last executing test programs:

10m15.634562747s ago: executing program 3 (id=341):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x4, "25b28b82"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x101}, 0x0})

10m13.108395826s ago: executing program 3 (id=348):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x143600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75ddcf052a917deb7ba193b3e7772ed29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffc]}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10m12.658799461s ago: executing program 3 (id=349):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m12.250505313s ago: executing program 3 (id=350):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)

10m12.077561507s ago: executing program 3 (id=351):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000a, 0x10012, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0, 0x13}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000680)={"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"})

10m10.440583557s ago: executing program 3 (id=355):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x801, 0xba2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x10, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
fdatasync(r2)

10m9.945051425s ago: executing program 32 (id=355):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="793ee8124cae238514b8c25ae999ed25fc14bf8b7b98a25a245fcba38072b1fedc29513a368f3753c8cd311777db79f9a772985bc9efa1243c41f1eeb4e1a07e2b57a390d4913acd4034182074ab783d616673714d72e8a273101c78ddc61411334318894a156cd2cc34f3f42052dd7e79c5c9c1ca3f59ee651bd294bf4d262b31cbe8f8f23a5504a804a083084d5519637e97e94880f549394676c0edec1af036823ea8c423a7792330b8491a5a4a01deb4660d6b420b1e394fb1cb9cde473f2000fe3c4acd591851c258cf231df8c46dd18cc78dbb72189af635ce08b35374c567aebce0303b716c9cacffb6f60e102f9172e0e1a91760c558b580a3c56b5682ade32ad42e7df55faa4e056f3568abf5dea4415018c211637c362ec3c40afa47a2960a2bb4b6936a83223898564e2667bbc1fb774199c99701a726073070c0e19f57a63f4a38d1b03a0c98f8fd20666abd5e66768182c4df12343bce3e617f62d29f2faa1d5fa831a0a582f4708b547aac5129985fa32b345a82aa89958370c1d331935b304a8ad2eeff24f520e667a37b7c0d8f93d35546b8300ec3dfebb32933938e32bfa54d563ef22bfeb6aa8f16765a3f4788e03477fe9236e3d5869335ec18058779c5e63ff5877369898fab14e58cd0608f6f4d423eb1bf09a6eff87d999fc9e7be28390d471acde8543d571246138da540956867a32f3bb1d2d91931dbcfb8ade5cc313dc54f64ad96b7ada7ff63ba1702576d2bc48a1c6cc4cec815e0b8aee9c31d5c5cb119952b8d321181c1a14793266df2cab56d161111caf86d4a7eafd42c2622a63862533d1ddbec5fdaa888d0a03240bb08476198ba789aa552d0ab149a07977da16d1ed4bc635d94225d1ac84c788407fd4425f5a56f687dcbe688b9d0b26cf86671f985028e2ae3592ffb82fd5587ccc3dcb406969e11be470b519eca6114895fd8a4b93b1c4d1a9ca4e0001a62185e72b6cff213c7ded22effa555b45aad686bf2b388c0530058feade244e0672b02128946c190b4c076fcde7e0bb6941852e2c2b90d5ebf53771583e749dc07627f840808ba034474da51eed8b04cbab8981fed4a96fbd4b7ce98e93afab9040581ee91eb42f5d5d8ada63cae87711aa82f8493ae3a64883b99a1a8466a5bdcb753927f22487f01f7782f7e8278ce98da8e76b5230d1f21fa89e02a5f59ec8ceb7b5bb90518a8745d9a43047cb74e9591ea0a0db79601656e784a9321c3d7ab6a14b3d030e3deb7aaff2a2c89cf7ee0e2072936dc7b43ccd6233fc75eca52994a6e9f8c7929f6c370c93aff6f46bbcf05c1d85cd5b126fc08cf1cad82d3218f4127be9aa6e21bba7f1fb9cc4ffe5fc293b903f5ab407d67418a24579704f9df8e08ea157c480b3115d48a9109138f6b391901367e66a7f7573bf20a6d12de0bdad082f08599f912e8860aa4b6a6ef2a5ea071af07be64925bea34913660918032b72b55d01f1d8e09a4e79d70b4bf9f43fa0862fa75d1a0eabe3a769d3df7bf5ce7e0449d54295c06d5396a8f049294e9ff6d60687786d7143e8cbd23c30e36ff7dbeb266f6e63952d65998d844251dcab1cac0669bd0561b5dfefd1c7e0ebbc1567526797b64c97a4f31f87de4e034071b2d48fcbd15ef386ca172c0af3d71aa98744047ee463b3a20a1ef9b8bf1753f83d0f3ca9604e2234a71c3d00f78fb8a0d093af48f2ac0a15ba0c7c21ddab80ce394dc6e6245784ea17dd3949b76e3ca91fd29ea51afe5e50d71ac1067b665d8f57ae49a7fd635146e04861406681637fcf6b53c1404b9b69f4743a93874f2953aa827aac1b5462c852beba5d1080889d05741a11b86436589e9d9e6ebbb3fe89da9dede91731ee70851c9e1501beaa155844f238b299216e69cb88153d20f113faa9a51fc147dd31c5820b46c0cf5136d08761a6cbbfab1652c656d6f7dc7ce1e6a084962ca9e07ebbf949392482b9fb942b6025b71a903c199ac858d99b7eb46e92360de03a0631bf77763d8c098879a9b50907bbf0d6868ea23eb8e471700214d984d661040c51a4b01488718dcf09b3cd50c720b627d664fee7a1ea50ae6951bc0d0f6f59839ebefc18b99c844ccbfb3c4c04d19f07879ce06a3137b59ebf4c7daa52e1d850924d4cf76630101d37881f30e914346ff4f6e73cdcfd56dd81058cb6763110d88d34cca16cbc7b51953d44e09c57b3565e6527aea04949cc28dc502811e82c8cd8ae181dedfca4a47d3b22626eac388f272995add71bb5504a38c03b5ca8381ce09f10acb5f5fade0942f30334a0ffd03dec00fc7a4976a95851d0f347fff16e5e6f663c5feefaf7efa743b2766f1d442ef882f4852318c25a81b3d2bd4fb5b683e3837ea7d4df69fcb8a87788a3a0a759c86877cf56caa98f5fa04c71652d44bf5250ee6f9c54794bed3b48e33a063161eb324456da5e28ebb5ba271dcc826bf7b646b6c89da67605cbb953c35c070e76be46ca66ccdd060fa07af82d53c525c19eb8eb6e08426f160340ec8ec6a57a5aa146f5b67d84184a46b4b8a1373669070123f8346cb607be14a4d5b9124b369289b0ee7f184d498ae3043b14f3ecad6e2b9e71661e85e2dc0b6b053300468d53e36f1e99545a33fc1b84da6fc20d8f7f7f9ae614588f351fa59c818ba833920164d9b434052f4e788bbdaf1e9913c822fca65e0cfad203bedc6be2abac264a0cec0dd4e813dd84d28d853cd9b85d9dc94b96a80643dd3e2aaf73ec85566124204f7b98abc8c5e354a66dc838c080d26cebd3bf388eb8018a06b15708311043a785a937e63c09465ffc71d1658d2a84ed6b346b68e98459cd0725efde386cce85928eaf90641c5ad4a7f1c733fd5238bdfe348456704546afc4a982b42e3a5bb473cd71dfef785473ff88175d92d2f72f1ac5cf77344c8dcc07a78be9575f1cde05e8c5e2950b1f597a21b4351295e9f59e926a8b03551934c73f090ca3fb644a4e95dfa91bad452f59a5cde71b50e8da90ead55ea96181cc1b5c6deea431f27666bc67d36b26004aac6c02c29c80c0d6de163660bf56c48bbd7c5a06d1ef622d5aab46a746b6fad00ef47ddad8290ee81509ebc19cb85acff4ffe3d9123774b76ef96db3cb942776eadad084bd7351c340fc219ea696df3657a992792890bece7dd84e08af3800535b0a0946f9af6ea30dc20916e133f8eda3aef83082c1497d606fb99e81bbeedb70d9d32f93fee0a2090136746fde09038d1f8a7ae494ac012665f