last executing test programs:

3m0.591997375s ago: executing program 2 (id=2812):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size'])
chdir(&(0x7f0000000280)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$input_event(r0, &(0x7f0000000140)={{}, 0x0, 0x4}, 0x10)

3m0.537892705s ago: executing program 2 (id=2815):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
process_mrelease(0xffffffffffffffff, 0x0)

3m0.495950385s ago: executing program 2 (id=2816):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x2001, 0xffffffff, 0x2, 0xefffffffffff0000, 0x80000001, 0x48cd, 0x3, 0x800000df})

3m0.423826707s ago: executing program 2 (id=2817):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m0.370398894s ago: executing program 2 (id=2819):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081)

3m0.15199019s ago: executing program 2 (id=2829):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m0.07353936s ago: executing program 32 (id=2829):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m1.367995419s ago: executing program 0 (id=5280):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0)

1m1.282733473s ago: executing program 0 (id=5283):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

1m0.462960364s ago: executing program 0 (id=5291):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1m0.427589862s ago: executing program 0 (id=5294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0)

1m0.426706533s ago: executing program 0 (id=5296):
unshare(0x62040200)
unshare(0x480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4100, 0x10020}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000)

1m0.214140409s ago: executing program 0 (id=5298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0x1c4, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce10ba88585033dab08b75ee83cc7c991e40e8d7ec2ca3c4679f0326768", @nested={0x4, 0x100}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a07d0e21fdb156e82ec121dc1e84e3e3a073f4a053903fe2fb685146a0a6de9707e0ddd0667aa17ec30b3008e1af022b7296d407ad4ebcded6d74449049cc7565edbc48717701ec3ea58d3c5f3f230e3d932b747394e2d75566fc7a5eaf8e497d5509ab4bc", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xa1, 0xfe, 0x0, 0x1, [@typed={0x4, 0x3b, 0x0, 0x0, @binary}, @generic="7b8f28370041f1f4917f1aef5d8d6d67f1e3a33a2cf273b52f1ae23507ea59a5a086ae3f9d94a06baf6b22e4c6b07baf33a42c1931b48e2de9ec4c2c5975dd312518f523531b0f7f7e8a1954a096bcbc10082ce4583b", @nested={0x4, 0x8c}, @generic="268243f21b36a9ea79233fc354ce1a89eb19e40494c21693a7a7", @nested={0x4, 0x113}, @generic="085c7da49a3741a3b94cd2d452ee2a95b3770b91b23807a79fd41d9a1884da364a"]}]}, 0x1c4}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m0.15081923s ago: executing program 33 (id=5298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0x1c4, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce10ba88585033dab08b75ee83cc7c991e40e8d7ec2ca3c4679f0326768", @nested={0x4, 0x100}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a07d0e21fdb156e82ec121dc1e84e3e3a073f4a053903fe2fb685146a0a6de9707e0ddd0667aa17ec30b3008e1af022b7296d407ad4ebcded6d74449049cc7565edbc48717701ec3ea58d3c5f3f230e3d932b747394e2d75566fc7a5eaf8e497d5509ab4bc", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xa1, 0xfe, 0x0, 0x1, [@typed={0x4, 0x3b, 0x0, 0x0, @binary}, @generic="7b8f28370041f1f4917f1aef5d8d6d67f1e3a33a2cf273b52f1ae23507ea59a5a086ae3f9d94a06baf6b22e4c6b07baf33a42c1931b48e2de9ec4c2c5975dd312518f523531b0f7f7e8a1954a096bcbc10082ce4583b", @nested={0x4, 0x8c}, @generic="268243f21b36a9ea79233fc354ce1a89eb19e40494c21693a7a7", @nested={0x4, 0x113}, @generic="085c7da49a3741a3b94cd2d452ee2a95b3770b91b23807a79fd41d9a1884da364a"]}]}, 0x1c4}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.822803874s ago: executing program 5 (id=6543):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

2.723994041s ago: executing program 5 (id=6549):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

2.498087673s ago: executing program 5 (id=6555):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f296cbebcd09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x2, 0x100, 0x5, 0x5, 0x2d44, 0x1bf0, 0x9, 0x46, 0x5, 0x5, 0x7, 0x2, 0x80000001})

1.634510453s ago: executing program 1 (id=6563):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x885, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/150, 0x96, 0x1, 0x0}, &(0x7f0000000180)=0x40)

1.062632857s ago: executing program 4 (id=6572):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
close(r0)

1.062122652s ago: executing program 4 (id=6573):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0)
ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0xfffffffc, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"})

980.07238ms ago: executing program 4 (id=6575):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xffed)

841.403561ms ago: executing program 5 (id=6578):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r2, 0x4, 0x0, 0x0, 0x10, 0x1, {0x1}})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)

779.513373ms ago: executing program 5 (id=6580):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

769.235042ms ago: executing program 5 (id=6582):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_connect(0x2, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x65, 0x1c, 0x73, 0x8, 0x110a, 0x1451, 0x9799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x24, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0xf1, 0x8, 0x0, 0xd0, 0x26, 0xcf, 0x4a}}]}}]}}, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

726.959433ms ago: executing program 1 (id=6583):
creat(&(0x7f0000000240)='./file0\x00', 0x186)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x5, 0x65, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)

726.438775ms ago: executing program 3 (id=6584):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}}}, 0x108)

723.048457ms ago: executing program 1 (id=6585):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x800}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x800}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

650.997627ms ago: executing program 3 (id=6586):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140))
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040))
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

603.638376ms ago: executing program 3 (id=6587):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

546.671755ms ago: executing program 1 (id=6588):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000040)='./file0\x00')
link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00')

495.747262ms ago: executing program 3 (id=6589):
socket(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)

414.058144ms ago: executing program 3 (id=6590):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba803ac78f7b07214db20382b6760cb2cf9c72531df81aa165e0bb3096de773ea53550c355baac33197c9e38b414924d8783d82fab967b1e66501dfcb18dc86ad9f2936bdda39b6e9c547322ed674f2848540f0d32ae4d292aadc3b2a60b1c041860c0393f4926f23f33c8dd3448291f410292a53ba04f46767334105c5c2ad21214e4e391a023df3fd6ba8a0b42acdb050bf1d20557029afb647beeacc267390df76a0aba61ee1a23557e830c908fd55dd5dcdf1a83867cbad8ad4ad76eec30106998fafa7795d035ef9aca5f9763c0b23b33657bb653ac5ff991eeedb3970c896907c0be91fa9ae4a9053a9c26751749ff49caef00a87fdb7826e9c00f5ea20", 0x10f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc9", 0xa5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

413.891604ms ago: executing program 3 (id=6591):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

257.599478ms ago: executing program 1 (id=6592):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}], 0x1, 0x400)

82.066083ms ago: executing program 4 (id=6593):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)="65a35cc698d2cc9024a77994ccf0b1d7115dad4e494902d5c6c6b4f67d9cc0bac884c61c551cfd976da546197f130d224204f771c1bff157feef43f67c8b7e89d326f7f4deeade2dc01223c4ea65a3983ba5260ee91cf318fb861a8f40ecc7a681938774e45f998eca9d5533cdda4b76c4cd6e400f3c87daf346f59629eb661e91fc2a8f854be2cb1f2b8ed41dfd27949309e64ec164935f74c8e6a1219c3b9e16fb7a00619600000000000000", 0xad}, {&(0x7f00000013c0)="0fb606991534190a4a98ecfe4bf49b16492eb357ec9144c864f135f68160420477a01ca295e951419f943a359a37e95cf06b26679460bc9c7e16764edf6c1ef9182dcd00f1a36f1aa78bcb85a6b86b46868f8e36a634b437ef6180a97c2da121476abae119c2aafa4d78219742eac6", 0x6f}, {&(0x7f00000024c0)="9eb5351d117970a3038b0acd91e1336179d3be4db67e20466c73db225785c624ce0a279f07d73f992aaeb5fceb5e3a6d4c007abbbed673f65ea2c486bd8d8c9c5f235ecd031414d986d2a29a6faa426c945f1351b2bd8d5d10ad6810f1ae9834d533bdf2", 0x64}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008800}], 0x1, 0x4040800)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3}, 0x0)

81.748048ms ago: executing program 4 (id=6594):
r0 = socket(0x1e, 0x1, 0x0)
shutdown(r0, 0x2)
r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

46.165481ms ago: executing program 1 (id=6595):
r0 = syz_open_dev$media(&(0x7f00000004c0), 0x40, 0x8000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=6596):
syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]})
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

kernel console output (not intermixed with test programs):

