0406 tx timeout
[  927.901163][T11898] loop8: detected capacity change from 0 to 1024
[  927.957588][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.064477][T11908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'.
[  930.477328][T11920] loop3: detected capacity change from 0 to 512
[  930.519625][T11920] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.878: bad orphan inode 13
[  930.519674][T11920] loop3: lost filesystem error report for type 5 error -117
[  930.522295][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  930.522329][    C1] EXT4-fs (loop3): initial error at time 1790908796: ext4_orphan_get:1429
[  930.522368][    C1] EXT4-fs (loop3): last error at time 1790908796: ext4_orphan_get:1429
[  930.566559][T11920] ext4_test_bit(bit=12, block=4) = 1
[  930.566589][T11920] is_bad_inode(inode)=0
[  930.566602][T11920] NEXT_ORPHAN(inode)=0
[  930.566616][T11920] max_ino=32
[  930.566629][T11920] i_nlink=1
[  930.590105][T11920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  930.618686][T11920] EXT4-fs warning (device loop3): dx_probe:812: inode #2: comm syz.3.878: Hash code is SIPHASH, but hash not in dirent
[  930.618736][T11920] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.878: Corrupt directory, running e2fsck is recommended
[  930.619164][T11920] EXT4-fs warning (device loop3): dx_probe:812: inode #2: comm syz.3.878: Hash code is SIPHASH, but hash not in dirent
[  930.619207][T11920] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.878: Corrupt directory, running e2fsck is recommended
[  930.619273][T11920] EXT4-fs error (device loop3): ext4_find_dest_de:2051: inode #2: block 13: comm syz.3.878: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0
[  932.769106][T11885] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  932.769480][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  932.769540][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  932.998012][ T7043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.109793][T11926] loop4: detected capacity change from 0 to 4096
[  933.127610][T11926] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  933.614048][T11947] loop5: detected capacity change from 0 to 64
[  934.491406][ T5757] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  934.654501][ T5757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  934.673904][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.673947][ T5757] usb 3-1: Product: syz
[  934.673973][ T5757] usb 3-1: Manufacturer: syz
[  934.674016][ T5757] usb 3-1: SerialNumber: syz
[  934.983876][   T44] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  935.160662][T11966] loop4: detected capacity change from 0 to 1024
[  937.887825][   T44] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  937.888259][   T44] ath9k_htc: Failed to initialize the device
[  937.890555][  T982] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  938.739039][   T44] usb 3-1: ath9k_htc: USB layer deinitialized
[  938.875616][  T982] usb 6-1: device descriptor read/all, error -71
[  939.007169][ T9438] usb 3-1: USB disconnect, device number 9
[  939.255947][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'.
[  939.256567][T11984] x_tables: ip_tables: udp match: only valid for protocol 17
[  939.317095][T11989] netlink: 40 bytes leftover after parsing attributes in process `syz.9.875'.
[  939.324483][T11989] netlink: 40 bytes leftover after parsing attributes in process `syz.9.875'.
[  939.463113][ T9438] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  941.461491][ T9438] usb 5-1: Using ep0 maxpacket: 16
[  941.463210][ T9438] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  941.466819][ T9438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  941.466883][ T9438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  941.466931][ T9438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  941.466971][ T9438] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  941.467218][ T9438] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  941.551433][ T9438] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  941.551483][ T9438] usb 5-1: Manufacturer: syz
[  941.557937][ T9438] usb 5-1: config 0 descriptor??