3db1119c49650012ae7e172f9be15622d0e2458c431bf386b5163c444e2515f1c99d56d2843863eb5487bb346d324bcb163891b10db02cde5003c111c984c690927580964b9afcf6c6cd1d9ccf30339f3d7fb8ac348604634848c85bb9a11969152d2b1bbd870c3fd95251d38f39a5ee0d48962e414ef7225150dd3134a87cc954eadf8e1a78ff8914de38f4d9dbbcc01553d2992f64b14377e21658cf2573393301bd0a46654cf5fb5d6a1a6f452450db63300b3dd037c5678c85f84b69cf52036bde51f6af406b82b8ce0c3bb64dbd538dab2e6ecbf4da5a57d43ac5aa0e2aa1cf466167662d088a09e109a95040865fd6bcfd68e5f6d6f3990c82f201da1bd0f4a5332bf6155584afbb70197d4e59e829312a3db47a7095c08251a7f574d4869177ab8c0a380adf87be8a1a016bcb8061e3f2a3f69661cfdb54a48e951c45d257fd3efb8dcda01d25274df0adcc0bf797caeb9296322738a972d8e40b07509e3505ffeb2c08793c75783a4c65fd11dc5af607dc3700cbd44f431eb4eec603185dfa8cc5e4693b737bae7c8b1ecf24798a3c72da8d688f5454947c99c339b752d027248ec9c08fb42df0a302ddd3c823ca1ad9cbfc2b2bdf3e7c9181da0ba1878ec434b5049163ef309892652ccd365df8d8260dce74e0d9a0aff0e1e56ab831bffc582f5d13d288dde7c3bc1548cb446d54f360b6656b99ad812d7f98e71cc21918336b1592ff22cacf28b602c4f3053a619899a5903ce80dbba757f6012ee4dbaa375fed540fe02fb66c82841606429ad00685c6fabc130b9b556020fd04b39b1fd0aab194c85a0fc95fc51ea8838ccf388e77cc85744e6770e75f570c0abd0834135192a9e1a54fd90db93b2ed733e3c2491adfb3bd9078b9c75f6157c7af332d7a3f3f2354539083b05100b9dd3ca90e073df2c2ba3f348c780151ae629afa20870dd7842f5c71f163accc6376370a7c5cab922d09d87d89aa451c47e8f54ee5d761d83b057d31120ccb26c818ea1ebc0683ad26e3b3cc62cd3be1f622203c87f39f0c5789be119589cc9ea57f0b04592bbde0a18bb59e36b6e92f4f7ccd01789b58adac60c803c8f072a4e9c280f3245604a2dbfa8ba7c21a918654c75fe48b5748d91112f5b61af65da4b355bb8f0a180254c7af66b56a7b1790afb8d589fb386db3cf84c5f41545a6a1a65ddb6f9888b5a08787626792bc609f397978310263858c2209230ad88965aeb1f533ee3271c8cc033ea128a181032e0fb469ab8e4e5453ea92444e02d4c8cb2dd7289225d070d6a0f22fa73512466d458b343ae80a950a92e0df66817d25ce5ca5fa64e5b31e3ffebdd8ce49d66fb31d01ac3d096889b30c6a7f50b7d50f422d2442ec56c10e61a41054c150c6fa922ae176e4aa82eaede99a5e6249edec0b066fac5caf6280079babdd528d2f4c0556f74f3329e7f57e6f56b8a5423894bcf87246e7db449784d88c9e459549ca7e4670504427d95a9505ca2a243a28475ebcb2c0380b9825bcb9eab3a4a7fbdcc85ce514b8e839761526508d4d782691605bf326297d5ceed21e6832462194dd8dbe6976f4a3049e48a0aa52318f49be25933eb3d9ca9b0916c90a17dfb22f8066dc95d0dd25925e1ddbe46e589523051a34514f3ab114154e0ffd9ee0a463f4c6d0e0734863d081049ffb02f906fa30eef1d15b6dc95fd71a7fe148504ee1d532d81aae2e783746c821a40db2dc03119d8b51e56e8624473c709ce339171737660add577066960031b6f7a1d871a1c6b46f678a85ece774aca728ceebdb4a3f9b6ea169cde4bc390536f71ccfb63afcaf7c8e02cc90d47a238747d341508754dba5eec12cbf3c1dd38a56bdb15161709297308f0d4aaa878078b9978cf1760a3d81ddef482baaa47d4578fb492d749a824868ea6de3a51a17a0dbefc4046156e0dd28f59ec4d5099b33e66cfa369438c7503e5c9a4aa7a779422c51154c21cf12ecf3233e3112751a29bec131d50fd434bc9825dbf528e725cd4299d9d3adb3b4d20adb4a721ec7e4d2d4f1b3254a059b24ac500cd11871098c016394b5679a696869035dd14fecf924a2eb20dab48f86270c08e19f41034a07c3cdae33e0322052f5fc74bcda7731ceb5eae50de0e3643e326f7d40d76ca124e59fd6eab80e0c40a4a1729081f2078c878f506800189b4068064f8003fc38c20fc666a525ee19b128cb0b341988868d07988b175fca82ffe8da18edce9dc1e3df170d774cf39b740d153a903497701bd71be079dd8211ad2d3a9eaaabb2402823cb8979797af079979c1355d923896e598132fc991e4e532310d0e25c5ae227d22c014400127f37a1828474a53dac446c508c3e94808cc5ad2b2ed756cf2f04dd62692db1d83019d1500d146c3e0d765b8f12ff650d0fa8f83358a761f1e54c041b134703d8c3059aa1f3106f6011b4df33f2dd738c2da81b43cdf9da65b5033c829d4f5a1a6c1cf8ea2e74fd5fdf2e751b62d138fa6672a12fad88d128872e6c958f4902a6b444b17bd24dc2dc0b9d27dfa5d11ba700de9b116ad2679c71e8d4d7de323e33f1b5ef967e87c7cb1ddccfc1a36ab7c27a6b969751307b55f9237040afa34ec6d45f575841afee0053b985b889ae3e016202fe93012104e13e99e9c2f62bb978f0b217fb1f5ae4b1e93845f381c47529f77f7b642ce8cffdabd1429bd1b95174c33c144fd00cff2fe538e5837d62b593a9afc7aecd2efc25b565dbf9420348d20169b4f556d87cd415a7002690ddc8332099043f34b32e83dfe9651f94745645ea379d97f82eb1fc24ccb9ff51a880ca28016235ec9ab7e9a23d05f48013ad867920cb5974e06ef48e73c46e57ad248ed70442d3e0575b232c21c84eef0f84edcc714deca1cc4fb6fb5b201fbbd94e9dcb6094bd4cebbecc690d00bb940c6c840f69e1f9e2babe60c014d3f5b292c2c45bfdbed136c08a11d2e1aa7df5839cd7156f670a542ca8ad23ae0e564e8f87b30407cfd498191b902539585ca241bd4a4106a4712383140c6ec6283a2bf74454b959b8677c23561c73f9feac98a7b28fda204a87984570558ab269cdb23184d374ab172d3d9faac113c450f2faca565007b7c5013f02c66c408c81bc731f8559802fa452a0028bbcfc387389a00958b9adb83517940dd6b8f1386b971b2d92a4980e486d7954889323f6f8ba4452ba0002c984e6aa91d7642e0f8e92321494394b264cfa30cbaf9df96bd62d9b098554a8a8554fe84c95699a87b0da4e541d9395c5a4a69302bd3503ff763467beb111a3650287cebc4cd0804841f3990899992d2aacaff2bc1f7464fd9670450cad2ee153e8ed45331f694048fc0c4e2e7d034ab69e159226542fdb90449da050363bf7b683a2215bf5272d4c18fd2ebee8bd29dc180f448b1f85f4429d066c692a350aa9f036ee43ee74f942bba2164f692cfa70b79cb8149a6a79fbf3197101f75933cb0458dc2b9ffd7a987cd9a139cbb853064bc62343e305052a4f77e72c98760b972ac3ac84b374f4422bf44d15334f38291c61ff630a818a34d33d516da256e1ad5e187a79846dcc087a761df9e664afc9785115a6b78dca0908d0957be795a3001ca2d3ad9fc544f992660b643da5edade7890217d07452ffa7454fa59907cb325c9dd445fee201bcffc8dce888da13059bee2286a5ef0e863dc107478f12baf983209060b1aee7286bee1e699b84332327c845a1574b8a0897eb1cd31b4a7498a33fe1e2dc4f8afcafff76eeee019c8c73cf8de0285e342e08ad0a9a43f7260bd5fbc903ebe099c73850982e2e8533c97a26f67855c155a3bfb025b2277e9b627a0bc860c1be18875241a9f8b4fc61039f9d71f7bbc537d2f51f1a5e840dbff7786f4a374f51cb2e657a6f2c8052cfc3ffa7e603a1266df3eec49c00a40d6f82b1b4a670b99534f401866ed6401602f8da9bb7243a97321cfb7540734aee1b75cab753db13f81a4bc67bf01bd467c44852bca45e699bfeb783326f631deb5d22c47b97d9d0c2adbe97c373e149321613a0d6f25dd822d8fa76431b97e88aa397eb467ffaead4fe9c196fd69b81db3906f3b4eb40fdaa19bd5607f7a3bd442c88731014da0af1d33be3e63f3967b00f193e37419f18df4f013017bd280091679e14428cdab0a8a77522a2b6a3337021d3bbc8b7e8774fdd2f387d5d455d10d91bb7c05a15e2950a51b00edea2b5723539770d321c8f9d