ing attributes in process `syz.1.3979'.
[  247.420674][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3996'.
[  247.452402][T15074] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3997'.
[  247.535757][T15078] lo speed is unknown, defaulting to 1000
[  247.594927][ T2095] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  247.744647][ T2095] usb 8-1: Using ep0 maxpacket: 8
[  247.747723][ T2095] usb 8-1: config 0 interface 0 has no altsetting 0
[  247.750430][ T2095] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  247.753856][ T2095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.761085][ T2095] usb 8-1: config 0 descriptor??
[  247.792656][T15084] netlink: 'syz.1.4000': attribute type 16 has an invalid length.
[  247.796042][T15084] netlink: 'syz.1.4000': attribute type 17 has an invalid length.
[  247.814046][T15084] dummy0: left promiscuous mode
[  247.823350][T15084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.829624][ T5406] lo speed is unknown, defaulting to 1000
[  248.171501][ T2095] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  248.326863][T15096] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4006'.
[  248.371002][ T5406] usb 8-1: USB disconnect, device number 26
[  248.383855][T15098] syzkaller1: entered promiscuous mode
[  248.386469][T15098] syzkaller1: entered allmulticast mode
[  248.485276][T15102] input: syz1 as /devices/virtual/input/input53
[  248.514297][T15104] gre0: entered allmulticast mode
[  248.518527][T15104] gre0: left allmulticast mode
[  248.646394][T15114] unknown channel width for channel at 909000KHz?
[  248.649080][T15114] unknown channel width for channel at 909000KHz?
[  248.651654][T15114] unknown channel width for channel at 909000KHz?
[  248.913447][T15125] input: syz1 as /devices/virtual/input/input54
[  249.111227][T15136] bridge0: entered allmulticast mode
[  249.602453][T15159] bridge0: entered allmulticast mode
[  250.078306][ T5976] Bluetooth: hci4: sending frame failed (-49)
[  250.082556][ T5988] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  250.590846][T15183] syzkaller1: entered promiscuous mode
[  250.593171][T15183] syzkaller1: entered allmulticast mode
[  251.384578][ T6040] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  251.534574][ T6040] usb 5-1: Using ep0 maxpacket: 8
[  251.539179][ T6040] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.541599][ T6040] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  251.544341][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.548809][ T6040] usb 5-1: config 0 descriptor??
[  251.683883][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4068'.
[  251.710342][   T40] kauditd_printk_skb: 40 callbacks suppressed
[  251.710355][   T40] audit: type=1326 audit(2000000438.917:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.1.4070" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x0
[  251.965561][ T6040] mcp2221 0003:04D8:00DD.0027: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  252.121376][T15254] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  252.122731][   T24] IPVS: starting estimator thread 0...
[  252.168937][ T6040] usb 5-1: USB disconnect, device number 26
[  252.225866][T15258] IPVS: using max 43 ests per chain, 103200 per kthread
[  252.228985][T15264] loop5: detected capacity change from 0 to 7431
[  252.241467][T15264] loop5: detected capacity change from 7431 to 8855
[  252.812948][T15297] Bluetooth: hci4: Frame reassembly failed (-84)
[  252.816699][T13187] Bluetooth: hci4: Frame reassembly failed (-84)
[  254.801124][T15355] loop5: detected capacity change from 0 to 7247
[  254.807942][T15355] loop5: detected capacity change from 7247 to 8607
[  254.874655][ T5976] Bluetooth: hci4: command 0xfc11 tx timeout
[  254.874975][ T5988] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  255.207769][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  255.210250][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  255.494663][T10234] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  255.654591][T10234] usb 6-1: Using ep0 maxpacket: 8
[  255.658892][T10234] usb 6-1: config 0 interface 0 has no altsetting 0
[  255.661713][T10234] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  255.665577][T10234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.670819][T10234] usb 6-1: config 0 descriptor??
[  255.939338][   T40] audit: type=1326 audit(2000000443.147:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  255.949076][   T40] audit: type=1326 audit(2000000443.147:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  255.959850][   T40] audit: type=1326 audit(2000000443.147:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  255.969058][   T40] audit: type=1326 audit(2000000443.147:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  255.979214][   T40] audit: type=1326 audit(2000000443.147:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  255.988453][   T40] audit: type=1326 audit(2000000443.147:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  255.996871][   T40] audit: type=1326 audit(2000000443.147:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  256.006690][   T40] audit: type=1326 audit(2000000443.147:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  256.016180][   T40] audit: type=1326 audit(2000000443.147:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15397 comm="syz.4.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  256.088575][T10234] mcp2221 0003:04D8:00DD.0028: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  256.288416][ T6040] usb 6-1: USB disconnect, device number 25
[  256.582929][T15430] loop5: detected capacity change from 0 to 7255
[  256.589447][T15430] loop5: detected capacity change from 7255 to 8239
[  256.964658][ T5988] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  256.964976][ T5976] Bluetooth: hci4: command 0x1003 tx timeout
[  257.019395][T15452] input: syz1 as /devices/virtual/input/input57
[  257.759081][T15497] macsec1: entered allmulticast mode
[  258.830574][T15552] input: syz0 as /devices/virtual/input/input58
[  258.941597][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4215'.
[  258.945129][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4215'.
[  259.289964][T15568] macsec2: entered allmulticast mode
[  259.914629][ T5976] Bluetooth: hci4: command 0x1003 tx timeout
[  259.919595][T15595] bridge0: port 1(veth0_to_bridge) entered blocking state
[  259.919909][ T5988] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  259.923022][T15595] bridge0: port 1(veth0_to_bridge) entered disabled state
[  259.933191][T15595] veth0_to_bridge: entered allmulticast mode
[  259.936384][T15595] veth0_to_bridge: entered promiscuous mode
[  260.001706][T15602] vivid-002: disconnect
[  260.011058][T15596] vivid-002: reconnect
[  260.279120][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4
[  260.281894][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2
[  260.284958][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.287415][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.289817][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.292196][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.295042][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.297605][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.300034][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.302481][   T29] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  260.309155][   T29] hid-generic 0000:3000000:0000.0029: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  260.900778][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'.
[  260.909281][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4275'.
[  261.541061][   T40] kauditd_printk_skb: 48 callbacks suppressed
[  261.541080][   T40] audit: type=1326 audit(2000000448.747:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.4.4297" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0
[  261.867938][T15751] tun0: tun_chr_ioctl cmd 1074025675
[  261.869775][T15751] tun0: persist enabled
[  261.871449][T15751] tun0: tun_chr_ioctl cmd 1074025675
[  261.873542][T15751] tun0: persist disabled
[  263.149388][T15784] input: syz0 as /devices/virtual/input/input59
[  263.256036][   T60] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  263.290111][T15791] pim6reg: entered allmulticast mode
[  263.297749][T15791] pim6reg: left allmulticast mode
[  263.299832][T15791] bridge0: left allmulticast mode
[  263.373023][   T40] audit: type=1326 audit(2000000450.577:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.1.4321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd2579 code=0x0
[  263.435767][   T60] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  263.438444][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.442238][   T60] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  263.445182][   T60] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  263.447797][   T60] usb 9-1: Manufacturer: syz
[  263.450543][   T60] usb 9-1: config 0 descriptor??
[  263.506587][   T60] rc_core: IR keymap rc-hauppauge not found
[  263.509429][   T60] Registered IR keymap rc-empty
[  263.512751][   T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[  263.518735][   T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input60
[  263.661728][   T24] usb 9-1: USB disconnect, device number 10
[  263.690011][T15811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  263.803705][T15814] program syz.0.4328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.890525][T15818] tipc: Started in network mode
[  263.892739][T15818] tipc: Node identity ac1414aa, cluster identity 4711
[  263.896631][T15818] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  263.899600][T15818] tipc: Enabled bearer <udp:s>, priority 10
[  263.939401][T15820] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  263.943958][T15820] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  263.949078][T15820] overlayfs: failed to get uuid (1174/file1, err=-13); falling back to uuid=null.
[  264.044642][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.097143][T15824] loop2: detected capacity change from 0 to 7
[  264.103204][T15824] Dev loop2: unable to read RDB block 7
[  264.106048][T15824]  loop2: unable to read partition table
[  264.108648][T15824] loop2: partition table beyond EOD, truncated
[  264.111346][T15824] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  264.184553][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.261429][T15832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4337'.
[  264.268170][T15832] netlink: 'syz.4.4337': attribute type 7 has an invalid length.
[  264.271475][T15832] netlink: 'syz.4.4337': attribute type 8 has an invalid length.
[  264.275087][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4337'.
[  264.324601][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.377900][T15839] input: syz0 as /devices/virtual/input/input61
[  264.474539][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.563942][T15857] input: syz0 as /devices/virtual/input/input62
[  264.614610][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.659287][T15867] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  264.691800][   T40] audit: type=1326 audit(2000000451.897:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.702080][   T40] audit: type=1326 audit(2000000451.897:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.710150][   T40] audit: type=1326 audit(2000000451.907:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.721945][   T40] audit: type=1326 audit(2000000451.907:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.731751][   T40] audit: type=1326 audit(2000000451.907:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.740599][T15877] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4358'.
[  264.743529][   T40] audit: type=1326 audit(2000000451.907:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709e579 code=0x7ffc0000
[  264.754718][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.758279][   T40] audit: type=1326 audit(2000000451.917:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  264.767012][   T40] audit: type=1326 audit(2000000451.917:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15872 comm="syz.4.4355" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  264.874567][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.896198][ T1021] tipc: Node number set to 2886997162
[  265.044584][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.190464][T15905] batadv_slave_0: entered promiscuous mode
[  265.314554][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.907052][T15942] nbd: device at index 1 is going down
[  265.987700][T15946] program syz.4.4390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.213017][T15999] binder: 15997:15999 ioctl c0306201 80000540 returned -22
[  267.257810][T16003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4409'.
[  267.261646][T16003] netlink: 'syz.1.4409': attribute type 7 has an invalid length.
[  267.265508][T16003] netlink: 'syz.1.4409': attribute type 8 has an invalid length.
[  267.268795][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'.
[  267.277805][T16003] gretap0: entered promiscuous mode
[  267.281856][T16003] batadv_slave_1: entered promiscuous mode
[  267.294929][T16003] gretap0: left promiscuous mode
[  267.309286][T16003] batadv_slave_1: left promiscuous mode
[  268.491387][T16040] geneve2: entered promiscuous mode
[  268.493811][T16040] geneve2: entered allmulticast mode
[  268.906545][T16077] netlink: 'syz.4.4444': attribute type 23 has an invalid length.
[  268.925438][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4447'.
[  268.954508][    C0] net_ratelimit: 6 callbacks suppressed
[  268.954520][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  268.961341][   T40] kauditd_printk_skb: 330 callbacks suppressed
[  268.961356][   T40] audit: type=1326 audit(2000000456.167:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.3.4449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  268.976975][   T40] audit: type=1326 audit(2000000456.187:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.3.4449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  268.987523][   T40] audit: type=1326 audit(2000000456.187:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.3.4449" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf702e579 code=0x7ffc0000
[  268.997550][   T40] audit: type=1326 audit(2000000456.187:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.007131][   T40] audit: type=1326 audit(2000000456.187:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.018582][   T40] audit: type=1326 audit(2000000456.187:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.028205][   T40] audit: type=1326 audit(2000000456.187:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.038985][   T40] audit: type=1326 audit(2000000456.187:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.044535][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  269.049009][   T40] audit: type=1326 audit(2000000456.187:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.077968][   T40] audit: type=1326 audit(2000000456.187:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  269.657809][T16128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  269.994570][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  270.074693][    C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  270.690103][T16187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4491'.
[  270.694145][T16187] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4491'.
[  270.698000][T16187] netlink: 'syz.4.4491': attribute type 6 has an invalid length.
[  270.701319][T16187] netlink: 'syz.4.4491': attribute type 5 has an invalid length.
[  270.707056][T16187] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4491'.
[  271.044541][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  271.124503][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.074523][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.154556][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.212664][T16248] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  272.922991][T16272] overlayfs: conflicting lowerdir path
[  272.934699][T16272] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  273.114543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.204602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.485957][T16308] vivid-004: disconnect
[  273.491892][T16304] vivid-004: reconnect
[  274.054563][   T60] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  274.059376][T16342] bridge0: port 1(veth0_to_bridge) entered blocking state
[  274.061755][T16342] bridge0: port 1(veth0_to_bridge) entered disabled state
[  274.064064][T16342] veth0_to_bridge: entered allmulticast mode
[  274.067090][T16342] veth0_to_bridge: entered promiscuous mode
[  274.164563][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  274.216236][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.220139][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.223758][   T60] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  274.226982][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.230723][   T60] usb 9-1: config 0 descriptor??
[  274.244558][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  274.643280][   T60] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor
[  274.648247][   T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0926:3333.002A/input/input63
[  274.714987][   T60] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  274.846187][ T1021] usb 9-1: USB disconnect, device number 11
[  274.990778][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'.
[  274.994351][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'.
[  275.194666][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  275.274763][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.234579][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.314594][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.631128][T16436] lo speed is unknown, defaulting to 1000
[  276.853775][T16441] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  277.274559][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  277.354721][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.314648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.394575][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.621303][T16513] loop2: detected capacity change from 0 to 7
[  278.625726][T16513] Dev loop2: unable to read RDB block 7
[  278.629457][T16513]  loop2: unable to read partition table
[  278.632230][T16513] loop2: partition table beyond EOD, truncated
[  278.635598][T16513] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  278.650473][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  278.650490][   T40] audit: type=1800 audit(2000000465.857:1776): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4636" name="file0" dev="9p" ino=35913980 res=0 errno=0
[  278.932235][T16543] overlayfs: upper fs does not support tmpfile.
[  279.354528][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  279.374062][T16577] kernel read not supported for file /eth0 (pid: 16577 comm: syz.4.4665)
[  279.378913][   T40] audit: type=1800 audit(2000000466.587:1777): pid=16577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4665" name="eth0" dev="mqueue" ino=75864 res=0 errno=0
[  279.434543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  279.634562][T10234] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  279.770548][T16594] sctp: [Deprecated]: syz.4.4673 (pid 16594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.770548][T16594] Use struct sctp_sack_info instead
[  279.806340][T10234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.811901][T10234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.816560][T10234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.821887][T10234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.825734][T10234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.831238][T10234] usb 5-1: config 0 descriptor??
[  280.207440][T16616] kvm: user requested TSC rate below hardware speed
[  280.249688][T10234] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  280.394553][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  280.484541][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  280.507746][ T1021] usb 5-1: USB disconnect, device number 27