[  944.205923][T12012] loop5: detected capacity change from 0 to 4096
[  944.343352][ T9438] rc_core: IR keymap rc-hauppauge not found
[  944.343379][ T9438] Registered IR keymap rc-empty
[  944.343527][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.362461][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.383841][ T9438] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  944.407377][ T9438] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59
[  944.431688][T12019] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  944.432253][T12012] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  944.434325][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.452664][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.479421][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.491441][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.511547][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.531409][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.551448][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.558809][T12012] NILFS (loop5): mounting fs with errors
[  944.575002][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.591467][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.611889][ T9438] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  944.639895][ T9438] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  944.639933][ T9438] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  944.675193][ T9438] usb 5-1: USB disconnect, device number 6
[  944.932388][ T5636] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  945.092722][ T5636] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  945.106587][ T5636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.106629][ T5636] usb 10-1: Product: syz
[  945.106655][ T5636] usb 10-1: Manufacturer: syz
[  945.106682][ T5636] usb 10-1: SerialNumber: syz
[  945.272424][ T5763] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  945.307990][ T5762] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  945.432732][ T5763] usb 9-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00
[  945.434886][ T5763] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  945.434925][ T5763] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  945.451948][ T5763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.452081][ T5763] usb 9-1: Product: syz
[  945.452107][ T5763] usb 9-1: Manufacturer: syz
[  945.452134][ T5763] usb 9-1: SerialNumber: syz
[  946.265973][ T5624] Bluetooth: hci1: CSR: Local version failed (-71)
[  947.242844][ T5762] usb 10-1: Service connection timeout for: 256
[  947.242881][ T5762] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services
[  947.286330][   T44] usb 10-1: USB disconnect, device number 1
** replaying previous printk message **
[  947.286330][   T44] usb 10-1: USB disconnect, device number 15
[  947.295442][    C0] ==================================================================
[  947.295460][    C0] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x318/0x3d0
[  947.295499][    C0] Read of size 8 at addr ffff88802a442158 by task kworker/0:6/5762
[  947.295523][    C0] 
[  947.295539][    C0] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  947.295580][    C0] Tainted: [L]=SOFTLOCKUP
[  947.295591][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  947.295612][    C0] Workqueue: events request_firmware_work_func
[  947.295659][    C0] Call Trace:
[  947.295669][    C0]  <IRQ>
[  947.295681][    C0]  dump_stack_lvl+0x100/0x190
[  947.295723][    C0]  print_report+0x13d/0x4b0
[  947.295769][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.295806][    C0]  ? __virt_addr_valid+0x239/0x430
[  947.295857][    C0]  ? tasklet_action_common+0x318/0x3d0
[  947.295888][    C0]  kasan_report+0xdf/0x1c0
[  947.295923][    C0]  ? tasklet_action_common+0x318/0x3d0
[  947.295960][    C0]  tasklet_action_common+0x318/0x3d0
[  947.295999][    C0]  handle_softirqs+0x1e6/0x9d0
[  947.296031][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  947.296060][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.296096][    C0]  ? _raw_spin_unlock+0x28/0x50
[  947.296127][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.296163][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  947.296213][    C0]  __irq_exit_rcu+0x16a/0x210