4e5d24f291e033acb2e4a5c1f8671fe91150d023dd031cadead806bcfa69bc44946935d1e49a628bfcbffaedebd5789a6828950414052d9f7d261e69c841da3291270d7387662f74e20651b6c75722b530aef69cae0c2c9ef5663bedfa37e0192369c3aea78991e0ffef0bff4157d25edd29acd148a3b255157a84c4dfa25b5af681fbe93015382bdf742c1a5076caa52b5370943d02fb98531be900ed3687b4dd076daeebbd3025db56a8c7628a0542a4ac23626b3549abf114127627e44f5df17a81328bd84132e36cb6127c4081199b4fca0dff46021396038c37c832c9bf2fe43729ea45b6ee6aa5f34b2869965f78481d56e6f8ca913301e4fc61b2616c9ea23dcce1f9ec2a0ad97959f00e6c1a99fe5c9be180e1d03826b433a120c654171afedabd20fa42b8bfd3d0bfe64a560cccb9cd001220965576e6f1664097cd3e28d9bbb63c84c801f832e7ca8afff3bae368b66b3b62907881a3c3ae821d5a8725cd11fb3219eb956dd586254a88ab4788e432da28db60a4fe97f203e27d4052cbee48d2edb022d8c72e2a3499378f4ef7076abf712c3a24ba10e43f8b0efdc226c8b10788f0160d1ed23ddc002ea200a4825dc9bf25f56d2d134d25cb2603fa28df93c58820a7ceb690a950f7a6fd1b893ef414d50b57468343a96f55625a141293e6a4e8d0a6aa824a0c31b206c75b48540dc46b20f0f55e5adf8c2514b01ccf4f15faa43df71aa711f8d76ba335a881887c0648aafc434810bbf808eebc1cc9161ac4e111496e4d68400d52c96dc93abdb47ef1901b1674888bb836362786444916135e22f9b10d37400748d6a11fee36b75e6caeba02790665045a274e50ded6fa969fe715751d429c2ace6c2faa5848ab1417e003c49c29d0efe18f1d157c5ac8cd3db4d7209fec82c77b7de669e8d0034eff8c2e49f731f76b0fccc9b65b6a8ed1efe50e407570d73c61403eabb8c376bd3326e57d490bcd74bc1a520cc4522ae65aa025e4782d54a4f82a042da6f9273678de3621527a6f4bab529c7e17726e094d00eacb739e931f3afa8dad84a6d1e89f8024c194833742b967e4cfc8f63fcbf591fb469e25bc6a9267b85d4031bb4b434f2f0b2c1e38dd27c894b029b41455477b8d69f95b8dfb7a22890ce7d71660c6f4a84dfb843172d711f9520063a7f935dffbc10abfb0f44f95af6fa49b2f0fdeef56fa960a98f369b574435cbb18b14b96b8937cd2f6737075c04dad79b77b786f203b2951e4bdf1228449a83306cb0e5a98c3976ce8b63a389be9ce4a5adaedd30a4e069152c35e49bb0e42a3873fd3c88e277cdefb816b0286ad1f12d6ca33805e90e4391f5a59bbc86479c9bea9d71fbc5253cf3017fd6862daf0f72d52c2bb44247b6a303722387cd01cefcb14e79bb6fd507daf09833aa094868132df358725a4db57dd1e2e37bcb37536ad59d8b68e4293d15f38715c68885126c0fff1eafe295aeb4a88919561e03cd4f7436cea1ee69bd66e308425e41eee1dc9e9609ec211aca2cae25ed4369c9fcd7bfe316c9f2b9707b6e3789f6c41a70e28121a26d5591ce94cd60900b27ebfb995d34cd509fd0c8fe204969e5ef6ccd9c1605c47da01a437cbfe612d928a63c83d998dc2de6ea4695f36865febbe065db2f75c2a700c4b23251fec61bedf33e45eb8fde785178647999b9a0069aa45fa01f4ed8ecb072de1e256a8b95365831aa975b249f57bd38064edc6886620ad24ddd589dbe3587c23bf12a71a7edf34b8c46a079adbe410fe32abb408a264a01f3ecaa115e4ad2e47e9bed54df1fcff145222c544c89b15b2943e5e6ce37477ecf4e17fbe33d74e60461c52c3682cdb7b0d1ba016cf7756ae9042b296c308da630b7021a20c71600b21198221a3fb905c2716ea4b6a35af3fc204dceb81bb4270b51a7f552e33aecf4a704b5c6e3538e7d91da4166d747ed854de3dc15ef3b07a04d9237ce0351b446c09cd2b4e87aae02e08dceab1d35c31334520eb3979617928048d3510d9f3d5db36477fb1ec21ad57e7d757eb7accfb1875b59bd1627b62f33ca853e11b211f3a02500e43c5655dac4c8ba62247da245453cb690700de3b9521e5d2841fcdb73d550f4ad20f53b3f0ec2f229e7bc564daf94a42044c2a8f93b13d11e9e27562c290f47017e507275f12932f3c608b2ac955c15cfa100fd5df86a223d4acd4350dedfa26d15c3e3595cb003b1187a77f784385b59e582308cecfd6e53a4be286e6b27b2e66dff8a578f30bd89f5cee1014a55423b5297dc23c5d9e0fef458d8c5df03c989ff7f1f0ca8ed10e97c1040e07bcccb3e4bf5cf8e6ca08a23fc75fc861e6749fa29ac8a8be70c341627b0b8a75f02eb1493ca574c98fa69efb5d76261391195687d947dc785a712d61a7e1a9b954d5b4c159fb4ac0710eacb0086419d12176681a911c10364011b151edaa0323d1a1ae040f9f26be099465a8c67fa522b6805df36ac81cd422e4c34028882ceec4b4fb08d86c05aa4c16a02fe99eea84c75a0821373188489198c2296f290efd5c905e1a5ce0091b4da05e376a416d80720e14c17d2bb84b91cf989fa72c3822d37661467e811b0b1fa6e4948dab66911f5e0394d211e773d66ab2c94a4a14329abb1e9307ff36701908ef85cea4d8ceeaf24520b53ed0e401a166aa05f821cbbc5d1f0d16e4e5d14a4d04e5e5224a2b5a7f34dfc03b691487e1d7199675f00b137c37a87cfed418e013d0b3c3862da3f812d2adda99cc8ab4da10d3ab9d392bef7c9b11ca49fcf7f7af9f6010772b1a04b143eaf940d56865887b202fe0b8f70fe2d45bcb0c20e95abdf2e76d32160df1fcef36aff0ce2e9af3453904f7b2eb43a1bad754e3f1216258f49d34fe6462354366e82a86c4ed81a4021afce5b66039622c6b9c9a24c5f0e57ade4b8e64104e6bd4237fb98c55a6f3c2a5128e96c14bdb1615a0b9c0da306454b76d5f698e321d48719a3171083b41455f59f28560dc616250be61a598b1e753943ead0ca5270bd2039b2f5e480349455011f86d2d8f46ec562f8b1e57872576127f3a050fc6e32e7c4c4c7ab1d2855e8c8d649b8eb00f1d8d02c80a39eb6c1b23fb1d5ba28742e217a02276c724b8b32ca2d39bd3f71cc7fc2a9dd52a28c4ca566038fa2967881c9303ba138bc8054761651e7ee7e6b8960346f227a07007c74280f8419e6baf856e2473cb91ad9c206df2f7a8073ca3462cdb23ba5dd538efa2af2b0b43049a29931e315c4c9290b99c7edeb7b938ea05bfe3744735fb2e550a7e15b7d7d6a17dbd87add165d7a13668884fb235b1fd70e4c3a67895ea0c9b8824b8b14d41a9ce80debc8ee3bef4a57d40994d2d422e2621dd9fdcbe1edb712ffe43774cbbe5839a8146a936317310c3be4daa693685262ee3a44aabe86281b0927e78df3ca4086a81e8d7af261fc51d3eb75cd8852729adfd68579958b61aec37f4f6bbecb4a3f09eea3ce0a49d35666d1050f65da5d5e917d79390d0133e81d07aa285c53d3c7d3bfb82d7cb8e6ecf4f8203b78787963277e98c5dd8cdeb2d83b049d9671b98563eb006ae8148215eb87004551aa357016cf88caba47d4fe3f4209ba0190f5020c5a8ae6e37e60c9a3fe856fbbfa0acf3dd1a2953fb31f0c913a9f8bc6a7bd4feffb8dcacbd764f84eb370cc7baaafd48c9a8972b22c989a49b9f5ca332a1331fd591d412892f45a080d6a3f5effc802364d0ddf03cb391d97ba4fc8371a91650a8a28c5e6221f66d15b4a4b0afe7502034a60c9a1bab525b51225ef9d40ba9a5e870faf19fab07933f2840c4ba52b9a82442c207147bd7327da8468ff6ce98c3de6f7092db9e1673dfbd54d31c4f0462524483edc8f73274137ab5770230a87118751f97d915644f793da732cbb2936c08595209fc42a1ee095591ca9ab503e27ff19b5ee3375a79921f3ffae984a89b1e49eaf21a9d6c1d7c14138b97fdbbf824e3bfb06457aaf1b78ff393bde10b7bbd9bd2d632013d6dd33a12be84dc33afaef1a6f259439356e89290de74007e1bf127594db485b9d07c2dd67876401922bc943a45c743377c", 0x2000, &(0x7f0000000c80)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x801, 0xba2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x10, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
fdatasync(r2)