[  281.196314][T16641] Invalid ELF header magic: != ELF
[  281.274865][T10234] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  281.434565][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  281.434726][T10234] usb 5-1: Using ep0 maxpacket: 8
[  281.441236][T10234] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.443203][T10234] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  281.445945][T10234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.449514][T10234] usb 5-1: config 0 descriptor??
[  281.514794][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  281.858728][T10234] mcp2221 0003:04D8:00DD.002C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  282.058937][T10234] usb 5-1: USB disconnect, device number 28
[  282.484525][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  282.564529][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  283.514538][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  283.594552][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  283.594657][ T5988] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  283.594840][ T5976] Bluetooth: hci4: command 0x1003 tx timeout
[  283.616310][T16679] ������: renamed from wg2 (while UP)
[  283.694047][T16691] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4714'.
[  284.012532][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4730'.
[  284.033663][T16727] Bluetooth: hci4: Frame reassembly failed (-84)
[  284.344807][   T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  284.497520][   T24] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  284.501606][   T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  284.506227][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  284.510922][   T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  284.514736][   T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  284.518046][   T24] usb 6-1: Product: syz
[  284.519757][   T24] usb 6-1: Manufacturer: syz
[  284.521856][   T24] usb 6-1: SerialNumber: syz
[  284.528557][   T24] usb 6-1: config 0 descriptor??
[  284.532418][   T24] hub 6-1:0.0: bad descriptor, ignoring hub
[  284.535051][   T24] hub 6-1:0.0: probe with driver hub failed with error -5
[  284.540549][   T24] usb 6-1: selecting invalid altsetting 0
[  284.564528][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  284.634743][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  285.444688][T16732] usb 6-1: reset high-speed USB device number 26 using dummy_hcd
[  285.594603][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  285.684558][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  285.811303][T16732] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71)
[  285.820409][ T7247] usb 6-1: USB disconnect, device number 26
[  286.074680][ T5988] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  286.074774][ T5976] Bluetooth: hci4: command 0x1003 tx timeout
[  286.358307][T16802] vlan0: entered allmulticast mode
[  286.634656][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  286.714545][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  286.948926][T16834] syzkaller1: entered promiscuous mode
[  286.951081][T16834] syzkaller1: entered allmulticast mode
[  286.956513][T16834] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 6
[  287.040863][ T7247] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  287.096220][T16842] lo speed is unknown, defaulting to 1000
[  287.124422][T16843] netlink: 'syz.4.4783': attribute type 1 has an invalid length.
[  287.127839][T16843] netlink: 'syz.4.4783': attribute type 2 has an invalid length.
[  287.196330][ T7247] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  287.199814][ T7247] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  287.214321][ T7247] usb 5-1: config 0 interface 0 has no altsetting 0
[  287.237871][ T7247] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  287.242277][ T7247] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  287.245936][ T7247] usb 5-1: Product: syz
[  287.247659][ T7247] usb 5-1: Manufacturer: syz
[  287.249638][ T7247] usb 5-1: SerialNumber: syz
[  287.253693][ T7247] usb 5-1: config 0 descriptor??
[  287.261255][ T7247] hub 5-1:0.0: bad descriptor, ignoring hub
[  287.264095][ T7247] hub 5-1:0.0: probe with driver hub failed with error -5
[  287.270062][ T7247] usb 5-1: selecting invalid altsetting 0
[  287.510229][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'.
[  287.522720][T13244] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.527250][T13244] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.530851][T13244] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.534667][T13244] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.674581][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  287.754653][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  287.875269][T16830] usb 5-1: reset high-speed USB device number 29 using dummy_hcd
[  288.092248][T16889] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4804'.
[  288.127299][T16893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4806'.
[  288.236525][T16830] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71)
[  288.240357][   T29] usb 5-1: USB disconnect, device number 29
[  288.386535][T16908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  288.414822][ T6040] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  288.502099][T16913] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4815'.
[  288.595892][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.602115][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.609039][ T6040] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  288.614336][ T6040] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  288.618119][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.623401][ T6040] usb 6-1: config 0 descriptor??
[  288.724640][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  288.794567][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  289.049054][ T6040] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  289.101439][T16938] vlan0: entered allmulticast mode
[  289.103611][T16938] bond0: entered allmulticast mode
[  289.131209][T16942] batadv_slave_1: entered promiscuous mode
[  289.136192][T16941] batadv_slave_1: left promiscuous mode
[  289.296920][T10234] usb 6-1: USB disconnect, device number 27
[  289.405798][T16964] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+���v3�c���/f�
[  289.764588][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  289.834570][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  289.965140][T17000] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  290.055565][ T5988] Bluetooth: hci4: sending frame failed (-49)
[  290.058937][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  290.645499][   T40] audit: type=1326 audit(2000000477.857:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.664615][   T40] audit: type=1326 audit(2000000477.857:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.674870][   T40] audit: type=1326 audit(2000000477.857:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.683599][   T40] audit: type=1326 audit(2000000477.857:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.692957][   T40] audit: type=1326 audit(2000000477.857:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.702696][   T40] audit: type=1326 audit(2000000477.857:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.713397][   T40] audit: type=1326 audit(2000000477.857:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.722472][   T40] audit: type=1326 audit(2000000477.857:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.732513][   T40] audit: type=1326 audit(2000000477.857:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.741510][   T40] audit: type=1326 audit(2000000477.857:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e598 code=0x7ffc0000
[  290.794867][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  290.884505][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  291.244592][T10234] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  291.415848][T10234] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  291.419980][T10234] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  291.424260][T10234] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  291.428214][T10234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.435172][T17042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  291.441317][T10234] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  291.647134][   T29] usb 9-1: USB disconnect, device number 12
[  291.844730][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  291.914540][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  292.375947][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  292.534536][   T24] usb 6-1: Using ep0 maxpacket: 8
[  292.538781][   T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.543370][   T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.549462][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  292.557158][   T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  292.560611][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.565970][   T24] usb 6-1: config 0 descriptor??
[  292.703120][T17106] pim6reg1: entered promiscuous mode
[  292.705756][T17106] pim6reg1: entered allmulticast mode
[  292.874663][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  292.954724][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  292.976140][   T24] hid_parser_main: 6 callbacks suppressed
[  292.976153][   T24] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  292.980827][   T24] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  292.983336][   T24] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  292.986296][   T24] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  292.988500][   T24] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  292.991069][   T24] mcp2221 0003:04D8:00DD.002E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  293.187294][   T29] usb 6-1: USB disconnect, device number 28
[  293.914659][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  294.004664][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  294.759828][T17274] syzkaller1: entered promiscuous mode
[  294.762642][T17274] syzkaller1: entered allmulticast mode
[  294.964652][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  295.044559][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  295.090204][T17286] input: syz0 as /devices/virtual/input/input64
[  295.409651][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4987'.
[  295.687497][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4993'.
[  295.994552][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  296.084596][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  296.226443][T17342] loop4: detected capacity change from 0 to 7
[  296.231493][T17342] Dev loop4: unable to read RDB block 7
[  296.234097][T17342]  loop4: AHDI p1
[  296.236002][T17342] loop4: partition table partially beyond EOD, truncated
[  296.983241][T17355] [U] �
[  297.008046][T17360] Bluetooth: MGMT ver 1.23
[  297.034537][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  297.124561][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  297.192961][T17369] PID 17369 killed due to inadequate hugepage pool
[  297.238744][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'.
[  297.441930][T17402] kernel read not supported for file /eth0 (pid: 17402 comm: syz.1.5032)
[  297.446254][   T40] kauditd_printk_skb: 152 callbacks suppressed
[  297.446272][   T40] audit: type=1800 audit(2000000485.660:1940): pid=17402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5032" name="eth0" dev="mqueue" ino=80035 res=0 errno=0
[  298.074652][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  298.164688][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  298.269419][T17468] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  298.401801][T17484] loop2: detected capacity change from 0 to 7
[  298.405585][T17484] Dev loop2: unable to read RDB block 7
[  298.407522][T17484]  loop2: AHDI p1 p2 p3
[  298.408971][T17484] loop2: partition table partially beyond EOD, truncated
[  298.411555][T17484] loop2: p1 start 1601398130 is beyond EOD, truncated
[  298.414256][T17484] loop2: p2 start 1702059890 is beyond EOD, truncated
[  298.679544][T17512] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5078'.
[  299.080663][T17540] netlink: 'syz.4.5093': attribute type 1 has an invalid length.
[  299.124561][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  299.194556][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  300.021526][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'.
[  300.164548][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  300.234759][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  300.405144][ T5988] Bluetooth: hci4: command 0x1003 tx timeout
[  300.406114][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  300.930057][T17630] vlan3: entered allmulticast mode
[  300.932629][T17630] bond0: entered allmulticast mode
[  301.194558][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  301.285021][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  301.320977][T17652] vlan3: entered allmulticast mode
[  301.561257][T17659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5146'.
[  301.619041][T17663] vlan0: entered allmulticast mode
[  301.761802][T17670] lo speed is unknown, defaulting to 1000
[  301.797189][T17674] netlink: 'syz.0.5152': attribute type 1 has an invalid length.
[  301.799603][T17674] netlink: 'syz.0.5152': attribute type 2 has an invalid length.
[  302.244586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  302.324740][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  302.444588][   T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  302.626468][   T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.630822][   T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.634884][   T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  302.640022][   T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  302.643703][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.649496][   T34] usb 9-1: config 0 descriptor??
[  302.901989][T17709] lo speed is unknown, defaulting to 1000
[  302.942788][T17710] netlink: 'syz.1.5169': attribute type 1 has an invalid length.
[  302.946233][T17710] netlink: 'syz.1.5169': attribute type 2 has an invalid length.
[  303.068789][   T34] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  303.095680][T17717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  303.274541][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  303.328729][ T7247] usb 9-1: USB disconnect, device number 13
[  303.354752][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  303.497333][T17728] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  303.954869][ T6040] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  304.126350][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.130740][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.134865][ T6040] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.139781][ T6040] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.143735][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.149333][ T6040] usb 6-1: config 0 descriptor??
[  304.247632][T17740] lo speed is unknown, defaulting to 1000
[  304.280803][T17743] netlink: 'syz.3.5181': attribute type 1 has an invalid length.
[  304.284056][T17743] netlink: 'syz.3.5181': attribute type 2 has an invalid length.
[  304.314780][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  304.404543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  304.522103][T17767] loop4: detected capacity change from 0 to 7
[  304.525971][T17767] Dev loop4: unable to read RDB block 7
[  304.528010][T17767]  loop4: AHDI p1
[  304.529287][T17767] loop4: partition table partially beyond EOD, truncated
[  304.570907][ T6040] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  304.634681][T17773] pim6reg1: entered promiscuous mode
[  304.636942][T17773] pim6reg1: entered allmulticast mode
[  304.699388][T17775] lo speed is unknown, defaulting to 1000
[  304.729157][T17777] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5200'.
[  304.737685][T17778] netlink: 'syz.3.5199': attribute type 1 has an invalid length.
[  304.741177][T17778] netlink: 'syz.3.5199': attribute type 2 has an invalid length.
[  304.932914][T17791] can0: slcan on ptm0.
[  304.995927][T17789] can0 (unregistered): slcan off ptm0.
[  305.354581][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  305.388478][T17811] lo speed is unknown, defaulting to 1000
[  305.434595][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  305.463802][T17811] netlink: 'syz.3.5213': attribute type 1 has an invalid length.
[  305.466809][T17811] netlink: 'syz.3.5213': attribute type 2 has an invalid length.
[  306.395094][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  306.484550][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  306.660636][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5221'.
[  306.924752][   T34] usb 6-1: reset high-speed USB device number 29 using dummy_hcd
[  306.936103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  306.939543][   T34] usb 6-1: device reset changed ep0 maxpacket size!
[  306.948736][ T7247] usb 6-1: USB disconnect, device number 29
[  306.961167][T17847] Invalid ELF header magic: != ELF
[  307.094666][ T7247] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  307.144748][T17875] syzkaller1: entered promiscuous mode
[  307.146698][T17875] syzkaller1: entered allmulticast mode
[  307.244662][ T7247] usb 6-1: Using ep0 maxpacket: 8
[  307.248580][ T7247] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  307.251740][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  307.256456][ T7247] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  307.261293][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  307.265818][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  307.272114][ T7247] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  307.275608][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  307.280198][ T7247] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  307.285637][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  307.290100][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  307.295857][ T7247] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  307.298827][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  307.303440][ T7247] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  307.309010][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  307.314153][ T7247] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  307.322571][ T7247] usb 6-1: string descriptor 0 read error: -22
[  307.330033][ T7247] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  307.334166][ T7247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.342089][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5238'.
[  307.347940][ T7247] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  307.395413][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5240'.
[  307.399315][T17891] netlink: 'syz.4.5240': attribute type 7 has an invalid length.
[  307.402465][T17891] netlink: 'syz.4.5240': attribute type 8 has an invalid length.
[  307.405815][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'.
[  307.434598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  307.524520][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  307.549653][ T5406] usb 6-1: USB disconnect, device number 30
[  308.219138][ T6040] kernel read not supported for file /dsp1 (pid: 6040 comm: kworker/1:4)