[  947.296241][    C0]  irq_exit_rcu+0x9/0x30
[  947.296268][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  947.296304][    C0]  </IRQ>
[  947.296314][    C0]  <TASK>
[  947.296326][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  947.296359][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  947.296395][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 8d 12 f6 48 89 df e8 de e3 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 25 c7 01 f6 65 48 83 3d d4 73 b8 08 00 74 16 5b
[  947.296425][    C0] RSP: 0018:ffffc90004847778 EFLAGS: 00000246
[  947.296449][    C0] RAX: 0000000000000006 RBX: ffffffff9bbe6e78 RCX: 0000000000000040
[  947.296469][    C0] RDX: 0000000000000001 RSI: ffffffff8e393e58 RDI: ffffffff8c623f80
[  947.296489][    C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000
[  947.296509][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  947.296529][    C0] R13: 0000000000000011 R14: 0000000000000011 R15: ffff888064688000
[  947.296560][    C0]  debug_check_no_obj_freed+0x31f/0x630
[  947.296617][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  947.296665][    C0]  ? find_held_lock+0x2b/0x80
[  947.296708][    C0]  ? __page_table_check_zero+0x27f/0x410
[  947.296748][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.296785][    C0]  ? __page_table_check_zero+0x284/0x410
[  947.296825][    C0]  __free_frozen_pages+0x409/0x10f0
[  947.296865][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.296902][    C0]  ? __pfx_wiphy_dev_release+0x10/0x10
[  947.296932][    C0]  device_release+0xd2/0x270
[  947.296969][    C0]  kobject_put+0x1f7/0x640
[  947.297020][    C0]  put_device+0x1f/0x30
[  947.297055][    C0]  ath9k_htc_probe_device+0x1a6/0x1f80
[  947.297098][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297134][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297172][    C0]  ? __pfx_ath9k_htc_probe_device+0x10/0x10
[  947.297212][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297248][    C0]  ? usb_submit_urb+0x82e/0x19b0
[  947.297297][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297333][    C0]  ? usb_free_urb.part.0+0x4c/0x110
[  947.297377][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297417][    C0]  ? usb_free_urb+0x24/0x30
[  947.297471][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.297523][    C0]  ? ath9k_hif_usb_alloc_urbs+0xb5f/0xfa0
[  947.297584][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.297635][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.297690][    C0]  ? reacquire_held_locks+0xdd/0x1f0
[  947.297735][    C0]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[  947.297794][    C0]  request_firmware_work_func+0x13f/0x440
[  947.297854][    C0]  ? process_one_work+0xa2c/0x1b10
[  947.297913][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[  947.297981][    C0]  ? process_one_work+0x906/0x1b10
[  947.298040][    C0]  ? process_one_work+0x906/0x1b10
[  947.298097][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.298150][    C0]  process_one_work+0xac7/0x1b10
[  947.298219][    C0]  ? __pfx_process_one_work+0x10/0x10
[  947.298279][    C0]  ? lock_acquire+0x1d1/0x380
[  947.298326][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.298378][    C0]  worker_thread+0x5ef/0xe50
[  947.298445][    C0]  ? kthread+0x13a/0x450
[  947.298496][    C0]  ? __pfx_worker_thread+0x10/0x10
[  947.298551][    C0]  kthread+0x373/0x450
[  947.298602][    C0]  ? __pfx_kthread+0x10/0x10
[  947.298656][    C0]  ret_from_fork+0x730/0xd60
[  947.298698][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  947.298741][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.298787][    C0]  ? __switch_to+0x800/0x10f0
[  947.298839][    C0]  ? __switch_to_asm+0x39/0x70
[  947.298878][    C0]  ? __pfx_kthread+0x10/0x10
[  947.298955][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.299012][    C0]  </TASK>
[  947.299026][    C0] 
[  947.299034][    C0] Allocated by task 5762:
[  947.299052][    C0]  kasan_save_stack+0x30/0x50
[  947.299087][    C0]  kasan_save_track+0x14/0x30
[  947.299120][    C0]  __kasan_kmalloc+0xaa/0xb0
[  947.299152][    C0]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  947.299202][    C0]  ath9k_init_wmi+0x43/0x300