7m37.000950044s ago: executing program 2 (id=1439):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close(r1)

7m36.793550697s ago: executing program 2 (id=1440):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

7m34.500607506s ago: executing program 2 (id=1450):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xffdd)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'wm\x00'}, 0x9)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)

7m34.355098451s ago: executing program 2 (id=1452):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"])

7m34.086395988s ago: executing program 2 (id=1454):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000740)='autofs\x00', 0xc000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdir(&(0x7f0000000f40)='./bus\x00', 0x8)
chdir(&(0x7f00000003c0)='./bus\x00')
setpgid(0x0, r0)
open(&(0x7f0000000000)='.\x00', 0x500, 0x42)

7m33.960968208s ago: executing program 2 (id=1456):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000000000000000000000000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})

7m18.424774012s ago: executing program 33 (id=1456):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000000000000000000000000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})

6m9.689644721s ago: executing program 5 (id=1933):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x20, 0x0, 0x10, "0d97d8e798dfe4e4bf6ab7b0e4212dbe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

6m7.210488336s ago: executing program 5 (id=1951):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

6m7.062187605s ago: executing program 5 (id=1952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0))

6m6.504489671s ago: executing program 5 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100)

6m6.417304555s ago: executing program 5 (id=1954):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008504"])

6m6.106513204s ago: executing program 5 (id=1957):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

6m5.755474456s ago: executing program 34 (id=1957):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

5m33.954679577s ago: executing program 1 (id=2162):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x3)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
statfs(&(0x7f0000000000)='./bus\x00', 0x0)
linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5)

5m33.936378989s ago: executing program 1 (id=2163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="bfdce6dfbefe46108b82145d027317dcdb244d37cc4c1ca2e8b9b2930f9da98c0bc7152c7f125447be75fcf8a56e7fde6caa09ac", 0x34}, {&(0x7f0000000480)="1714293c4148fa086cf0760103d640ff70efe7071fafac9cf45ad131e47368f9730041ab700dbac5d4cb551ffc700bc9b420b4b9e5b71b151092216c93186eb1ff68deccc0c9e92cb5a5dd4b4633127052c52b5707fda26f896c791e", 0x5c}, {0x0}], 0x3}, 0x4000010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in6, @in6=@ipv4={""/10, ""/2, @private}}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m33.782120995s ago: executing program 1 (id=2164):
r0 = fanotify_init(0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}, {0x9}}}, 0xb8}}, 0x0)
fanotify_mark(r0, 0x1, 0x2a, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
sendmsg$nl_generic(r2, 0x0, 0x4000)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
getpgid(0x0)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x2, 0x40})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x5})
close_range(r3, 0xffffffffffffffff, 0x0)

5m33.674429197s ago: executing program 1 (id=2165):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x94, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x118}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5m33.657609355s ago: executing program 1 (id=2166):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11d)

5m32.780596363s ago: executing program 1 (id=2172):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pipe(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,ignoreqv,mmUp,access=user,afid=0x0'])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)

5m17.561049466s ago: executing program 35 (id=2172):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pipe(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,ignoreqv,mmUp,access=user,afid=0x0'])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)

15.719741713s ago: executing program 4 (id=4408):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = socket$inet6(0xa, 0x2, 0x11)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysv\x00', 0x8010, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

14.750179639s ago: executing program 4 (id=4416):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = open(0x0, 0x92782, 0x8c)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x7, 0x7ff, 0x5, 0xffffff05, 0x7, 0x1, 0x401, 0xff, 0xffff, 0x6, 0x7f, 0xfffffff6, 0x245a, 0x1, 0xffe00000, 0x9, 0x1, 0xf, 0x9, 0x4, 0x5, 0x3, 0xfff, 0x4, 0x5, 0x9, 0x351, 0x9, 0x4, 0xfff, 0x7]})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x7f, 0x81, 0x0, 0xb9ff, 0x9})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0))
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x97)
syz_usb_control_io(r0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x4, 0xe, 0x0, 0x40, 0x55}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b03, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.470465251s ago: executing program 4 (id=4430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/260, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0x13e}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0)

12.170381007s ago: executing program 4 (id=4433):
syz_usb_connect(0x0, 0x1b, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xf2, 0x36, 0x70, 0x10, 0xe8d, 0x763f, 0xa766, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x7, 0xa0, 0x8}}]}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000300), 0xe, 0xc8201) (async)
r0 = syz_open_dev$I2C(&(0x7f0000000300), 0xe, 0xc8201)
pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0) (async)
pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x13, 0x4, 0x6162f01a, 0x20, 0x18, 0xfca})
r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000100)={0x9, 0x100, 0x5, {0xb, 0x1, 0x7, 0xfff}})
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x0, @multicast}, 0x48, {0x2, 0x4e20, @multicast1}, 'gre0\x00'})
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000100), &(0x7f00000002c0)=0x4)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@alg={0x118, 0x10, 0x400, 0x70bd2c, 0x25dfdbff, {{'stdrng\x00'}, '\x00', '\x00', 0x0, 0x2400}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xa}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x877}, {0x8, 0x1, 0x200}, {0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x41}, 0x80)
prctl$PR_SET_UNALIGN(0x6, 0x2)
connect$netlink(r4, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)

11.095354946s ago: executing program 4 (id=4438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0e0000}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4001}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f0000000e80)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000440)=""/126, 0x7e}], 0x5}, 0x80000003}], 0x4, 0x10100, 0x0)