[  308.484615][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  308.554734][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  309.514514][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  309.594671][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  310.554621][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  310.621594][T13207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.625067][T13207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  310.634580][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  310.702083][T13207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.705940][T13207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  310.791287][T13207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.795071][T13207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  310.925931][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.929755][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.933604][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.937310][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.940981][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.948253][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.951056][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.953645][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.963901][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.967731][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.969799][T13207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.974291][T13207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  310.993412][T18030] lo speed is unknown, defaulting to 1000
[  311.093776][T18030] chnl_net:caif_netlink_parms(): no params data found
[  311.124024][T13207] veth0_to_bridge: left allmulticast mode
[  311.126204][T13207] veth0_to_bridge: left promiscuous mode
[  311.128060][T13207] bridge0: port 1(veth0_to_bridge) entered disabled state
[  311.375667][T13207] bond0 (unregistering): left promiscuous mode
[  311.378547][T13207] bond0 (unregistering): Released all slaves
[  311.429256][T18030] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.433026][T18030] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.435471][T18030] bridge_slave_0: entered allmulticast mode
[  311.438801][T18030] bridge_slave_0: entered promiscuous mode
[  311.445843][T18030] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.448988][T18030] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.452056][T18030] bridge_slave_1: entered allmulticast mode
[  311.456065][T18030] bridge_slave_1: entered promiscuous mode
[  311.460733][T13207] tipc: Disabling bearer <udp:s>
[  311.467271][T13207] tipc: Left network mode
[  311.500775][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.508538][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.562022][T18030] team0: Port device team_slave_0 added
[  311.567143][T18030] team0: Port device team_slave_1 added
[  311.602745][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.605361][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.613574][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.633304][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.635752][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.644727][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.674512][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  311.703315][T18030] hsr_slave_0: entered promiscuous mode
[  311.705794][T18030] hsr_slave_1: entered promiscuous mode
[  311.707955][T18030] debugfs: 'hsr0' already exists in 'hsr'
[  311.710139][T18030] Cannot create hsr debugfs directory
[  311.714336][T13207] dummy0: left promiscuous mode
[  311.720970][T13207] hsr_slave_0: left promiscuous mode
[  311.723122][T13207] hsr_slave_1: left promiscuous mode
[  312.724571][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  313.034621][ T5976] Bluetooth: hci2: command tx timeout
[  313.178188][T18030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  313.201077][T18030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  313.206356][T18030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  313.210568][T18030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  313.253991][T18030] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.265948][T18030] 8021q: adding VLAN 0 to HW filter on device team0
[  313.273671][T13203] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.276779][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.286266][T13244] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.288566][T13244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.297420][T13207] IPVS: stop unused estimator thread 0...
[  313.418884][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.579760][T18030] veth0_vlan: entered promiscuous mode
[  313.584519][T18030] veth1_vlan: entered promiscuous mode
[  313.601825][T18030] veth0_macvtap: entered promiscuous mode
[  313.606946][T18030] veth1_macvtap: entered promiscuous mode
[  313.616688][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.622686][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.629152][T13244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.632113][T13244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.636252][T13244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.639071][T13244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.685413][T13244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.688677][T13244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.709682][T13206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.712727][T13206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.754594][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  313.772815][T18056] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  313.840339][T18067] input: syz1 as /devices/virtual/input/input67
[  313.946093][ T6040] kernel read not supported for file /dsp1 (pid: 6040 comm: kworker/1:4)
[  314.070728][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5317'.
[  314.151421][T18099] lo speed is unknown, defaulting to 1000
[  314.448508][T18126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5333'.
[  314.735347][T18143] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63
[  314.804616][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  315.037221][T18168] ALSA: mixer_oss: invalid OSS volume ''
[  315.114651][ T5976] Bluetooth: hci2: command tx timeout
[  315.834534][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  316.376012][T18209] lo speed is unknown, defaulting to 1000
[  316.650275][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  316.652733][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  316.876158][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  316.944578][ T2095] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  317.094624][ T6059] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  317.106104][ T2095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.110463][ T2095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.114651][ T2095] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  317.119899][ T2095] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  317.123524][ T2095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.128721][ T2095] usb 10-1: config 0 descriptor??
[  317.194750][ T5976] Bluetooth: hci2: command tx timeout
[  317.244692][ T6059] usb 6-1: Using ep0 maxpacket: 16
[  317.247884][ T6059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.251634][ T6059] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  317.255155][ T6059] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  317.259190][ T6059] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  317.262025][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.265845][ T6059] usb 6-1: config 0 descriptor??
[  317.269884][ T6059] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input68
[  317.353992][T18253] ALSA: mixer_oss: invalid OSS volume ''
[  317.523442][ T5369] bcm5974 6-1:0.0: could not read from device
[  317.523927][   T24] usb 6-1: USB disconnect, device number 31
[  317.560423][ T2095] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  317.914771][    C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  318.594392][T18307] 9pnet: p9_errstr2errno: server reported unknown error �(c�F	S+���v3��q�f�
[  318.744269][T18316] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  318.748607][T18316] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  318.911279][T18320] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  318.964552][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  319.190713][T18338] sctp: [Deprecated]: syz.1.5426 (pid 18338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.190713][T18338] Use struct sctp_sack_info instead
[  319.233092][T18340] overlayfs: upper fs does not support file handles, falling back to index=off.
[  319.237066][T18340] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  319.275247][ T5976] Bluetooth: hci2: command tx timeout
[  319.677134][ T6040] usb 10-1: USB disconnect, device number 2
[  319.854612][ T1021] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  320.004514][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  320.036100][ T1021] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  320.040433][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.044019][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.048444][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.052056][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.055926][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.060307][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.064003][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.067802][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.072038][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.077329][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.080160][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.083613][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.086881][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.089649][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.092974][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.095982][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.098973][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.102800][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.106463][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.109605][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.113304][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.116838][ T1021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.120009][ T1021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.124550][ T1021] usb 9-1: config 0 interface 0 has no altsetting 0
[  320.128890][ T1021] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  320.132592][ T1021] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  320.135766][ T1021] usb 9-1: Product: syz
[  320.137199][ T1021] usb 9-1: Manufacturer: syz
[  320.139242][ T1021] usb 9-1: SerialNumber: syz
[  320.142612][ T1021] usb 9-1: config 0 descriptor??
[  320.146940][ T1021] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  320.349332][ T6040] usb 9-1: USB disconnect, device number 14
[  320.352653][ T6040] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  320.450800][T18400] tipc: Started in network mode
[  320.452858][T18400] tipc: Node identity 4, cluster identity 4711
[  320.455447][T18400] tipc: Node number set to 4
[  320.493550][T18402] input: syz0 as /devices/virtual/input/input69
[  320.774829][ T7247] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  320.908004][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5464'.
[  320.936361][ T7247] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  320.940249][ T7247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  320.944790][ T7247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  320.948503][ T7247] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  320.953768][ T7247] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.970111][ T7247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.976066][ T7247] usb 10-1: config 0 descriptor??
[  321.044531][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  321.098363][T18439] input: syz0 as /devices/virtual/input/input70
[  321.136431][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5474'.
[  321.206172][T18446] input input71: cannot allocate more than FF_MAX_EFFECTS effects
[  321.262751][T18450] netfs: Couldn't get user pages (rc=-14)
[  321.395478][ T7247] plantronics 0003:047F:FFFF.0032: ignoring exceeding usage max
[  321.401250][ T7247] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  321.406975][T18460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input72
[  322.074638][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  323.114576][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  323.148897][T18559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input73
[  323.254095][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5528'.
[  323.385500][T10234] usb 10-1: USB disconnect, device number 3
[  323.491103][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5534'.
[  323.647963][T18597] bond0: entered promiscuous mode
[  323.650147][T18597] bond_slave_0: entered promiscuous mode
[  323.652734][T18597] bond_slave_1: entered promiscuous mode
[  323.656473][T18597] batadv0: entered promiscuous mode
[  323.659032][T18597] hsr1: entered allmulticast mode
[  323.660728][T18597] bond0: entered allmulticast mode
[  323.662334][T18597] bond_slave_0: entered allmulticast mode
[  323.664117][T18597] bond_slave_1: entered allmulticast mode
[  323.666161][T18597] batadv0: entered allmulticast mode
[  323.668039][T18597] 8021q: adding VLAN 0 to HW filter on device hsr1
[  323.672682][T18597] bond0: left promiscuous mode
[  323.674267][T18597] bond_slave_0: left promiscuous mode
[  323.678066][T18597] bond_slave_1: left promiscuous mode
[  323.682210][T18597] batadv0: left promiscuous mode
[  324.013657][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5549'.
[  324.154586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  324.293684][T18640] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  324.804711][ T1021] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  324.814595][ T6040] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  324.954776][ T1021] usb 9-1: Using ep0 maxpacket: 16
[  324.958424][ T1021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.962826][ T1021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.966444][ T6040] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  324.966838][ T1021] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  324.971721][ T6040] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  324.976068][ T1021] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  324.976085][ T1021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.977262][ T1021] usb 9-1: config 0 descriptor??
[  324.981381][ T6040] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  324.997269][ T6040] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  325.002870][ T6040] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  325.007246][ T6040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.013081][ T6040] usb 10-1: config 0 descriptor??
[  325.016409][T18651] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  325.194599][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  325.367253][T18659] bond0: entered promiscuous mode
[  325.370504][T18659] batadv0: entered promiscuous mode
[  325.373054][T18659] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  325.376685][T18659] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  325.380406][T18659] hsr1: entered allmulticast mode
[  325.382178][T18659] batadv0: entered allmulticast mode
[  325.384370][T18659] 8021q: adding VLAN 0 to HW filter on device hsr1
[  325.387503][T18659] bond0: left promiscuous mode
[  325.389667][T18659] batadv0: left promiscuous mode
[  325.393145][ T1021] shield 0003:0955:7214.0033: unknown main item tag 0x0
[  325.397732][ T1021] shield 0003:0955:7214.0033: unknown main item tag 0x0
[  325.400816][ T1021] shield 0003:0955:7214.0033: unknown main item tag 0x0
[  325.403697][ T1021] shield 0003:0955:7214.0033: unknown main item tag 0x0
[  325.406956][ T1021] shield 0003:0955:7214.0033: unknown main item tag 0x0
[  325.412471][ T1021] input: HID 0955:7214 Haptics as /devices/virtual/input/input74
[  325.422267][ T1021] shield 0003:0955:7214.0033: Registered Thunderstrike controller
[  325.424951][ T1021] shield 0003:0955:7214.0033: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  325.430740][ T6040] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd
[  325.437242][ T6040] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  325.594108][T18648] netlink: 'syz.4.5563': attribute type 2 has an invalid length.
[  325.598092][T18648] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5563'.
[  325.602938][ T6059] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  325.603098][   T34] usb 9-1: USB disconnect, device number 15
[  325.606931][ T6059] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  325.606979][ T6059] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  325.607005][ T6059] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  325.614477][T18646] comedi comedi2: reset error (fatal)
[  325.688542][T10234] usb 10-1: USB disconnect, device number 4
[  326.236910][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  327.064819][T18712] 9pnet: p9_errstr2errno: server reported unknown error �@��0x0000000000000004
[  327.274575][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  327.541893][   T40] audit: type=1326 audit(2000000515.750:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18762 comm="syz.4.5616" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e579 code=0x0
[  327.636969][ T7244] kernel read not supported for file /media0 (pid: 7244 comm: kworker/0:7)
[  327.927216][T18795] syzkaller1: entered promiscuous mode
[  327.929056][T18795] syzkaller1: entered allmulticast mode
[  327.976647][T18799] input: syz1 as /devices/virtual/input/input76
[  328.015504][   T60] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  328.176302][   T60] usb 10-1: Using ep0 maxpacket: 8
[  328.180113][   T60] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  328.183269][   T60] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  328.187186][   T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  328.190887][   T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  328.194932][   T60] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.200006][   T60] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  328.203604][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.314667][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  328.416470][   T60] usb 10-1: usb_control_msg returned -32
[  328.418826][   T60] usbtmc 10-1:16.0: can't read capabilities
[  328.727300][   T40] audit: type=1326 audit(2000000516.940:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18853 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  328.733965][   T40] audit: type=1326 audit(2000000516.940:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18853 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  328.741250][   T40] audit: type=1326 audit(2000000516.940:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18853 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  328.748005][   T40] audit: type=1326 audit(2000000516.940:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18853 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  328.757054][   T40] audit: type=1326 audit(2000000516.940:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18853 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  328.908786][T18866] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  328.911276][T18866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  328.916023][T18866] vhci_hcd vhci_hcd.0: Device attached
[  328.921782][T18867] usbip_core: unknown command
[  328.923477][T18867] vhci_hcd: unknown pdu 0
[  328.924952][T18867] usbip_core: unknown command
[  328.926916][T13244] vhci_hcd: stop threads
[  328.928440][T13244] vhci_hcd: release socket
[  328.929877][T13244] vhci_hcd: disconnect device
[  329.354669][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  330.404526][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  330.475857][T18893] syzkaller1: entered promiscuous mode
[  330.477715][T18893] syzkaller1: entered allmulticast mode
[  330.768226][ T2095] usb 10-1: USB disconnect, device number 5
[  330.864968][ T7244] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  331.014668][ T7244] usb 9-1: Using ep0 maxpacket: 8