[  947.299251][    C0]  ath9k_htc_probe_device+0x203/0x1f80
[  947.299300][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.299344][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.299397][    C0]  request_firmware_work_func+0x13f/0x440
[  947.299452][    C0]  process_one_work+0xac7/0x1b10
[  947.299505][    C0]  worker_thread+0x5ef/0xe50
[  947.299558][    C0]  kthread+0x373/0x450
[  947.299605][    C0]  ret_from_fork+0x730/0xd60
[  947.299640][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.299675][    C0] 
[  947.299684][    C0] Freed by task 5762:
[  947.299700][    C0]  kasan_save_stack+0x30/0x50
[  947.299734][    C0]  kasan_save_track+0x14/0x30
[  947.299767][    C0]  kasan_save_free_info+0x3b/0x70
[  947.299818][    C0]  __kasan_slab_free+0x5f/0x80
[  947.299855][    C0]  kfree+0x22b/0x6d0
[  947.299900][    C0]  ath9k_htc_probe_device+0x293/0x1f80
[  947.299949][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.299999][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.300051][    C0]  request_firmware_work_func+0x13f/0x440
[  947.300106][    C0]  process_one_work+0xac7/0x1b10
[  947.300159][    C0]  worker_thread+0x5ef/0xe50
[  947.300212][    C0]  kthread+0x373/0x450
[  947.300259][    C0]  ret_from_fork+0x730/0xd60
[  947.300294][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.300327][    C0] 
[  947.300336][    C0] The buggy address belongs to the object at ffff88802a442000
[  947.300336][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  947.300366][    C0] The buggy address is located 344 bytes inside of
[  947.300366][    C0]  freed 2048-byte region [ffff88802a442000, ffff88802a442800)
[  947.300404][    C0] 
[  947.300413][    C0] The buggy address belongs to the physical page:
[  947.300428][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a440
[  947.300460][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  947.300490][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  947.300523][    C0] page_type: f5(slab)
[  947.300556][    C0] raw: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[  947.300591][    C0] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  947.300627][    C0] head: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[  947.300662][    C0] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  947.300699][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  947.300735][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  947.300757][    C0] page dumped because: kasan: bad access detected
[  947.300775][    C0] page_owner tracks the page as allocated
[  947.300787][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 6849548608
[  947.300851][    C0]  post_alloc_hook+0xfd/0x120
[  947.300898][    C0]  get_page_from_freelist+0x110d/0x35d0
[  947.300953][    C0]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  947.301014][    C0]  new_slab+0xa9/0x6e0
[  947.301062][    C0]  refill_objects+0xe3/0x410
[  947.301111][    C0]  __pcs_replace_empty_main+0x35e/0x650
[  947.301162][    C0]  __kmalloc_noprof+0x67c/0x840
[  947.301220][    C0]  scsi_alloc_target+0x12f/0xc70
[  947.301279][    C0]  __scsi_scan_target+0xd0/0x4b0
[  947.301338][    C0]  scsi_scan_channel+0x142/0x1e0
[  947.301369][    C0]  scsi_scan_host_selected+0x307/0x3f0
[  947.301403][    C0]  do_scsi_scan_host+0x1f4/0x270
[  947.301436][    C0]  do_scan_async+0x42/0x490
[  947.301465][    C0]  async_run_entry_fn+0x9f/0x580
[  947.301505][    C0]  process_one_work+0xac7/0x1b10
[  947.301553][    C0]  worker_thread+0x5ef/0xe50
[  947.301601][    C0] page last free pid 982 tgid 982 ts 6842225005 stack trace:
[  947.301623][    C0]  free_pages_prepare+0x586/0xe00
[  947.301665][    C0]  __free_contig_range_common+0x14f/0x250
[  947.301709][    C0]  free_pages_bulk+0x12a/0x200
[  947.301757][    C0]  vm_area_free_pages+0xb2/0x2a0
[  947.301807][    C0]  vfree+0xf7/0x6d0
[  947.301838][    C0]  delayed_vfree_work+0x56/0x80
[  947.301873][    C0]  process_one_work+0xac7/0x1b10
[  947.301921][    C0]  worker_thread+0x5ef/0xe50
[  947.301968][    C0]  kthread+0x373/0x450
[  947.302015][    C0]  ret_from_fork+0x730/0xd60
[  947.302046][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.302078][    C0] 
[  947.302085][    C0] Memory state around the buggy address:
[  947.302102][    C0]  ffff88802a442000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.302127][    C0]  ffff88802a442080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.302151][    C0] >ffff88802a442100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.302169][    C0]                                                     ^
[  947.302189][    C0]  ffff88802a442180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.302213][    C0]  ffff88802a442200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.302232][    C0] ==================================================================
[  947.302345][    C0] Disabling lock debugging due to kernel taint
[  947.302396][    C0] ==================================================================
[  947.302414][    C0] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x11e/0x3d0
[  947.302460][    C0] Write of size 8 at addr ffff88802a442160 by task kworker/0:6/5762
[  947.302491][    C0] 
[  947.302510][    C0] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:6 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  947.302566][    C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  947.302581][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  947.302605][    C0] Workqueue: events request_firmware_work_func
[  947.302657][    C0] Call Trace:
[  947.302669][    C0]  <IRQ>
[  947.302681][    C0]  dump_stack_lvl+0x100/0x190
[  947.302729][    C0]  print_report+0x13d/0x4b0
[  947.302784][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.302832][    C0]  ? __virt_addr_valid+0x239/0x430
[  947.302892][    C0]  ? tasklet_action_common+0x11e/0x3d0
[  947.302929][    C0]  kasan_report+0xdf/0x1c0
[  947.302983][    C0]  ? tasklet_action_common+0x11e/0x3d0
[  947.303031][    C0]  kasan_check_range+0x10f/0x1e0
[  947.303082][    C0]  tasklet_action_common+0x11e/0x3d0
[  947.303128][    C0]  handle_softirqs+0x1e6/0x9d0
[  947.303170][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  947.303207][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.303255][    C0]  ? _raw_spin_unlock+0x28/0x50
[  947.303295][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.303342][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  947.303408][    C0]  __irq_exit_rcu+0x16a/0x210
[  947.303445][    C0]  irq_exit_rcu+0x9/0x30
[  947.303480][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  947.303527][    C0]  </IRQ>
[  947.303540][    C0]  <TASK>
[  947.303555][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  947.303597][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  947.303644][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 8d 12 f6 48 89 df e8 de e3 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 25 c7 01 f6 65 48 83 3d d4 73 b8 08 00 74 16 5b
[  947.303683][    C0] RSP: 0018:ffffc90004847778 EFLAGS: 00000246
[  947.303714][    C0] RAX: 0000000000000006 RBX: ffffffff9bbe6e78 RCX: 0000000000000040
[  947.303740][    C0] RDX: 0000000000000001 RSI: ffffffff8e393e58 RDI: ffffffff8c623f80
[  947.303766][    C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000
[  947.303790][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  947.303817][    C0] R13: 0000000000000011 R14: 0000000000000011 R15: ffff888064688000
[  947.303857][    C0]  debug_check_no_obj_freed+0x31f/0x630
[  947.303930][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  947.303999][    C0]  ? find_held_lock+0x2b/0x80
[  947.304054][    C0]  ? __page_table_check_zero+0x27f/0x410
[  947.304107][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304154][    C0]  ? __page_table_check_zero+0x284/0x410
[  947.304204][    C0]  __free_frozen_pages+0x409/0x10f0
[  947.304255][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304303][    C0]  ? __pfx_wiphy_dev_release+0x10/0x10
[  947.304343][    C0]  device_release+0xd2/0x270
[  947.304391][    C0]  kobject_put+0x1f7/0x640
[  947.304451][    C0]  put_device+0x1f/0x30
[  947.304493][    C0]  ath9k_htc_probe_device+0x1a6/0x1f80
[  947.304547][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304594][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304641][    C0]  ? __pfx_ath9k_htc_probe_device+0x10/0x10
[  947.304693][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304739][    C0]  ? usb_submit_urb+0x82e/0x19b0