10.940709779s ago: executing program 4 (id=4439):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = open(0x0, 0x92782, 0x8c)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfe, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x4, 0xe, 0x4, 0x40, 0x55}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b03, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.777144557s ago: executing program 6 (id=4478):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x45)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000200)={'\x00', 0x1})
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x10, 0x42000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x21}, {0x9, 0x51b2, 0x0, 0x800000, 0x0, 0x5, 0xd, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@loopback, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x2, 0x0, 0x9, 0xfffffffc, 0x7, 0x401}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)=@newtfilter={0x70c, 0x2c, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0x4, 0xfff3}, {0x8, 0xe}}, [@f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x7b37}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}]}}, @f_tcindex={{0xc}, {0x6b4, 0x2, [@TCA_TCINDEX_POLICE={0x4c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3c8095da}, @TCA_POLICE_TBF={0x3c, 0x1, {0x67, 0x10000000, 0x2, 0x9, 0x4, {0x4e, 0x2, 0x8, 0x54, 0x8, 0x5}, {0xa, 0x1, 0x8b, 0xff9, 0xabf1, 0x6}, 0xcae, 0xb, 0x4}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffff800}, @TCA_TCINDEX_ACT={0x230, 0x7, [@m_ctinfo={0x11c, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5d}]}, {0xe5, 0x6, "552ca6c1608bd8d9a9ab0d2d2236d1c47b5eb1eba217c49930a371121c38e98b1b57171abdf09a76343cc187e4d1e4207f82a67e891e7d5614909b28705dd72e27bb869eb49cae047097b844821e0d35a9dd8926d5761753dafc1f00513e59b91f629b7c7b61601a8920a5baef8622edf0da49f9bb7a307768f2ee0c92ab46a52b346a4f2e4c0134cd3187e93fbd69c9e39a9b9846c8d65d499ca4d232881e06e2ceb0e3d9dfeffd8e32504840f523b9265c4bb917c2d8de449610c7ebdcb14ce9d8d81ca79704bd1b50c36f3c7f468fdbaff9674e5beb7f9a52fb07b38f2fb97d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x110, 0x5, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d4f, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x57, 0x7, 0x2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x21b8, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa0, 0x8, 0xffffffffffffffff, 0xe, 0x2}}]}, {0x9c, 0x6, "3facfcb5d0eff474c907436d264c31a403148dfd63d3db6742cda90a8710e753e9ba88fed3e32ff067fb47acee458fed5b389e467a2b8d6b318286e3eed788dbe5780ebd6324c2110eb5d7cc2cedc0095be093be82937a5be09676965a438274d8b3b34690f1206652f57b4160c2d040115f345e2d4bcb312c86355ed838a149cf64c067139b459ba75d45059361304868851bb97421c7ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc9b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x43, 0x2000000, 0x3a5, 0xffffffea, 0x758e8640, 0x8, 0x1d9fc00, 0x6, 0x4, 0x2, 0x7, 0xb4d, 0x1ff, 0x2, 0x1, 0x15, 0x0, 0xffffffff, 0xd8, 0x5, 0xfe, 0x8, 0x5, 0x3, 0x8, 0xf0, 0xa, 0x0, 0x5, 0x9, 0x2, 0x3, 0xfffffffa, 0x36, 0x6, 0x7, 0x6, 0x10000, 0x9, 0x6, 0x7, 0x5, 0xffffffff, 0x5, 0x8, 0xc, 0x5, 0x7, 0x2d7, 0x8, 0x800, 0x6e, 0x200, 0x60, 0x4, 0x0, 0x19, 0xffff4ea8, 0x5e, 0x9, 0x6, 0x1, 0x3, 0x2, 0x9, 0x5, 0x1, 0x3, 0x3, 0x81, 0x8, 0x9, 0x9, 0x1, 0x2, 0x9e, 0x3, 0x2, 0x4, 0x5, 0x8, 0x1, 0x6, 0x0, 0xcfd1, 0x7, 0x9, 0x5, 0x2, 0x8, 0x5, 0x25d, 0xffff, 0x10000, 0x8, 0x80, 0x8, 0x1, 0xd, 0x4, 0xf818, 0x7f, 0x9, 0xffffff7f, 0x4, 0x1, 0x10000, 0x9, 0xfe7, 0x2, 0x7f, 0x1, 0x7, 0x10, 0x4c7c, 0xbf, 0x0, 0x8, 0x5, 0x4, 0x1, 0x401, 0x5, 0x3, 0x3, 0xf, 0x30000, 0x200, 0x7, 0x8, 0x4, 0xfffffc01, 0x10001, 0x0, 0xb218, 0x1, 0x5c51, 0x171, 0x5, 0x4, 0x2, 0x7, 0x5, 0x5, 0x201, 0x1b2, 0x1, 0x0, 0x1, 0x9, 0x7, 0x5, 0x10, 0x6, 0x6, 0x8, 0xfffffffb, 0xfffffab3, 0x1, 0xbc1, 0x3, 0x7, 0x4, 0x7f, 0x6, 0xc35, 0x80000000, 0x8, 0x50e, 0x6, 0x3, 0x8, 0xf5, 0x4, 0x1, 0x48d5, 0x2, 0x4, 0x101, 0xfffffffe, 0x7fffffff, 0x6, 0x763d, 0x6, 0x9, 0x2, 0xfffffffa, 0x9, 0x8, 0x9, 0x100, 0x80, 0xcc7, 0x4, 0xfffffa8d, 0x6, 0x1391, 0x8, 0x200, 0x1, 0x8, 0x2, 0xa72, 0x6, 0x10000, 0x9, 0x1, 0x3, 0x6, 0x0, 0xfff, 0x0, 0x5, 0x6, 0x1, 0x401, 0x3ff, 0x77, 0x538f, 0x1, 0x5, 0x3, 0x5, 0x2, 0x2, 0x4, 0x6, 0x9, 0x0, 0x7, 0x2, 0x2, 0x1ff, 0x4, 0x2, 0x200008, 0xb, 0x8, 0x0, 0x4, 0xe04, 0x3, 0xa00, 0x6, 0x8977, 0x3, 0x2, 0x5, 0x1, 0x200, 0x21, 0x1, 0x9e6d, 0x2]}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0x7}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd413}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x4008084}, 0x80)
listen(r5, 0x89)
connect$rose(r5, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r4, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1e, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "ae3151b9dd0fe9ca443e8ae600", [0x2]}})
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x1008, 0x8000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x614180)
ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000140)={0x1, 0x760})
r9 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})
ioctl$LOOP_CHANGE_FD(r9, 0x4c03, 0xffffffffffffffff)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

2.69409973s ago: executing program 0 (id=4479):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @time})
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d4980fc7682bc4c2999aaddd8bceb38fe8eca2a80100000037c4e14ddee2660f38810b", 0x38}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000000780)=0x4, 0x4)
write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000004000", 0x1c)

2.391771922s ago: executing program 0 (id=4481):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0x1cf, 0x44088881, 0x0, 0x0)
ftruncate(r1, 0x2000009)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
creat(&(0x7f0000000000)='./file0\x00', 0x42)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x24008800)
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))

2.33058049s ago: executing program 7 (id=4482):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x700000000000000, 0x40080}, 0x0)

2.18257739s ago: executing program 7 (id=4483):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0x1cf, 0x44088881, 0x0, 0x0)
ftruncate(r1, 0x2000009)
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (fail_nth: 2)

1.718515053s ago: executing program 7 (id=4484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x20, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/260, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0x13e}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0)

1.606059725s ago: executing program 6 (id=4485):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xe2f, 0xc0800)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0x80000002, 0x7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0x0, 0x8}})
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/248)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x280c080, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

1.536392046s ago: executing program 7 (id=4486):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x210001, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x72bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x6, 0xb89, 0x55a1}, 0x10)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)

1.412406102s ago: executing program 0 (id=4487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0)

690.384247ms ago: executing program 6 (id=4488):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000065c0)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
connect$802154_dgram(r1, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)

641.654757ms ago: executing program 0 (id=4489):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x20090)

556.174961ms ago: executing program 7 (id=4490):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x10000}], 0x2, 0x22, 0x0)

410.342718ms ago: executing program 0 (id=4491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
clock_getres(0x8, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="65660f70b6d18c3920000fc71e6543acc421f9137e00c44251bc7200450f01b9265f00000f20d835080000000f22d83ef2f6dd48b8c9000000000000000f23d80f21f835400000300f23f8dfa500000000", 0x51}], 0x1, 0x8, &(0x7f00000001c0)=[@cstype0={0x4, 0xd}, @dstype0={0x6, 0xc}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f0000000380))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

392.704668ms ago: executing program 6 (id=4492):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xf)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, 0x0, 0x0)
getpeername$ax25(r2, &(0x7f0000000080)={{0x3, @netrom}, [@null, @rose, @remote, @netrom, @null, @rose, @null, @netrom]}, &(0x7f0000000100)=0x48)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000))
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mount(&(0x7f0000000040)=@filename='./file0/file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r1, 0x0, 0xf) (async)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, 0x0, 0x0) (async)
getpeername$ax25(r2, &(0x7f0000000080)={{0x3, @netrom}, [@null, @rose, @remote, @netrom, @null, @rose, @null, @netrom]}, &(0x7f0000000100)=0x48) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async)
mount(&(0x7f0000000040)=@filename='./file0/file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async)