[  331.018343][ T7244] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  331.022250][ T7244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  331.026265][ T7244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  331.030242][ T7244] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  331.039056][ T7244] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  331.042694][ T7244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.255771][ T7244] usb 9-1: GET_CAPABILITIES returned 0
[  331.257770][ T7244] usbtmc 9-1:16.0: can't read capabilities
[  331.434569][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  331.462850][ T2095] usb 9-1: USB disconnect, device number 16
[  331.834673][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  331.836226][ T5988] Bluetooth: hci4: command 0x1003 tx timeout
[  332.310012][T18955] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  332.432709][   T40] audit: type=1326 audit(2000000520.640:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18969 comm="syz.5.5710" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0
[  332.474593][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  332.974664][T10234] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  333.134559][T10234] usb 6-1: Using ep0 maxpacket: 8
[  333.139040][T10234] usb 6-1: config 0 interface 0 has no altsetting 0
[  333.141803][T10234] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  333.144944][T10234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.150783][T10234] usb 6-1: config 0 descriptor??
[  333.294278][T18994] input input77: cannot allocate more than FF_MAX_EFFECTS effects
[  333.304566][ T6059] delete_channel: no stack
[  333.514562][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  333.572982][T10234] mcp2221 0003:04D8:00DD.0035: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  333.618117][   T60] kernel write not supported for file /sequencer2 (pid: 60 comm: kworker/3:1)
[  333.773099][ T7247] usb 6-1: USB disconnect, device number 33
[  334.554532][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  334.622631][T19076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5759'.
[  334.645947][T19077] block nbd5: shutting down sockets
[  335.082072][T19101] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  335.117443][   T40] audit: type=1326 audit(2000000523.330:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.125774][   T40] audit: type=1326 audit(2000000523.330:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.133350][   T40] audit: type=1326 audit(2000000523.330:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.141437][   T40] audit: type=1326 audit(2000000523.330:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.150095][   T40] audit: type=1326 audit(2000000523.330:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.158511][   T40] audit: type=1326 audit(2000000523.330:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.166633][   T40] audit: type=1326 audit(2000000523.330:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.172197][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5774'.
[  335.173884][   T40] audit: type=1326 audit(2000000523.330:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.177557][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5774'.
[  335.184208][   T40] audit: type=1326 audit(2000000523.330:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.184237][   T40] audit: type=1326 audit(2000000523.330:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.4.5751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000
[  335.524692][ T7247] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  335.604811][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  335.636393][T19139] netlink: 'syz.5.5790': attribute type 10 has an invalid length.
[  335.677018][ T7247] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.680531][ T7247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  335.683986][ T7247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  335.687930][ T7247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  335.691896][ T7247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  335.695139][ T7247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.701519][ T7247] usb 6-1: config 0 descriptor??
[  336.111966][ T7247] plantronics 0003:047F:FFFF.0036: ignoring exceeding usage max
[  336.118331][ T7247] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  336.138666][T19166] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  336.184874][T19170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  336.644510][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  336.709525][T19200] block nbd4: shutting down sockets
[  336.766746][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'.
[  336.956404][T19217] netlink: 'syz.3.5824': attribute type 2 has an invalid length.
[  337.054588][T10234] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  337.096458][T19227] block nbd3: shutting down sockets
[  337.226079][T10234] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.230564][T10234] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.233573][T10234] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  337.237843][T10234] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  337.240707][T10234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.245021][T10234] usb 9-1: config 0 descriptor??
[  337.392429][T19243] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5836'.
[  337.659627][T10234] plantronics 0003:047F:FFFF.0037: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  337.674614][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  337.925936][  T840] usb 9-1: USB disconnect, device number 17
[  338.049361][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5843'.
[  338.225065][ T7247] usb 6-1: USB disconnect, device number 34
[  338.453176][ T6040] kernel write not supported for file /sg0 (pid: 6040 comm: kworker/1:4)
[  338.513658][T19308] kvm: user requested TSC rate below hardware speed
[  338.714662][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  339.024699][T10234] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  339.197366][T10234] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  339.202413][T10234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  339.207266][T10234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  339.211347][T10234] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  339.216835][T10234] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  339.220769][T10234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.226783][T10234] usb 10-1: config 0 descriptor??
[  339.457033][ T2095] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  339.606190][ T2095] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  339.609790][ T2095] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  339.612923][ T2095] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  339.615985][ T2095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.620570][T19346] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  339.625440][ T2095] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  339.636125][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.639290][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.642430][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.645981][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.649281][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.652522][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.655696][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.658796][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.661878][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.665071][T10234] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  339.671510][T10234] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  339.754588][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  339.864897][T10234] usb 9-1: USB disconnect, device number 18
[  339.896339][ T7247] usb 10-1: USB disconnect, device number 6
[  340.070208][T19352] loop7: detected capacity change from 0 to 7
[  340.072886][T19352] Dev loop7: unable to read RDB block 7
[  340.075433][T19352]  loop7: unable to read partition table
[  340.077667][T19352] loop7: partition table beyond EOD, truncated
[  340.079947][T19352] loop_reread_partitions: partition scan of loop7 (�被x������ ) failed (rc=-5)
[  340.514609][ T7246] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  340.654633][ T6040] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  340.664728][ T7246] usb 6-1: Using ep0 maxpacket: 16
[  340.668811][ T7246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.673525][ T7246] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  340.681381][ T7246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.686892][ T7246] usb 6-1: config 0 descriptor??
[  340.794547][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  340.804617][ T6040] usb 9-1: Using ep0 maxpacket: 16
[  340.809027][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.813739][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.819122][ T6040] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  340.823249][ T6040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.829669][ T6040] usb 9-1: config 0 descriptor??
[  341.099351][ T7246] kye 0003:0458:5016.0039: control desc unexpectedly large
[  341.103511][ T7246] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5016.0039/input/input79
[  341.109407][ T7246] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5016.0039/input/input80
[  341.170915][ T7246] kye 0003:0458:5016.0039: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0
[  341.245994][ T6040] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.003A/input/input81
[  341.299976][ T2095] usb 6-1: USB disconnect, device number 35
[  341.307434][ T6040] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.003A/input/input82
[  341.372043][ T6040] kye 0003:0458:5012.003A: input,hiddev1,hidraw2: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0
[  341.441484][ T7244] usb 9-1: USB disconnect, device number 19
[  341.844517][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  342.247600][ T2095] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  342.406991][ T2095] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  342.409692][ T2095] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  342.414084][ T2095] usb 9-1: config 0 interface 0 has no altsetting 0
[  342.420095][ T2095] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  342.422903][ T2095] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  342.425588][ T2095] usb 9-1: Product: syz
[  342.427015][ T2095] usb 9-1: Manufacturer: syz
[  342.428498][ T2095] usb 9-1: SerialNumber: syz
[  342.431364][ T2095] usb 9-1: config 0 descriptor??
[  342.434176][ T2095] hub 9-1:0.0: bad descriptor, ignoring hub
[  342.437797][ T2095] hub 9-1:0.0: probe with driver hub failed with error -5
[  342.441876][ T2095] usb 9-1: selecting invalid altsetting 0
[  342.875027][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  343.239005][   T40] kauditd_printk_skb: 58 callbacks suppressed
[  343.239017][   T40] audit: type=1326 audit(2000000531.450:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19437 comm="syz.3.5925" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000
[  343.299039][T19456] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5932'.
[  343.344603][T19401] usb 9-1: reset high-speed USB device number 20 using dummy_hcd
[  343.914538][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  343.946232][ T2095] usb 9-1: USB disconnect, device number 20
[  344.039315][T19516] loop7: detected capacity change from 0 to 7
[  344.158482][T19516] Dev loop7: unable to read RDB block 7
[  344.160807][T19516]  loop7: unable to read partition table
[  344.162445][    C2] blk_print_req_error: 2 callbacks suppressed
[  344.162460][    C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  344.163007][T19516] loop7: partition table beyond EOD, 
[  344.164968][    C2] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  344.173022][T19516] truncated
[  344.174038][T19516] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  344.295809][T19523] binder: 19522:19523 ioctl c0306201 0 returned -14
[  344.954564][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  345.293970][T19569] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5982'.
[  345.529473][T19590] loop7: detected capacity change from 0 to 7
[  345.531880][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.534990][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.538136][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.541551][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.545144][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.548058][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.550747][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.553641][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.556606][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.560250][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.562948][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.565890][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.568927][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.571915][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.574591][T19590] ldm_validate_partition_table(): Disk read failed.
[  345.577027][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.579940][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.584554][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  345.588754][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  345.591676][T19590] Dev loop7: unable to read RDB block 0
[  345.596153][T19590]  loop7: unable to read partition table
[  345.598222][T19590] loop7: partition table beyond EOD, truncated
[  345.600616][T19590] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  345.763700][T19602] Trying to write to read-only block-device nullb0
[  346.004582][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  346.444668][  T840] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  346.606641][T19651] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6018'.
[  346.614583][  T840] usb 6-1: Using ep0 maxpacket: 16
[  346.618948][  T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.623330][  T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.627370][  T840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  346.632529][  T840] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  346.636321][  T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.642639][  T840] usb 6-1: config 0 descriptor??
[  347.034564][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  347.053709][  T840] hid_parser_main: 5 callbacks suppressed
[  347.053722][  T840] shield 0003:0955:7214.003B: unknown main item tag 0x0
[  347.058181][  T840] shield 0003:0955:7214.003B: unknown main item tag 0x0
[  347.060333][  T840] shield 0003:0955:7214.003B: unknown main item tag 0x0
[  347.062532][  T840] shield 0003:0955:7214.003B: unknown main item tag 0x0
[  347.065145][  T840] shield 0003:0955:7214.003B: unknown main item tag 0x0
[  347.068925][  T840] input: HID 0955:7214 Haptics as /devices/virtual/input/input83
[  347.076526][  T840] shield 0003:0955:7214.003B: Registered Thunderstrike controller
[  347.079153][  T840] shield 0003:0955:7214.003B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  347.256520][  T840] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  347.256634][ T1021] usb 6-1: USB disconnect, device number 36
[  347.264594][  T840] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  347.269315][  T840] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  347.272744][  T840] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  347.544555][   T34] usb 9-1: new low-speed USB device number 21 using dummy_hcd
[  347.689055][T19689] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  347.706068][   T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  347.708770][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  347.712194][   T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  347.717421][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  347.722497][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  347.727879][   T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  347.730204][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  347.733449][   T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  347.737287][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  347.741525][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  347.746196][   T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  347.749414][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  347.752790][   T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  347.756571][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  347.760123][   T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  347.767646][   T34] usb 9-1: string descriptor 0 read error: -22
[  347.769936][   T34] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  347.773762][   T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.780061][   T34] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  347.988781][   T34] usb 9-1: USB disconnect, device number 21
[  348.073302][T19719] bridge_slave_0: left allmulticast mode
[  348.075421][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  348.078460][T19719] bridge_slave_0: left promiscuous mode
[  348.081021][T19719] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.089975][T19719] bridge_slave_1: left allmulticast mode
[  348.091849][T19719] bridge_slave_1: left promiscuous mode
[  348.093755][T19719] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.102862][T19719] bond0: (slave bond_slave_0): Releasing backup interface
[  348.106672][T19719] bond_slave_0: left allmulticast mode
[  348.110306][T19719] bond0: (slave bond_slave_1): Releasing backup interface
[  348.113270][T19719] bond_slave_1: left allmulticast mode
[  348.118546][T19719] team0: Port device team_slave_0 removed
[  348.123637][T19719] team0: Port device team_slave_1 removed
[  348.127032][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.129394][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.132501][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.134955][T19719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.200074][   T40] audit: type=1326 audit(2000000536.410:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.208690][   T40] audit: type=1326 audit(2000000536.410:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.217149][   T40] audit: type=1326 audit(2000000536.410:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.223878][   T40] audit: type=1326 audit(2000000536.410:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.231049][   T40] audit: type=1326 audit(2000000536.410:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.238955][   T40] audit: type=1326 audit(2000000536.410:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.245799][   T40] audit: type=1326 audit(2000000536.410:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.252295][   T40] audit: type=1326 audit(2000000536.410:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.259331][   T40] audit: type=1326 audit(2000000536.420:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.266602][   T40] audit: type=1326 audit(2000000536.420:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.275216][   T40] audit: type=1326 audit(2000000536.420:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.282180][   T40] audit: type=1326 audit(2000000536.420:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.288808][   T40] audit: type=1326 audit(2000000536.420:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  348.295384][   T40] audit: type=1326 audit(2000000536.420:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.5.6052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  349.026510][T19785] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  349.084640][  T840] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  349.124612][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  349.235784][  T840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64