[  947.304802][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304847][    C0]  ? usb_free_urb.part.0+0x4c/0x110
[  947.304903][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.304949][    C0]  ? usb_free_urb+0x24/0x30
[  947.305006][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.305052][    C0]  ? ath9k_hif_usb_alloc_urbs+0xb5f/0xfa0
[  947.305110][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.305160][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.305214][    C0]  ? reacquire_held_locks+0xdd/0x1f0
[  947.305257][    C0]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[  947.305314][    C0]  request_firmware_work_func+0x13f/0x440
[  947.305372][    C0]  ? process_one_work+0xa2c/0x1b10
[  947.305428][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[  947.305486][    C0]  ? process_one_work+0x906/0x1b10
[  947.305542][    C0]  ? process_one_work+0x906/0x1b10
[  947.305597][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.305649][    C0]  process_one_work+0xac7/0x1b10
[  947.305715][    C0]  ? __pfx_process_one_work+0x10/0x10
[  947.305774][    C0]  ? lock_acquire+0x1d1/0x380
[  947.305820][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.305870][    C0]  worker_thread+0x5ef/0xe50
[  947.305935][    C0]  ? kthread+0x13a/0x450
[  947.305990][    C0]  ? __pfx_worker_thread+0x10/0x10
[  947.306046][    C0]  kthread+0x373/0x450
[  947.306095][    C0]  ? __pfx_kthread+0x10/0x10
[  947.306148][    C0]  ret_from_fork+0x730/0xd60
[  947.306189][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  947.306229][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  947.306276][    C0]  ? __switch_to+0x800/0x10f0
[  947.306326][    C0]  ? __switch_to_asm+0x39/0x70
[  947.306363][    C0]  ? __pfx_kthread+0x10/0x10
[  947.306416][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.306466][    C0]  </TASK>
[  947.306479][    C0] 
[  947.306487][    C0] Allocated by task 5762:
[  947.306504][    C0]  kasan_save_stack+0x30/0x50
[  947.306538][    C0]  kasan_save_track+0x14/0x30
[  947.306571][    C0]  __kasan_kmalloc+0xaa/0xb0
[  947.306603][    C0]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  947.306652][    C0]  ath9k_init_wmi+0x43/0x300
[  947.306700][    C0]  ath9k_htc_probe_device+0x203/0x1f80
[  947.306747][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.306790][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.306841][    C0]  request_firmware_work_func+0x13f/0x440
[  947.306894][    C0]  process_one_work+0xac7/0x1b10
[  947.306947][    C0]  worker_thread+0x5ef/0xe50
[  947.307005][    C0]  kthread+0x373/0x450
[  947.307050][    C0]  ret_from_fork+0x730/0xd60
[  947.307084][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.307118][    C0] 
[  947.307125][    C0] Freed by task 5762:
[  947.307142][    C0]  kasan_save_stack+0x30/0x50
[  947.307174][    C0]  kasan_save_track+0x14/0x30
[  947.307206][    C0]  kasan_save_free_info+0x3b/0x70
[  947.307255][    C0]  __kasan_slab_free+0x5f/0x80
[  947.307290][    C0]  kfree+0x22b/0x6d0
[  947.307334][    C0]  ath9k_htc_probe_device+0x293/0x1f80
[  947.307382][    C0]  ath9k_htc_hw_init+0x33/0x60
[  947.307426][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  947.307477][    C0]  request_firmware_work_func+0x13f/0x440
[  947.307530][    C0]  process_one_work+0xac7/0x1b10
[  947.307582][    C0]  worker_thread+0x5ef/0xe50
[  947.307634][    C0]  kthread+0x373/0x450
[  947.307680][    C0]  ret_from_fork+0x730/0xd60
[  947.307714][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.307748][    C0] 
[  947.307756][    C0] The buggy address belongs to the object at ffff88802a442000
[  947.307756][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  947.307786][    C0] The buggy address is located 352 bytes inside of
[  947.307786][    C0]  freed 2048-byte region [ffff88802a442000, ffff88802a442800)
[  947.307824][    C0] 
[  947.307833][    C0] The buggy address belongs to the physical page:
[  947.307847][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a440
[  947.307880][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  947.307911][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  947.307942][    C0] page_type: f5(slab)