251.809689ms ago: executing program 7 (id=4493):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x80fe}, {{0x0, 0x0, 0x0}, 0x5431f000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/260, 0x104}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002b80)=""/4098, 0x1002}, {0x0}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0)

178.535347ms ago: executing program 6 (id=4494):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27)

15.817547ms ago: executing program 6 (id=4495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r1, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

0s ago: executing program 0 (id=4496):
sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x480c6)
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0xfe, 0x80000001})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x25e, 0x7, 0x4, 0x6d, 0x1, 0x2, 0xffffffff, 0xde, 0x9c7b, 0x1, 0xfff, 0x6, 0x6, 0xffffffffffffffff, 0x4], 0x5000, 0x41354})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])

kernel console output (not intermixed with test programs):

.3467': attribute type 29 has an invalid length.
[  647.410371][ T5824] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  647.417413][ T5824] usb 8-1: MIDIStreaming interface descriptor not found
[  647.480366][ T5824] usb 8-1: USB disconnect, device number 66
[  647.643111][ T5899] usb 7-1: USB disconnect, device number 70
[  648.002126][T16363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  648.258543][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3479'.
[  648.551292][ T5824] usb 1-1: USB disconnect, device number 42
[  648.943845][T16410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  648.979778][ T5833] Bluetooth: hci4: command 0x0419 tx timeout
[  649.151640][T16417] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3489'.
[  649.460029][ T5824] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  649.619857][ T3561] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  649.627617][ T5824] usb 1-1: Using ep0 maxpacket: 8
[  649.656571][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.674099][ T5824] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 13
[  649.695604][ T5824] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  649.711849][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.723627][ T5824] usb 1-1: Product: syz
[  649.727855][ T5824] usb 1-1: Manufacturer: syz
[  649.737265][ T5824] usb 1-1: SerialNumber: syz
[  649.752518][ T5824] usb 1-1: config 0 descriptor??
[  649.820669][ T3561] usb 7-1: Using ep0 maxpacket: 16
[  649.833069][ T3561] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  649.861836][ T3561] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  649.897257][ T3561] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  649.918986][ T3561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.936641][ T3561] usb 7-1: Product: syz
[  649.943817][ T3561] usb 7-1: Manufacturer: syz
[  649.948902][ T3561] usb 7-1: SerialNumber: syz
[  649.966783][ T3561] usb 7-1: config 0 descriptor??
[  650.003546][ T3561] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  650.022411][ T3561] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  650.291911][T16457] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3499'.
[  650.586879][ T3561] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  650.594657][ T3561] em28xx 7-1:0.0: Config register raw data: 0x16
[  650.813626][ T3561] em28xx 7-1:0.0: AC97 command still being executed: not handled properly!
[  650.830139][ T3561] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  650.847906][ T3561] em28xx 7-1:0.0: No AC97 audio processor
[  651.007805][ T3561] usb 7-1: USB disconnect, device number 71
[  651.031816][ T3561] em28xx 7-1:0.0: Disconnecting em28xx
[  651.078631][ T3561] em28xx 7-1:0.0: Freeing device
[  651.240752][T16496] netlink: 184 bytes leftover after parsing attributes in process `syz.7.3508'.
[  651.399605][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  651.551497][   T24] usb 5-1: device descriptor read/64, error -71
[  651.799784][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  651.949948][   T24] usb 5-1: device descriptor read/64, error -71
[  652.077062][   T24] usb usb5-port1: attempt power cycle
[  652.278698][ T5824] usb 1-1: USB disconnect, device number 43
[  652.409811][ T9820] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  652.430348][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  652.478812][   T24] usb 5-1: device descriptor read/8, error -71
[  652.569575][ T9820] usb 7-1: Using ep0 maxpacket: 8
[  652.589134][ T9820] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  652.624361][ T9820] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  652.659506][ T9820] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  652.679517][ T9820] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  652.703277][ T9820] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  652.720034][ T9820] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  652.735394][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  652.747825][ T9820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.761623][   T24] usb 5-1: device descriptor read/8, error -71
[  652.852739][T16556] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  652.880284][   T24] usb usb5-port1: unable to enumerate USB device
[  652.999962][ T9820] usb 7-1: usb_control_msg returned -32
[  653.005632][ T9820] usbtmc 7-1:16.0: can't read capabilities
[  653.014549][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.046018][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.139877][T16531] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  653.339973][ T9820] usb 7-1: USB disconnect, device number 72
[  653.659725][   T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  653.829757][   T10] usb 1-1: Using ep0 maxpacket: 8
[  653.846034][   T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 13
[  653.875225][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  653.887385][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.898731][   T10] usb 1-1: Product: syz
[  653.904737][   T10] usb 1-1: Manufacturer: syz
[  653.911979][   T10] usb 1-1: SerialNumber: syz
[  653.924539][   T10] usb 1-1: config 0 descriptor??
[  654.329590][ T5824] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  654.507453][ T5824] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  654.535855][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.555877][ T5824] usb 7-1: config 0 descriptor??
[  654.743172][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  654.925538][   T24] usb 5-1: Using ep0 maxpacket: 32
[  654.944164][   T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  654.953037][   T24] usb 5-1: config 0 has no interface number 0
[  654.959251][   T24] usb 5-1: config 0 interface 184 has no altsetting 0
[  654.977391][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  654.993515][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.007846][   T24] usb 5-1: Product: syz
[  655.015375][   T24] usb 5-1: Manufacturer: syz
[  655.021880][   T24] usb 5-1: SerialNumber: syz
[  655.040574][   T24] usb 5-1: config 0 descriptor??
[  655.051266][   T24] smsc75xx v1.0.0
[  655.353618][ T5824] usbhid 7-1:0.0: can't add hid device: -71
[  655.381634][ T5824] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  655.418970][ T5824] usb 7-1: USB disconnect, device number 73
[  655.646287][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3534'.
[  655.676782][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  655.703133][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  655.747412][T16661] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3535'.
[  655.842969][T16664] 9pnet_fd: Insufficient options for proto=fd
[  655.863157][T16664] /dev/rnullb0: Can't lookup blockdev
[  655.927174][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  655.949622][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  655.959234][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  655.978944][   T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  656.520022][   T10] usb 1-1: USB disconnect, device number 44
[  656.716449][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'.
[  657.243677][T16733] /dev/rnullb0: Can't open blockdev
[  657.530570][ T3561] usb 5-1: USB disconnect, device number 11
[  657.593584][T16751] FAULT_INJECTION: forcing a failure.
[  657.593584][T16751] name failslab, interval 1, probability 0, space 0, times 0
[  657.618267][T16751] CPU: 1 UID: 0 PID: 16751 Comm: syz.0.3558 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  657.618298][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  657.618312][T16751] Call Trace:
[  657.618321][T16751]  <TASK>
[  657.618331][T16751]  dump_stack_lvl+0x189/0x250
[  657.618359][T16751]  ? __pfx____ratelimit+0x10/0x10
[  657.618385][T16751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.618408][T16751]  ? __pfx__printk+0x10/0x10
[  657.618438][T16751]  ? __pfx___might_resched+0x10/0x10
[  657.618458][T16751]  ? fs_reclaim_acquire+0x7d/0x100
[  657.618490][T16751]  should_fail_ex+0x414/0x560
[  657.618526][T16751]  should_failslab+0xa8/0x100
[  657.618553][T16751]  __kmalloc_noprof+0xcb/0x4f0
[  657.618575][T16751]  ? kfree+0x4d/0x440
[  657.618592][T16751]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  657.618623][T16751]  tomoyo_realpath_from_path+0xe3/0x5d0
[  657.618650][T16751]  ? tomoyo_domain+0xd9/0x130
[  657.618680][T16751]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  657.618713][T16751]  tomoyo_path_number_perm+0x1e8/0x5a0
[  657.618749][T16751]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  657.618792][T16751]  ? sb_end_write+0xe9/0x1c0
[  657.618823][T16751]  ? vfs_write+0x8d8/0xa90
[  657.618884][T16751]  ? ksys_write+0x1e1/0x250
[  657.618917][T16751]  security_file_ioctl+0xcb/0x2d0
[  657.618950][T16751]  __se_sys_ioctl+0x47/0x170
[  657.618977][T16751]  do_syscall_64+0xfa/0x3b0
[  657.619003][T16751]  ? lockdep_hardirqs_on+0x9c/0x150
[  657.619029][T16751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.619050][T16751]  ? clear_bhb_loop+0x60/0xb0
[  657.619076][T16751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.619096][T16751] RIP: 0033:0x7f0cd538e929