[  349.240720][  T840] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  349.243423][  T840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.246602][  T840] usb 10-1: Product: syz
[  349.248360][  T840] usb 10-1: Manufacturer: syz
[  349.250304][  T840] usb 10-1: SerialNumber: syz
[  349.253619][  T840] usb 10-1: config 0 descriptor??
[  349.670562][T10234] usb 10-1: USB disconnect, device number 7
[  349.716276][T19814] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  350.164513][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  350.325849][ T7247] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  350.474582][ T7247] usb 6-1: Using ep0 maxpacket: 8
[  350.477547][ T7247] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  350.480420][ T7247] usb 6-1: config 179 has no interface number 0
[  350.482509][ T7247] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  350.486463][ T7247] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  350.489935][ T7247] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  350.493463][ T7247] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  350.497310][ T7247] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  350.502040][ T7247] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  350.505005][ T7247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.509305][T19833] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  350.723600][ T7247] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input84
[  350.860190][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6111'.
[  350.923194][ T7247] usb 6-1: USB disconnect, device number 37
[  350.925255][    C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  350.925286][    C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  350.931615][T19861] syzkaller1: entered promiscuous mode
[  350.933976][T19861] syzkaller1: entered allmulticast mode
[  350.943073][T19861] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 6
[  351.204502][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  351.548787][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'.
[  352.244548][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  352.589682][  T840] kernel write not supported for file /sg0 (pid: 840 comm: kworker/2:2)
[  352.659570][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6146'.
[  352.693497][T19939] syzkaller1: entered promiscuous mode
[  352.696197][   T40] audit: type=1326 audit(2000000540.910:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.1.6148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  352.696226][   T40] audit: type=1326 audit(2000000540.910:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.1.6148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000
[  352.711089][T19939] syzkaller1: entered allmulticast mode
[  353.114660][T10234] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  353.258674][T19973] input: syz1 as /devices/virtual/input/input85
[  353.266273][T10234] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  353.268952][T10234] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  353.272105][T10234] usb 6-1: config 0 interface 0 has no altsetting 0
[  353.274523][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  353.278887][T10234] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  353.282625][T10234] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  353.285877][T10234] usb 6-1: Product: syz
[  353.287334][T10234] usb 6-1: Manufacturer: syz
[  353.288843][T10234] usb 6-1: SerialNumber: syz
[  353.291527][T10234] usb 6-1: config 0 descriptor??
[  353.294147][T10234] hub 6-1:0.0: bad descriptor, ignoring hub
[  353.296163][T10234] hub 6-1:0.0: probe with driver hub failed with error -5
[  353.301354][T10234] usb 6-1: selecting invalid altsetting 0
[  353.329892][T19977] : Can't lookup blockdev
[  353.914982][T19955] usb 6-1: reset high-speed USB device number 38 using dummy_hcd
[  354.314572][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  354.363392][T19991] syzkaller1: entered promiscuous mode
[  354.365839][T19991] syzkaller1: entered allmulticast mode
[  354.514888][ T6040] usb 6-1: USB disconnect, device number 38
[  354.627434][T20003] syzkaller1: entered promiscuous mode
[  354.629629][T20003] syzkaller1: entered allmulticast mode
[  354.727602][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6182'.
[  354.895182][T20034] lo speed is unknown, defaulting to 1000
[  354.970358][T20034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6192'.
[  354.976504][T20034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6192'.
[  355.354583][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  355.447173][T20092] input: syz1 as /devices/virtual/input/input86
[  355.519283][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.164744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  356.185542][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  356.185553][   T40] audit: type=1326 audit(2000000544.390:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  356.198818][   T40] audit: type=1326 audit(2000000544.410:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000
[  356.211032][   T40] audit: type=1326 audit(2000000544.410:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  356.218156][   T40] audit: type=1326 audit(2000000544.420:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000
[  356.226529][   T40] audit: type=1326 audit(2000000544.420:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000
[  356.234914][   T40] audit: type=1326 audit(2000000544.420:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  356.243449][   T40] audit: type=1326 audit(2000000544.420:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  356.252323][   T40] audit: type=1326 audit(2000000544.420:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000
[  356.261933][   T40] audit: type=1326 audit(2000000544.420:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000
[  356.269459][   T40] audit: type=1326 audit(2000000544.420:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20111 comm="syz.5.6225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000
[  356.404233][T20132] netlink: 'syz.5.6235': attribute type 3 has an invalid length.
[  356.404523][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  356.435331][T20136] GUP no longer grows the stack in syz.5.6238 (20136): 80004000-8000a000 (80002000)
[  356.439050][T20136] CPU: 3 UID: 0 PID: 20136 Comm: syz.5.6238 Not tainted syzkaller #0 PREEMPT(full) 
[  356.439067][T20136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  356.439078][T20136] Call Trace:
[  356.439082][T20136]  <TASK>
[  356.439087][T20136]  dump_stack_lvl+0x16c/0x1f0
[  356.439106][T20136]  gup_vma_lookup+0x1d2/0x220
[  356.439168][T20136]  __get_user_pages+0x243/0x34a0
[  356.439189][T20136]  ? find_held_lock+0x2b/0x80
[  356.439201][T20136]  ? __pfx___get_user_pages+0x10/0x10
[  356.439223][T20136]  get_user_pages_remote+0x243/0xab0
[  356.439240][T20136]  ? mas_parent_gap+0x6f0/0x7b0
[  356.439255][T20136]  ? __pfx_get_user_pages_remote+0x10/0x10
[  356.439274][T20136]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  356.439330][T20136]  __access_remote_vm+0x24d/0x850
[  356.439356][T20136]  ? do_raw_spin_lock+0x12c/0x2b0
[  356.439378][T20136]  ? __pfx___access_remote_vm+0x10/0x10
[  356.439397][T20136]  proc_pid_cmdline_read+0x4de/0x8e0
[  356.439412][T20136]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  356.439426][T20136]  ? rw_verify_area+0xcf/0x6c0
[  356.439438][T20136]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  356.439449][T20136]  vfs_readv+0x5c1/0x8b0
[  356.439466][T20136]  ? __pfx_vfs_readv+0x10/0x10
[  356.439490][T20136]  ? __fget_files+0x20e/0x3c0
[  356.439506][T20136]  ? do_preadv+0x1a6/0x270
[  356.439516][T20136]  do_preadv+0x1a6/0x270
[  356.439528][T20136]  ? __pfx_do_preadv+0x10/0x10
[  356.439540][T20136]  ? rcu_is_watching+0x12/0xc0
[  356.439553][T20136]  __do_fast_syscall_32+0x7c/0x3a0
[  356.439572][T20136]  do_fast_syscall_32+0x32/0x80
[  356.439589][T20136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  356.439604][T20136] RIP: 0023:0xf7f63579
[  356.439614][T20136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  356.439625][T20136] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 000000000000014d
[  356.439636][T20136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  356.439643][T20136] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000
[  356.439649][T20136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  356.439655][T20136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  356.439661][T20136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  356.439674][T20136]  </TASK>
[  357.319589][T20193] netlink: 'syz.3.6262': attribute type 3 has an invalid length.
[  357.434587][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  357.645837][T20216] lo speed is unknown, defaulting to 1000
[  357.730009][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6271'.
[  357.734032][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6271'.
[  357.777870][T20225] loop7: detected capacity change from 0 to 7
[  357.816984][T20227] netlink: 'syz.1.6275': attribute type 3 has an invalid length.
[  357.911868][T20225] Dev loop7: unable to read RDB block 7
[  357.915245][T20225]  loop7: unable to read partition table
[  357.916152][    C0] blk_print_req_error: 7 callbacks suppressed
[  357.916166][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  357.917239][T20225] loop7: partition table beyond EOD, 
[  357.919110][    C0] buffer_io_error: 6 callbacks suppressed
[  357.919119][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  357.922003][T20225] truncated
[  357.922012][T20225] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  358.048728][T20244] netlink: 'syz.5.6289': attribute type 4 has an invalid length.
[  358.179410][T20257] lo speed is unknown, defaulting to 1000
[  358.217178][T20260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6285'.
[  358.274358][T20257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6285'.
[  358.474675][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  358.544671][ T7247] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  358.568229][T20288] smc: net device bond0 applied user defined pnetid SYZ2
[  358.698927][T20298] binder: 20297:20298 ioctl c0306201 800003c0 returned -14
[  358.714643][ T7247] usb 9-1: Using ep0 maxpacket: 8
[  358.717403][ T7247] usb 9-1: config 0 interface 0 has no altsetting 0
[  358.719389][ T7247] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  358.725040][ T7247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.728468][ T7247] usb 9-1: config 0 descriptor??
[  358.768221][  T840] IPVS: starting estimator thread 0...
[  358.864566][T20307] IPVS: using max 43 ests per chain, 103200 per kthread
[  358.960039][T20327] input: syz0 as /devices/virtual/input/input87
[  359.153991][ T7247] mcp2221 0003:04D8:00DD.003C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  359.356761][   T34] usb 9-1: USB disconnect, device number 22
[  359.409749][T20364] pim6reg1: entered promiscuous mode
[  359.411887][T20364] pim6reg1: entered allmulticast mode
[  359.514585][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  359.812137][T20390] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  359.819985][T20394] netlink: 'syz.5.6352': attribute type 2 has an invalid length.
[  359.822384][T20394] netlink: 85376 bytes leftover after parsing attributes in process `syz.5.6352'.
[  360.445842][T20421] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  360.564673][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  360.981585][T20444] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6372'.
[  361.325144][T20468] syzkaller1: entered promiscuous mode
[  361.327778][T20468] syzkaller1: entered allmulticast mode
[  361.462848][T20484] tls_set_device_offload: netdev not found
[  361.594747][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.636432][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6397'.
[  362.634548][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  363.220014][T20564] netlink: 'syz.1.6424': attribute type 10 has an invalid length.
[  363.231576][T20564] dummy0: entered promiscuous mode
[  363.233469][T20564] dummy0: entered allmulticast mode
[  363.674600][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  363.715458][T20590] input: syz1 as /devices/virtual/input/input89
[  363.857814][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6439'.
[  364.044789][ T7247] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  364.146875][T20625] input: syz1 as /devices/virtual/input/input90
[  364.195474][ T7247] usb 10-1: Using ep0 maxpacket: 8
[  364.198602][ T7247] usb 10-1: config 0 interface 0 has no altsetting 0
[  364.200823][ T7247] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  364.203594][ T7247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.207419][ T7247] usb 10-1: config 0 descriptor??
[  364.473952][T20639] binder: 20638:20639 ioctl c0306201 800003c0 returned -14
[  364.620998][ T7247] mcp2221 0003:04D8:00DD.003D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  364.724566][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  364.820170][ T2095] usb 10-1: USB disconnect, device number 8
[  364.841143][T20645] random: crng reseeded on system resumption
[  364.848274][T20648] kvm: user requested TSC rate below hardware speed
[  364.856514][T20648] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  365.284632][ T2095] usb 9-1: new low-speed USB device number 23 using dummy_hcd
[  365.437083][ T2095] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  365.440007][ T2095] usb 9-1: config 0 has no interface number 0
[  365.442017][ T2095] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  365.445700][ T2095] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  365.449684][ T2095] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  365.453169][ T2095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.457842][ T2095] usb 9-1: config 0 descriptor??
[  365.459930][T20666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  365.465931][ T2095] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  365.652111][T20690] netlink: 'syz.5.6477': attribute type 10 has an invalid length.
[  365.668726][ T2095] usb 9-1: USB disconnect, device number 23
[  365.669495][T20690] dummy0: entered allmulticast mode
[  365.764586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  366.070107][T20709] kvm: user requested TSC rate below hardware speed
[  366.075760][T20709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  366.322866][   T40] kauditd_printk_skb: 40 callbacks suppressed
[  366.322878][   T40] audit: type=1326 audit(2000000554.530:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.333585][   T40] audit: type=1326 audit(2000000554.540:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.347203][   T40] audit: type=1326 audit(2000000554.540:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.354273][   T40] audit: type=1326 audit(2000000554.540:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.364632][   T40] audit: type=1326 audit(2000000554.540:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.374629][   T40] audit: type=1326 audit(2000000554.540:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.382159][   T40] audit: type=1326 audit(2000000554.540:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.389062][   T40] audit: type=1326 audit(2000000554.540:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.396199][   T40] audit: type=1326 audit(2000000554.540:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702e598 code=0x7ffc0000
[  366.404524][   T40] audit: type=1326 audit(2000000554.540:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.3.6491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000
[  366.423730][T20723] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  366.804545][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  367.031003][T20676] Set syz1 is full, maxelem 65536 reached
[  367.112703][  T840] hid-generic 0000:0003:0000.003E: unknown main item tag 0x0
[  367.118804][  T840] hid-generic 0000:0003:0000.003E: unknown main item tag 0x0
[  367.131038][  T840] hid-generic 0000:0003:0000.003E: hidraw1: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  367.463656][T20782] openvswitch: netlink: IPv4 tun info is not correct
[  367.834877][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  368.099568][T20844] loop2: detected capacity change from 0 to 7
[  368.103748][T20844] Dev loop2: unable to read RDB block 7
[  368.106280][T20844]  loop2: unable to read partition table
[  368.108793][T20844] loop2: partition table beyond EOD, truncated
[  368.111369][T20844] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  368.161150][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6549'.
[  368.504785][T20876] dvmrp0: entered allmulticast mode
[  368.634633][T10234] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  368.797600][T10234] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  368.802371][T10234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  368.807114][T10234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  368.811729][T10234] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  368.817323][T10234] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  368.821217][T10234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.827856][T10234] usb 10-1: config 0 descriptor??
[  368.830744][T20872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  368.874565][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  369.246553][T10234] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xd
[  369.251761][T10234] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  369.435286][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6564'.
[  369.505956][  T840] usb 10-1: USB disconnect, device number 9
[  369.914565][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  370.388817][T20949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6589'.
[  370.394215][T20949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6589'.
[  370.397435][T20949] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  370.424671][ T2095] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  370.595469][T20955] lo speed is unknown, defaulting to 1000
[  370.600458][ T2095] usb 10-1: unable to get BOS descriptor or descriptor too short
[  370.604674][ T2095] usb 10-1: unable to read config index 0 descriptor/start: -71
[  370.608919][ T2095] usb 10-1: can't read configurations, error -71
[  370.887077][T20968] 
[  370.888174][T20968] =====================================================
[  370.890997][T20968] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  370.894016][T20968] syzkaller #0 Not tainted
[  370.896028][T20968] -----------------------------------------------------
[  370.900550][T20968] syz.4.6596/20968 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  370.903350][T20968] ffff88806f7f2408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  370.906503][T20968] 
[  370.906503][T20968] and this task is already holding:
[  370.908807][T20968] ffff88806b6d1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  370.911851][T20968] which would create a new lock dependency:
[  370.913691][T20968]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  370.916204][T20968] 
[  370.916204][T20968] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  370.919307][T20968]  (&dev->event_lock#2){..-.}-{3:3}
[  370.919340][T20968] 
[  370.919340][T20968] ... which became SOFTIRQ-irq-safe at:
[  370.923537][T20968]   lock_acquire+0x179/0x350
[  370.925065][T20968]   _raw_spin_lock_irqsave+0x3a/0x60
[  370.926754][T20968]   input_inject_event+0x9f/0x3b0
[  370.928617][T20968]   led_set_brightness+0x217/0x290
[  370.930367][T20968]   led_trigger_event+0xda/0x270
[  370.931935][T20968]   kbd_bh+0x21b/0x300
[  370.933234][T20968]   tasklet_action_common+0x284/0x400
[  370.934875][T20968]   handle_softirqs+0x219/0x8e0
[  370.936443][T20968]   run_ksoftirqd+0x3a/0x60
[  370.937880][T20968]   smpboot_thread_fn+0x3f4/0xae0
[  370.939908][T20968]   kthread+0x3c5/0x780
[  370.941237][T20968]   ret_from_fork+0x5d4/0x6f0