[  947.307978][    C0] raw: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[  947.308013][    C0] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  947.308049][    C0] head: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[  947.308084][    C0] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  947.308120][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  947.308155][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  947.308177][    C0] page dumped because: kasan: bad access detected
[  947.308193][    C0] page_owner tracks the page as allocated
[  947.308206][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 6849548608
[  947.308267][    C0]  post_alloc_hook+0xfd/0x120
[  947.308313][    C0]  get_page_from_freelist+0x110d/0x35d0
[  947.308365][    C0]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  947.308419][    C0]  new_slab+0xa9/0x6e0
[  947.308466][    C0]  refill_objects+0xe3/0x410
[  947.308517][    C0]  __pcs_replace_empty_main+0x35e/0x650
[  947.308566][    C0]  __kmalloc_noprof+0x67c/0x840
[  947.308622][    C0]  scsi_alloc_target+0x12f/0xc70
[  947.308679][    C0]  __scsi_scan_target+0xd0/0x4b0
[  947.308737][    C0]  scsi_scan_channel+0x142/0x1e0
[  947.308769][    C0]  scsi_scan_host_selected+0x307/0x3f0
[  947.308803][    C0]  do_scsi_scan_host+0x1f4/0x270
[  947.308835][    C0]  do_scan_async+0x42/0x490
[  947.308866][    C0]  async_run_entry_fn+0x9f/0x580
[  947.308909][    C0]  process_one_work+0xac7/0x1b10
[  947.308961][    C0]  worker_thread+0x5ef/0xe50
[  947.309017][    C0] page last free pid 982 tgid 982 ts 6842225005 stack trace:
[  947.309041][    C0]  free_pages_prepare+0x586/0xe00
[  947.309087][    C0]  __free_contig_range_common+0x14f/0x250
[  947.309135][    C0]  free_pages_bulk+0x12a/0x200
[  947.309187][    C0]  vm_area_free_pages+0xb2/0x2a0
[  947.309241][    C0]  vfree+0xf7/0x6d0
[  947.309275][    C0]  delayed_vfree_work+0x56/0x80
[  947.309313][    C0]  process_one_work+0xac7/0x1b10
[  947.309365][    C0]  worker_thread+0x5ef/0xe50
[  947.309417][    C0]  kthread+0x373/0x450
[  947.309463][    C0]  ret_from_fork+0x730/0xd60
[  947.309497][    C0]  ret_from_fork_asm+0x1a/0x30
[  947.309532][    C0] 
[  947.309540][    C0] Memory state around the buggy address:
[  947.309558][    C0]  ffff88802a442000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.309584][    C0]  ffff88802a442080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.309611][    C0] >ffff88802a442100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.309632][    C0]                                                        ^
[  947.309653][    C0]  ffff88802a442180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.309679][    C0]  ffff88802a442200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.309699][    C0] ==================================================================
[  947.309757][    C0] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[  949.332172][    C0] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:6 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  949.343142][    C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  949.348678][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  949.358731][    C0] Workqueue: events request_firmware_work_func
[  949.364915][    C0] Call Trace:
[  949.368186][    C0]  <IRQ>
[  949.371019][    C0]  dump_stack_lvl+0x100/0x190
[  949.375712][    C0]  vpanic+0x553/0x970
[  949.379697][    C0]  ? __pfx_vpanic+0x10/0x10
[  949.384199][    C0]  ? rcu_is_watching+0x13/0xc0
[  949.388976][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.394615][    C0]  ? trace_irq_enable.constprop.0+0x122/0x160
[  949.400697][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.406343][    C0]  ? tasklet_action_common+0x11e/0x3d0
[  949.411806][    C0]  panic+0xd1/0xe0
[  949.415531][    C0]  ? __pfx_panic+0x10/0x10
[  949.419950][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  949.425949][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  949.431770][    C0]  end_report.part.0+0x68/0x90
[  949.436552][    C0]  kasan_report.cold+0xe/0x18
[  949.441246][    C0]  ? tasklet_action_common+0x11e/0x3d0
[  949.446734][    C0]  kasan_check_range+0x10f/0x1e0
[  949.451684][    C0]  tasklet_action_common+0x11e/0x3d0
[  949.456981][    C0]  handle_softirqs+0x1e6/0x9d0