[  657.619116][T16751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.619134][T16751] RSP: 002b:00007f0cd629a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  657.619157][T16751] RAX: ffffffffffffffda RBX: 00007f0cd55b5fa0 RCX: 00007f0cd538e929
[  657.619172][T16751] RDX: 0000200000000240 RSI: 000000004004af07 RDI: 0000000000000003
[  657.619186][T16751] RBP: 00007f0cd629a090 R08: 0000000000000000 R09: 0000000000000000
[  657.619200][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.619213][T16751] R13: 0000000000000000 R14: 00007f0cd55b5fa0 R15: 00007ffe66af5408
[  657.619246][T16751]  </TASK>
[  657.619256][T16751] ERROR: Out of memory at tomoyo_realpath_from_path.
[  657.737154][T16757] /dev/rnullb0: Can't open blockdev
[  658.132818][ T3561] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  658.295141][ T3561] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  658.306750][ T3561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.338743][ T3561] usb 5-1: config 0 descriptor??
[  658.556880][ T3561] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  658.571494][ T3561] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  658.584605][ T3561] asix 5-1:0.0: probe with driver asix failed with error -32
[  659.209390][T16799] /dev/rnullb0: Can't open blockdev
[  659.341380][ T3561] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  659.501807][ T3561] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  659.510681][ T3561] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  659.521152][ T3561] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  659.532115][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  659.545360][ T3561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  659.558679][ T3561] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  659.570806][ T3561] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  659.578834][ T3561] usb 1-1: Product: syz
[  659.583115][ T3561] usb 1-1: Manufacturer: syz
[  659.595872][ T3561] cdc_wdm 1-1:1.0: skipping garbage
[  659.601217][ T5824] usb 7-1: new full-speed USB device number 74 using dummy_hcd
[  659.608896][ T3561] cdc_wdm 1-1:1.0: skipping garbage
[  659.617361][ T3561] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  659.623495][ T3561] cdc_wdm 1-1:1.0: Unknown control protocol
[  659.672006][    T9] usb 5-1: USB disconnect, device number 12
[  659.693374][T16810] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3582'.
[  659.739584][ T5824] usb 7-1: device descriptor read/64, error -71
[  659.979559][ T5824] usb 7-1: new full-speed USB device number 75 using dummy_hcd
[  660.139582][ T5824] usb 7-1: device descriptor read/64, error -71
[  660.168091][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3589'.
[  660.244659][T16812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3583'.
[  660.249963][ T5824] usb usb7-port1: attempt power cycle
[  660.317301][ T3561] usb 1-1: USB disconnect, device number 45
[  660.609625][T16836] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3593'.
[  660.609682][ T5824] usb 7-1: new full-speed USB device number 76 using dummy_hcd
[  660.675020][ T5824] usb 7-1: device descriptor read/8, error -71
[  660.846180][   T12] syzkaller0: tun_net_xmit 76
[  660.866582][   T12] syzkaller0: tun_net_xmit 48
[  660.872597][ T3561] syzkaller0: tun_net_xmit 76
[  660.939731][ T5824] usb 7-1: new full-speed USB device number 77 using dummy_hcd
[  660.971383][ T5824] usb 7-1: device descriptor read/8, error -71
[  661.015258][T16816] syzkaller0: tun_chr_ioctl cmd 1074025677
[  661.049768][T16816] syzkaller0: Linktype set failed because interface is up
[  661.091751][ T5824] usb usb7-port1: unable to enumerate USB device
[  661.621095][T16873] 9pnet_fd: Insufficient options for proto=fd
[  663.865607][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3608'.
[  664.201411][T16898] /dev/rnullb0: Can't open blockdev
[  664.404337][T16908] /dev/rnullb0: Can't lookup blockdev
[  664.522235][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3624'.
[  664.693061][T16923] /dev/rnullb0: Can't open blockdev
[  664.809571][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  664.982531][   T10] usb 1-1: Using ep0 maxpacket: 8
[  664.994881][   T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  665.003480][   T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  665.022928][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  665.034396][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.259761][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  665.309754][   T10] usb 1-1: string descriptor 0 read error: -71
[  665.328627][   T10] usb 1-1: USB disconnect, device number 46
[  665.409607][    T9] usb 5-1: Using ep0 maxpacket: 32
[  665.418293][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  665.430451][    T9] usb 5-1: config 0 has no interface number 0
[  665.436635][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  665.446391][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  665.455910][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.464085][    T9] usb 5-1: Product: syz
[  665.468339][    T9] usb 5-1: Manufacturer: syz
[  665.474552][    T9] usb 5-1: SerialNumber: syz
[  665.483081][    T9] usb 5-1: config 0 descriptor??
[  665.493320][    T9] smsc75xx v1.0.0
[  666.109197][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  666.120613][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  666.333735][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  666.353671][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  666.374143][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  666.391376][    T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  666.693858][T16973] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3647'.
[  667.199605][ T9820] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  667.371898][ T9820] usb 1-1: config 173 has too many interfaces: 145, using maximum allowed: 32
[  667.384254][ T9820] usb 1-1: config 173 has an invalid descriptor of length 241, skipping remainder of the config
[  667.399591][ T9820] usb 1-1: config 173 has 0 interfaces, different from the descriptor's value: 145
[  667.422107][ T9820] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  667.431555][ T9820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.441662][ T9820] usb 1-1: Product: syz
[  667.449761][ T9820] usb 1-1: Manufacturer: syz
[  667.458149][ T9820] usb 1-1: SerialNumber: syz
[  667.798723][T16980] overlayfs: missing 'lowerdir'
[  668.046903][    T9] usb 5-1: USB disconnect, device number 13
[  668.269852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  668.285995][T17022] /dev/rnullb0: Can't open blockdev
[  668.321293][ T9820] usb 1-1: USB disconnect, device number 47
[  668.929557][T12562] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[  669.042143][T17039] loop6: detected capacity change from 0 to 7
[  669.056626][T17039] Dev loop6: unable to read RDB block 7
[  669.069679][T17039]  loop6: unable to read partition table
[  669.075980][T17039] loop6: partition table beyond EOD, truncated
[  669.104286][T17039] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  669.117146][T12562] usb 7-1: Using ep0 maxpacket: 32
[  669.137765][T12562] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  669.152194][T12562] usb 7-1: config 0 has no interface number 0
[  669.159419][T12562] usb 7-1: config 0 interface 184 has no altsetting 0
[  669.166442][T17039] cgroup: Unknown subsys name 'cpuset'
[  669.185025][T12562] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  669.196729][T12562] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.209129][T12562] usb 7-1: Product: syz
[  669.219637][T12562] usb 7-1: Manufacturer: syz
[  669.224290][T12562] usb 7-1: SerialNumber: syz
[  669.250148][T12562] usb 7-1: config 0 descriptor??
[  669.268280][T12562] smsc75xx v1.0.0
[  669.884239][T12562] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  669.895850][T12562] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  670.125581][T12562] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  670.346379][T12562] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  670.372050][T12562] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  670.394721][T12562] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61
[  670.916114][T17091] fuse: Bad value for 'user_id'
[  670.923125][T17091] fuse: Bad value for 'user_id'
[  671.029062][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'.
[  671.062121][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3693'.
[  671.743746][ T3561] usb 7-1: USB disconnect, device number 78
[  671.786246][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'.
[  671.858684][T17137] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3707'.
[  671.985437][T17148] /dev/rnullb0: Can't lookup blockdev
[  672.013384][T17147] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3711'.
[  672.158690][T17152] /dev/rnullb0: Can't lookup blockdev
[  672.866283][T17173] /dev/rnullb0: Can't open blockdev
[  673.026150][T17178] /dev/rnullb0: Can't open blockdev
[  673.860006][T17196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3734'.
[  673.896739][T17196] binder: Unknown parameter 'uid<00000000000000000000'
[  674.003121][T17198] program syz.6.3735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  674.227886][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3738'.
[  674.338317][T17209] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3740'.
[  674.752053][ T3561] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  674.903097][T17226] binder: Unknown parameter ''
[  674.926397][ T3561] usb 5-1: Using ep0 maxpacket: 8
[  674.942569][ T3561] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  674.962583][ T3561] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  674.972343][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.985224][ T3561] usb 5-1: Product: syz
[  674.991318][ T3561] usb 5-1: Manufacturer: syz
[  674.995961][ T3561] usb 5-1: SerialNumber: syz
[  675.003317][T17230] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  675.012166][T17230] /dev/rnullb0: Can't open blockdev
[  675.012905][ T3561] usb 5-1: config 0 descriptor??