[  370.942733][T20968]   ret_from_fork_asm+0x1a/0x30
[  370.944370][T20968] 
[  370.944370][T20968] to a SOFTIRQ-irq-unsafe lock:
[  370.947131][T20968]  (tasklist_lock){.+.+}-{3:3}
[  370.947151][T20968] 
[  370.947151][T20968] ... which became SOFTIRQ-irq-unsafe at:
[  370.952044][T20968] ...
[  370.952049][T20968]   lock_acquire+0x179/0x350
[  370.954325][T20968]   _raw_read_lock+0x5f/0x70
[  370.955843][T20968]   __do_wait+0x105/0x890
[  370.957205][T20968]   do_wait+0x21e/0x5a0
[  370.958512][T20968]   kernel_wait+0x9f/0x160
[  370.959917][T20968]   call_usermodehelper_exec_work+0xf1/0x170
[  370.961805][T20968]   process_one_work+0x9cf/0x1b70
[  370.963397][T20968]   worker_thread+0x6c8/0xf10
[  370.964528][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  370.964911][T20968]   kthread+0x3c5/0x780
[  370.964928][T20968]   ret_from_fork+0x5d4/0x6f0
[  370.964945][T20968]   ret_from_fork_asm+0x1a/0x30
[  370.971397][T20968] 
[  370.971397][T20968] other info that might help us debug this:
[  370.971397][T20968] 
[  370.974450][T20968] Chain exists of:
[  370.974450][T20968]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  370.974450][T20968] 
[  370.978771][T20968]  Possible interrupt unsafe locking scenario:
[  370.978771][T20968] 
[  370.981347][T20968]        CPU0                    CPU1
[  370.983022][T20968]        ----                    ----
[  370.984706][T20968]   lock(tasklist_lock);
[  370.986378][T20968]                                local_irq_disable();
[  370.988966][T20968]                                lock(&dev->event_lock#2);
[  370.991823][T20968]                                lock(&client->buffer_lock);
[  370.994176][T20968]   <Interrupt>
[  370.995292][T20968]     lock(&dev->event_lock#2);
[  370.996860][T20968] 
[  370.996860][T20968]  *** DEADLOCK ***
[  370.996860][T20968] 
[  370.999379][T20968] 7 locks held by syz.4.6596/20968:
[  371.001028][T20968]  #0: ffff888041bfc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440
[  371.003875][T20968]  #1: ffff88802300a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0
[  371.007137][T20968]  #2: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0
[  371.010108][T20968]  #3: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880
[  371.013111][T20968]  #4: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390
[  371.016131][T20968]  #5: ffff88806b6d1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  371.019392][T20968]  #6: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510
[  371.022248][T20968] 
[  371.022248][T20968] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  371.025513][T20968]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  371.027284][T20968]     IN-SOFTIRQ-W at:
[  371.028585][T20968]                       lock_acquire+0x179/0x350
[  371.030562][T20968]                       _raw_spin_lock_irqsave+0x3a/0x60
[  371.032740][T20968]                       input_inject_event+0x9f/0x3b0
[  371.034834][T20968]                       led_set_brightness+0x217/0x290
[  371.036987][T20968]                       led_trigger_event+0xda/0x270
[  371.039053][T20968]                       kbd_bh+0x21b/0x300
[  371.040889][T20968]                       tasklet_action_common+0x284/0x400
[  371.043076][T20968]                       handle_softirqs+0x219/0x8e0
[  371.045205][T20968]                       run_ksoftirqd+0x3a/0x60
[  371.047167][T20968]                       smpboot_thread_fn+0x3f4/0xae0
[  371.049279][T20968]                       kthread+0x3c5/0x780
[  371.051136][T20968]                       ret_from_fork+0x5d4/0x6f0
[  371.053156][T20968]                       ret_from_fork_asm+0x1a/0x30
[  371.055242][T20968]     INITIAL USE at:
[  371.056527][T20968]                      lock_acquire+0x179/0x350
[  371.058484][T20968]                      _raw_spin_lock_irqsave+0x3a/0x60
[  371.060671][T20968]                      input_inject_event+0x9f/0x3b0
[  371.062754][T20968]                      led_set_brightness+0x217/0x290
[  371.064822][T20968]                      kbd_led_trigger_activate+0xcb/0x110
[  371.067073][T20968]                      led_trigger_set+0x59a/0xc50
[  371.069140][T20968]                      led_trigger_set_default+0x1e0/0x2e0
[  371.071422][T20968]                      led_classdev_register_ext+0x7b8/0xa10
[  371.073736][T20968]                      input_leds_connect+0x552/0x8e0
[  371.076136][T20968]                      input_attach_handler.isra.0+0x173/0x250
[  371.078494][T20968]                      input_register_device+0xab9/0x1180
[  371.080706][T20968]                      atkbd_connect+0x5f8/0xa40
[  371.082695][T20968]                      serio_driver_probe+0x7f/0xd0
[  371.084706][T20968]                      really_probe+0x241/0xa90
[  371.086687][T20968]                      __driver_probe_device+0x1de/0x440
[  371.088830][T20968]                      driver_probe_device+0x4c/0x1b0
[  371.090935][T20968]                      __driver_attach+0x283/0x580
[  371.092970][T20968]                      bus_for_each_dev+0x13e/0x1d0
[  371.095010][T20968]                      serio_handle_event+0x335/0xc30
[  371.097037][T20968]                      process_one_work+0x9cf/0x1b70
[  371.099074][T20968]                      worker_thread+0x6c8/0xf10
[  371.101030][T20968]                      kthread+0x3c5/0x780
[  371.102871][T20968]                      ret_from_fork+0x5d4/0x6f0
[  371.104879][T20968]                      ret_from_fork_asm+0x1a/0x30
[  371.106964][T20968]   }
[  371.107820][T20968]   ... key      at: [<ffffffff9b147580>] __key.7+0x0/0x40
[  371.110065][T20968] -> (&client->buffer_lock){....}-{3:3} {
[  371.111878][T20968]    INITIAL USE at:
[  371.113127][T20968]                    lock_acquire+0x179/0x350
[  371.115063][T20968]                    _raw_spin_lock+0x2e/0x40
[  371.116988][T20968]                    evdev_pass_values+0x10e/0x9b0
[  371.119020][T20968]                    evdev_events+0x1bb/0x390
[  371.120949][T20968]                    input_pass_values+0x74b/0x880
[  371.122989][T20968]                    input_handle_event+0xf00/0x14d0
[  371.125297][T20968]                    input_inject_event+0x1e8/0x3b0
[  371.127344][T20968]                    evdev_write+0x2e1/0x440
[  371.129220][T20968]                    vfs_write+0x2a0/0x11d0
[  371.131092][T20968]                    ksys_write+0x1f8/0x250
[  371.132954][T20968]                    __do_fast_syscall_32+0x7c/0x3a0
[  371.135138][T20968]                    do_fast_syscall_32+0x32/0x80
[  371.137165][T20968]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.139588][T20968]  }
[  371.140420][T20968]  ... key      at: [<ffffffff9b147a00>] __key.1+0x0/0x40
[  371.142650][T20968]  ... acquired at:
[  371.143914][T20968]    _raw_spin_lock+0x2e/0x40
[  371.145514][T20968]    evdev_pass_values+0x10e/0x9b0
[  371.147183][T20968]    evdev_events+0x1bb/0x390
[  371.148706][T20968]    input_pass_values+0x74b/0x880
[  371.150334][T20968]    input_handle_event+0xf00/0x14d0
[  371.151945][T20968]    input_inject_event+0x1e8/0x3b0
[  371.153582][T20968]    evdev_write+0x2e1/0x440
[  371.155070][T20968]    vfs_write+0x2a0/0x11d0
[  371.156517][T20968]    ksys_write+0x1f8/0x250
[  371.157948][T20968]    __do_fast_syscall_32+0x7c/0x3a0
[  371.159604][T20968]    do_fast_syscall_32+0x32/0x80
[  371.161202][T20968]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.163238][T20968] 
[  371.164020][T20968] 
[  371.164020][T20968] the dependencies between the lock to be acquired
[  371.164026][T20968]  and SOFTIRQ-irq-unsafe lock:
[  371.168274][T20968]   -> (tasklist_lock){.+.+}-{3:3} {
[  371.169945][T20968]      HARDIRQ-ON-R at:
[  371.171252][T20968]                         lock_acquire+0x179/0x350
[  371.173272][T20968]                         _raw_read_lock+0x5f/0x70
[  371.175338][T20968]                         __do_wait+0x105/0x890
[  371.177302][T20968]                         do_wait+0x21e/0x5a0
[  371.179211][T20968]                         kernel_wait+0x9f/0x160
[  371.181211][T20968]                         call_usermodehelper_exec_work+0xf1/0x170
[  371.183840][T20968]                         process_one_work+0x9cf/0x1b70
[  371.186151][T20968]                         worker_thread+0x6c8/0xf10
[  371.188256][T20968]                         kthread+0x3c5/0x780
[  371.190202][T20968]                         ret_from_fork+0x5d4/0x6f0
[  371.192670][T20968]                         ret_from_fork_asm+0x1a/0x30
[  371.195027][T20968]      SOFTIRQ-ON-R at:
[  371.196582][T20968]                         lock_acquire+0x179/0x350
[  371.198773][T20968]                         _raw_read_lock+0x5f/0x70
[  371.200820][T20968]                         __do_wait+0x105/0x890
[  371.202781][T20968]                         do_wait+0x21e/0x5a0
[  371.204707][T20968]                         kernel_wait+0x9f/0x160
[  371.206739][T20968]                         call_usermodehelper_exec_work+0xf1/0x170
[  371.209202][T20968]                         process_one_work+0x9cf/0x1b70
[  371.211448][T20968]                         worker_thread+0x6c8/0xf10
[  371.213509][T20968]                         kthread+0x3c5/0x780
[  371.215463][T20968]                         ret_from_fork+0x5d4/0x6f0
[  371.217546][T20968]                         ret_from_fork_asm+0x1a/0x30
[  371.219789][T20968]      INITIAL USE at:
[  371.221110][T20968]                        lock_acquire+0x179/0x350
[  371.223137][T20968]                        _raw_write_lock_irq+0x36/0x50
[  371.225714][T20968]                        copy_process+0x4caf/0x7690
[  371.228320][T20968]                        kernel_clone+0xfc/0x930
[  371.230680][T20968]                        user_mode_thread+0xc7/0x110
[  371.233019][T20968]                        rest_init+0x23/0x2b0
[  371.235360][T20968]                        start_kernel+0x3ee/0x4d0
[  371.237848][T20968]                        x86_64_start_reservations+0x18/0x30
[  371.240657][T20968]                        x86_64_start_kernel+0x130/0x190
[  371.242846][T20968]                        common_startup_64+0x13e/0x148
[  371.245022][T20968]      INITIAL READ USE at:
[  371.246458][T20968]                             lock_acquire+0x179/0x350
[  371.248602][T20968]                             _raw_read_lock+0x5f/0x70
[  371.250731][T20968]                             __do_wait+0x105/0x890
[  371.252798][T20968]                             do_wait+0x21e/0x5a0
[  371.254808][T20968]                             kernel_wait+0x9f/0x160
[  371.256920][T20968]                             call_usermodehelper_exec_work+0xf1/0x170
[  371.259473][T20968]                             process_one_work+0x9cf/0x1b70
[  371.261831][T20968]                             worker_thread+0x6c8/0xf10
[  371.264433][T20968]                             kthread+0x3c5/0x780
[  371.266535][T20968]                             ret_from_fork+0x5d4/0x6f0
[  371.268708][T20968]                             ret_from_fork_asm+0x1a/0x30
[  371.270898][T20968]    }
[  371.271762][T20968]    ... key      at: [<ffffffff8e20c098>] tasklist_lock+0x18/0x40
[  371.274217][T20968]    ... acquired at:
[  371.275496][T20968]    _raw_read_lock+0x5f/0x70
[  371.276990][T20968]    send_sigurg+0xed/0xc80
[  371.278427][T20968]    sk_send_sigurg+0x76/0x360
[  371.279956][T20968]    unix_stream_sendmsg+0xfa5/0x1340
[  371.281640][T20968]    ____sys_sendmsg+0xa95/0xc70
[  371.283206][T20968]    ___sys_sendmsg+0x134/0x1d0
[  371.284749][T20968]    __sys_sendmmsg+0x2f9/0x420
[  371.286325][T20968]    __ia32_compat_sys_sendmmsg+0x9d/0x100
[  371.288168][T20968]    __do_fast_syscall_32+0x7c/0x3a0
[  371.289825][T20968]    do_fast_syscall_32+0x32/0x80
[  371.291403][T20968]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.293431][T20968] 
[  371.294195][T20968]  -> (&f_owner->lock){....}-{3:3} {
[  371.295880][T20968]     INITIAL USE at:
[  371.297148][T20968]                      lock_acquire+0x179/0x350
[  371.299100][T20968]                      _raw_write_lock_irq+0x36/0x50
[  371.301192][T20968]                      __f_setown+0x61/0x3c0
[  371.303064][T20968]                      f_setown+0x122/0x290
[  371.304936][T20968]                      do_fcntl+0xfa6/0x15a0
[  371.306813][T20968]                      do_compat_fcntl64+0x367/0x710
[  371.309002][T20968]                      __do_fast_syscall_32+0x7c/0x3a0
[  371.311102][T20968]                      do_fast_syscall_32+0x32/0x80
[  371.313168][T20968]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.315677][T20968]     INITIAL READ USE at:
[  371.317124][T20968]                           lock_acquire+0x179/0x350
[  371.319198][T20968]                           _raw_read_lock_irqsave+0x74/0x90
[  371.321502][T20968]                           send_sigurg+0x5f/0xc80
[  371.323528][T20968]                           sk_send_sigurg+0x76/0x360
[  371.325661][T20968]                           unix_stream_sendmsg+0xfa5/0x1340
[  371.327975][T20968]                           ____sys_sendmsg+0xa95/0xc70
[  371.330139][T20968]                           ___sys_sendmsg+0x134/0x1d0
[  371.332279][T20968]                           __sys_sendmsg+0x16d/0x220
[  371.334405][T20968]                           __do_fast_syscall_32+0x7c/0x3a0
[  371.336700][T20968]                           do_fast_syscall_32+0x32/0x80
[  371.338864][T20968]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.341428][T20968]   }
[  371.342266][T20968]   ... key      at: [<ffffffff9ae85360>] __key.1+0x0/0x40
[  371.344530][T20968]   ... acquired at:
[  371.345811][T20968]    _raw_read_lock_irqsave+0x74/0x90
[  371.347442][T20968]    send_sigio+0x31/0x3e0
[  371.348843][T20968]    kill_fasync+0x214/0x510
[  371.350306][T20968]    lease_break_callback+0x23/0x30
[  371.351953][T20968]    __break_lease+0x671/0x1810
[  371.353485][T20968]    do_dentry_open+0x91f/0x1530
[  371.355065][T20968]    vfs_open+0x82/0x3f0
[  371.356420][T20968]    path_openat+0x1de4/0x2cb0
[  371.357933][T20968]    do_filp_open+0x20b/0x470
[  371.359421][T20968]    do_sys_openat2+0x11b/0x1d0
[  371.360967][T20968]    __ia32_compat_sys_openat+0x16d/0x210
[  371.362755][T20968]    __do_fast_syscall_32+0x7c/0x3a0
[  371.364435][T20968]    do_fast_syscall_32+0x32/0x80
[  371.366050][T20968]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.368085][T20968] 
[  371.368854][T20968] -> (&new->fa_lock){....}-{3:3} {
[  371.370477][T20968]    INITIAL USE at:
[  371.371710][T20968]                    lock_acquire+0x179/0x350
[  371.373616][T20968]                    _raw_write_lock_irq+0x36/0x50
[  371.375676][T20968]                    fasync_remove_entry+0xb2/0x1e0
[  371.377727][T20968]                    fasync_helper+0xaf/0xd0
[  371.379533][T20968]                    lease_modify+0x232/0x500
[  371.381450][T20968]                    locks_remove_file+0x29e/0x5c0
[  371.383474][T20968]                    __fput+0x351/0xb70
[  371.385255][T20968]                    task_work_run+0x14d/0x240
[  371.387193][T20968]                    exit_to_user_mode_loop+0xeb/0x110
[  371.389334][T20968]                    __do_fast_syscall_32+0x2ac/0x3a0
[  371.391450][T20968]                    do_fast_syscall_32+0x32/0x80
[  371.393478][T20968]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.395924][T20968]    INITIAL READ USE at:
[  371.397287][T20968]                         lock_acquire+0x179/0x350
[  371.399392][T20968]                         _raw_read_lock_irqsave+0x74/0x90
[  371.401647][T20968]                         kill_fasync+0x138/0x510
[  371.403654][T20968]                         snd_fasync_work_fn+0x1ac/0x240
[  371.405867][T20968]                         process_one_work+0x9cf/0x1b70
[  371.408050][T20968]                         worker_thread+0x6c8/0xf10
[  371.410114][T20968]                         kthread+0x3c5/0x780
[  371.412026][T20968]                         ret_from_fork+0x5d4/0x6f0
[  371.414090][T20968]                         ret_from_fork_asm+0x1a/0x30
[  371.416267][T20968]  }
[  371.417087][T20968]  ... key      at: [<ffffffff9ae85320>] __key.0+0x0/0x40
[  371.419288][T20968]  ... acquired at:
[  371.420517][T20968]    lock_acquire+0x179/0x350
[  371.421999][T20968]    _raw_read_lock_irqsave+0x74/0x90
[  371.423703][T20968]    kill_fasync+0x138/0x510
[  371.425448][T20968]    evdev_pass_values+0x619/0x9b0
[  371.427046][T20968]    evdev_events+0x1bb/0x390
[  371.428501][T20968]    input_pass_values+0x74b/0x880
[  371.430121][T20968]    input_handle_event+0xf00/0x14d0
[  371.431729][T20968]    input_inject_event+0x1e8/0x3b0
[  371.433385][T20968]    evdev_write+0x2e1/0x440
[  371.434835][T20968]    vfs_write+0x2a0/0x11d0
[  371.436330][T20968]    ksys_write+0x1f8/0x250
[  371.437768][T20968]    __do_fast_syscall_32+0x7c/0x3a0
[  371.439431][T20968]    do_fast_syscall_32+0x32/0x80
[  371.441032][T20968]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.443056][T20968] 
[  371.443842][T20968] 
[  371.443842][T20968] stack backtrace:
[  371.445747][T20968] CPU: 3 UID: 0 PID: 20968 Comm: syz.4.6596 Not tainted syzkaller #0 PREEMPT(full) 
[  371.445762][T20968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  371.445768][T20968] Call Trace:
[  371.445774][T20968]  <TASK>
[  371.445778][T20968]  dump_stack_lvl+0x116/0x1f0
[  371.445793][T20968]  check_irq_usage+0x7dc/0x920
[  371.445809][T20968]  ? check_path.constprop.0+0x24/0x50
[  371.445823][T20968]  ? __lock_acquire+0x12bc/0x1ce0
[  371.445836][T20968]  __lock_acquire+0x12bc/0x1ce0
[  371.445852][T20968]  lock_acquire+0x179/0x350
[  371.445865][T20968]  ? kill_fasync+0x138/0x510
[  371.445881][T20968]  _raw_read_lock_irqsave+0x74/0x90
[  371.445894][T20968]  ? kill_fasync+0x138/0x510
[  371.445909][T20968]  kill_fasync+0x138/0x510
[  371.445924][T20968]  evdev_pass_values+0x619/0x9b0
[  371.445936][T20968]  evdev_events+0x1bb/0x390
[  371.445949][T20968]  input_pass_values+0x74b/0x880
[  371.445965][T20968]  input_handle_event+0xf00/0x14d0
[  371.445978][T20968]  ? _copy_from_user+0x59/0xd0
[  371.446002][T20968]  input_inject_event+0x1e8/0x3b0
[  371.446018][T20968]  evdev_write+0x2e1/0x440
[  371.446036][T20968]  ? __pfx_evdev_write+0x10/0x10
[  371.446050][T20968]  ? common_file_perm+0x1a9/0x340
[  371.446071][T20968]  ? bpf_lsm_file_permission+0x9/0x10
[  371.446099][T20968]  ? security_file_permission+0x71/0x210
[  371.446122][T20968]  ? rw_verify_area+0xcf/0x6c0
[  371.446138][T20968]  ? __pfx_evdev_write+0x10/0x10
[  371.446153][T20968]  vfs_write+0x2a0/0x11d0
[  371.446172][T20968]  ? __pfx_vfs_write+0x10/0x10
[  371.446190][T20968]  ? find_held_lock+0x2b/0x80
[  371.446206][T20968]  ? __fget_files+0x204/0x3c0
[  371.446223][T20968]  ? __fget_files+0x20e/0x3c0
[  371.446240][T20968]  ksys_write+0x1f8/0x250
[  371.446254][T20968]  ? __pfx_ksys_write+0x10/0x10
[  371.446268][T20968]  ? rcu_is_watching+0x12/0xc0
[  371.446282][T20968]  __do_fast_syscall_32+0x7c/0x3a0
[  371.446299][T20968]  do_fast_syscall_32+0x32/0x80
[  371.446315][T20968]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.446331][T20968] RIP: 0023:0xf709e579
[  371.446341][T20968] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  371.446356][T20968] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  371.446371][T20968] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  371.446382][T20968] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000
[  371.446392][T20968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  371.446401][T20968] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  371.446411][T20968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  371.446425][T20968]  </TASK>
[  371.994698][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  373.034577][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  374.074554][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.124537][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  376.164649][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  377.194536][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  378.076642][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  378.079336][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  378.234750][    C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  379.274647][    C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  380.314562][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
05:40:26  Registers:
info registers vcpu 0