[  949.461784][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  949.467071][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.472710][    C0]  ? _raw_spin_unlock+0x28/0x50
[  949.477563][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.483207][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  949.488868][    C0]  __irq_exit_rcu+0x16a/0x210
[  949.493548][    C0]  irq_exit_rcu+0x9/0x30
[  949.497791][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  949.503456][    C0]  </IRQ>
[  949.506380][    C0]  <TASK>
[  949.509306][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  949.515294][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  949.521721][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 8d 12 f6 48 89 df e8 de e3 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 25 c7 01 f6 65 48 83 3d d4 73 b8 08 00 74 16 5b
[  949.541341][    C0] RSP: 0018:ffffc90004847778 EFLAGS: 00000246
[  949.547414][    C0] RAX: 0000000000000006 RBX: ffffffff9bbe6e78 RCX: 0000000000000040
[  949.555382][    C0] RDX: 0000000000000001 RSI: ffffffff8e393e58 RDI: ffffffff8c623f80
[  949.563352][    C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000
[  949.571323][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  949.579305][    C0] R13: 0000000000000011 R14: 0000000000000011 R15: ffff888064688000
[  949.587289][    C0]  debug_check_no_obj_freed+0x31f/0x630
[  949.592867][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  949.598956][    C0]  ? find_held_lock+0x2b/0x80
[  949.603653][    C0]  ? __page_table_check_zero+0x27f/0x410
[  949.609297][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.614939][    C0]  ? __page_table_check_zero+0x284/0x410
[  949.620588][    C0]  __free_frozen_pages+0x409/0x10f0
[  949.625802][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.631450][    C0]  ? __pfx_wiphy_dev_release+0x10/0x10
[  949.636912][    C0]  device_release+0xd2/0x270
[  949.641524][    C0]  kobject_put+0x1f7/0x640
[  949.645961][    C0]  put_device+0x1f/0x30
[  949.650126][    C0]  ath9k_htc_probe_device+0x1a6/0x1f80
[  949.655602][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.661245][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.666905][    C0]  ? __pfx_ath9k_htc_probe_device+0x10/0x10
[  949.672816][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.678457][    C0]  ? usb_submit_urb+0x82e/0x19b0
[  949.683414][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.689054][    C0]  ? usb_free_urb.part.0+0x4c/0x110
[  949.694266][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.699920][    C0]  ? usb_free_urb+0x24/0x30
[  949.704440][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.710082][    C0]  ? ath9k_hif_usb_alloc_urbs+0xb5f/0xfa0
[  949.715855][    C0]  ath9k_htc_hw_init+0x33/0x60
[  949.720637][    C0]  ath9k_hif_usb_firmware_cb+0x25c/0x510
[  949.726283][    C0]  ? reacquire_held_locks+0xdd/0x1f0
[  949.731575][    C0]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[  949.737748][    C0]  request_firmware_work_func+0x13f/0x440
[  949.743488][    C0]  ? process_one_work+0xa2c/0x1b10
[  949.748617][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[  949.754874][    C0]  ? process_one_work+0x906/0x1b10
[  949.760005][    C0]  ? process_one_work+0x906/0x1b10
[  949.765133][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.770779][    C0]  process_one_work+0xac7/0x1b10
[  949.775740][    C0]  ? __pfx_process_one_work+0x10/0x10
[  949.781130][    C0]  ? lock_acquire+0x1d1/0x380
[  949.785817][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.791505][    C0]  worker_thread+0x5ef/0xe50
[  949.796148][    C0]  ? kthread+0x13a/0x450
[  949.800429][    C0]  ? __pfx_worker_thread+0x10/0x10
[  949.805558][    C0]  kthread+0x373/0x450
[  949.809645][    C0]  ? __pfx_kthread+0x10/0x10
[  949.814251][    C0]  ret_from_fork+0x730/0xd60
[  949.818848][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  949.823987][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  949.829627][    C0]  ? __switch_to+0x800/0x10f0
[  949.834314][    C0]  ? __switch_to_asm+0x39/0x70
[  949.839081][    C0]  ? __pfx_kthread+0x10/0x10
[  949.843685][    C0]  ret_from_fork_asm+0x1a/0x30
[  949.848459][    C0]  </TASK>
[  949.851802][    C0] Kernel Offset: disabled
[  949.856124][    C0] Rebooting in 86400 seconds..