CPU#0
EAX=84d847dc EBX=00000005 ECX=00000000 EDX=000007dc
ESI=84d847dc EDI=ffffffff EBP=f7480000 ESP=ffd1d388
EIP=f711e752 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 56f6a440 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000003221aff8 CR3=000000006b5ef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff917d6987 RBX=0000000000000001 RCX=ffffffff917d6982 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff917d6986 RBP=ffffc900048bf6c0 RSP=ffffc900048bf608
R8 =ffffffff917d6986 R9 =0000000000000000 R10=ffffc900048bf678 R11=000000000003d49f
R12=ffffc900048bf6c8 R13=ffffc900048bf678 R14=ffffc900048bfa90 R15=ffffc900048bf6ac
RIP=ffffffff816ac27a RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880975c3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000003221bffc CR3=00000000654b5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000002cb634 RBX=0000000000000002 RCX=ffffffff8b90abf9 RDX=ffffed1005686656
RSI=ffffffff8c162c80 RDI=ffffffff8190ccb1 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8
R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000
R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90ab8190 R15=0000000000000000
RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880976c3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005624b3d96000 CR3=000000004a486000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73b4ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc9000500f2f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0f96c0 R15=ffffffff85616fe0
RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880977c3000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73fd6f0 CR3=000000005f8dd000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000