[  675.034544][ T3561] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  675.268383][T17240] /dev/rnullb0: Can't open blockdev
[  676.015203][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3756'.
[  676.112230][ T5833] Bluetooth: hci4: unexpected event for opcode 0x0c7d
[  676.275223][T17258] ./file0: Can't lookup blockdev
[  676.739756][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3768'.
[  676.882978][T17283] fuseblk: Unknown parameter 'uid<00000000000000000000'
[  677.045957][T17292] /dev/rnullb0: Can't open blockdev
[  677.354143][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'.
[  677.875597][T17322] /dev/rnullb0: Can't open blockdev
[  677.900258][ T3561] gspca_zc3xx: reg_r err -32
[  678.040121][ T5824] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  678.156128][T17334] /dev/rnullb0: Can't open blockdev
[  678.198913][T17337] /dev/rnullb0: Can't lookup blockdev
[  678.200228][ T5824] usb 1-1: device descriptor read/64, error -71
[  678.253022][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3795'.
[  678.479575][ T5824] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  678.489673][ T3561] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  678.498228][ T3561] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  678.609614][ T5824] usb 1-1: device descriptor read/64, error -71
[  678.730113][ T5824] usb usb1-port1: attempt power cycle
[  678.806787][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3802'.
[  678.816153][T17360] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3802'.
[  678.825888][T17360] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3802'.
[  678.948813][ T3561] usb 5-1: USB disconnect, device number 14
[  679.069601][ T5824] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  679.118164][ T5824] usb 1-1: device descriptor read/8, error -71
[  679.210519][T17375] block nbd6: shutting down sockets
[  679.364647][   T30] audit: type=1326 audit(1751318709.455:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17383 comm="syz.6.3813" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00ddf8e929 code=0x0
[  679.389849][ T5824] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  679.430292][ T5824] usb 1-1: device descriptor read/8, error -71
[  679.495886][T17393] binder: Unknown parameter 'max000000000000§vßINC7e'
[  679.560744][ T5824] usb usb1-port1: unable to enumerate USB device
[  680.398139][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'.
[  680.410915][T17416] /dev/rnullb0: Can't open blockdev
[  680.538670][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'.
[  680.752038][ T5824] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  680.929532][ T5824] usb 5-1: Using ep0 maxpacket: 8
[  680.957990][ T5824] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  680.973995][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  680.997199][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.010088][ T5824] usb 5-1: Product: syz
[  681.014320][ T5824] usb 5-1: Manufacturer: syz
[  681.029672][ T5824] usb 5-1: SerialNumber: syz
[  681.044265][ T5824] usb 5-1: config 0 descriptor??
[  681.065300][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  681.073169][T17447] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3836'.
[  681.475688][T17456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3839'.
[  681.499315][T17456] Bluetooth: hci3: Frame reassembly failed (-90)
[  681.507407][T11954] Bluetooth: hci3: Frame reassembly failed (-84)
[  681.508341][T17456] /dev/rnullb0: Can't open blockdev
[  681.676128][T17460] can: request_module (can-proto-0) failed.
[  682.179931][    T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[  682.339562][    T9] usb 7-1: Using ep0 maxpacket: 8
[  682.373940][    T9] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  682.393341][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.414737][    T9] usb 7-1: Product: syz
[  682.418949][    T9] usb 7-1: Manufacturer: syz
[  682.426767][    T9] usb 7-1: SerialNumber: syz
[  682.440629][    T9] usb 7-1: config 0 descriptor??
[  682.685133][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  682.975328][    T9] gspca_sunplus: reg_w_riv err -71
[  682.982235][    T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  683.005695][    T9] usb 7-1: USB disconnect, device number 79
[  683.539590][T11706] Bluetooth: hci3: command 0x1003 tx timeout
[  683.539908][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  683.814225][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3862'.
[  683.907160][ T5824] gspca_zc3xx: reg_r err -32
[  683.946157][T17522] /dev/rnullb0: Can't open blockdev
[  684.025489][T17524] binder: Bad value for 'max'
[  684.195279][T17531] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3868'.
[  684.510137][ T5824] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  684.523989][ T5824] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  684.547806][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3872'.
[  684.952030][ T5824] usb 5-1: USB disconnect, device number 15
[  685.123937][T17555] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.3879'.
[  685.176882][T17560] block nbd0: shutting down sockets
[  685.277629][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'.
[  685.385691][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.499125][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.567396][T17576] binder: Unknown parameter 'smackfsdef'
[  685.591676][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.688252][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.724591][T17581] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3890'.
[  685.809381][T17583] /dev/sg0: Can't lookup blockdev
[  685.912167][   T13] bridge_slave_1: left allmulticast mode
[  685.917907][   T13] bridge_slave_1: left promiscuous mode
[  685.943409][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.987241][   T13] bridge_slave_0: left allmulticast mode
[  686.000032][   T13] bridge_slave_0: left promiscuous mode
[  686.016743][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.033654][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  686.371333][   T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  686.469563][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  686.542142][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  686.558968][   T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  686.573214][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.582537][   T24] usb 1-1: Product: syz
[  686.588299][   T24] usb 1-1: Manufacturer: syz
[  686.602846][   T24] usb 1-1: SerialNumber: syz
[  686.617032][   T24] usb 1-1: config 0 descriptor??
[  686.642372][   T24] usb 1-1: bad CDC descriptors
[  686.670234][   T24] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[  686.670640][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  686.678105][   T24] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[  686.678139][   T24] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[  686.720363][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  686.731209][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.754199][   T10] usb 5-1: config 0 descriptor??
[  686.892705][T17587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.922743][T17587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.935268][T17608] : Can't lookup blockdev
[  686.954753][T17587] fuseblk: Bad value for 'group_id'
[  686.960923][T17587] fuseblk: Bad value for 'group_id'
[  686.996185][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.012172][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.026124][   T13] bond0 (unregistering): Released all slaves
[  687.079319][ T5824] usb 1-1: USB disconnect, device number 52
[  687.185565][   T10] pyra 0003:1E7D:2C24.003B: item fetching failed at offset 0/3
[  687.202649][   T10] pyra 0003:1E7D:2C24.003B: parse failed
[  687.208900][   T10] pyra 0003:1E7D:2C24.003B: probe with driver pyra failed with error -22
[  687.357395][T17617] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  687.365125][T17617] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  687.381911][T17618] binder: Unknown parameter 'm‰½òM¸! Я£Ëax'
[  687.397770][T17616] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  687.404310][T17616] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  687.431770][T17616] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  687.438324][T17616] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  687.457600][T17616] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  687.464143][T17616] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  687.482074][T17617] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  687.488619][T17617] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  688.069755][ T5824] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  688.208608][   T13] hsr_slave_0: left promiscuous mode
[  688.235051][   T13] hsr_slave_1: left promiscuous mode
[  688.259123][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.297675][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.310073][ T5824] usb 1-1: Using ep0 maxpacket: 8
[  688.323171][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.342969][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.348245][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  688.367238][ T5824] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  688.392379][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.429802][ T5824] usb 1-1: Product: syz
[  688.434040][ T5824] usb 1-1: Manufacturer: syz
[  688.438668][ T5824] usb 1-1: SerialNumber: syz
[  688.453362][   T13] veth1_macvtap: left promiscuous mode
[  688.471180][   T13] veth0_macvtap: left promiscuous mode
[  688.477436][ T5824] usb 1-1: config 0 descriptor??
[  688.496322][   T13] veth1_vlan: left promiscuous mode
[  688.506862][   T13] veth0_vlan: left promiscuous mode
[  688.507767][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  688.680060][    T9] usb 5-1: USB disconnect, device number 16
[  689.343598][   T13] team0 (unregistering): Port device team_slave_1 removed
[  689.402269][   T13] team0 (unregistering): Port device team_slave_0 removed
[  690.565300][   T13] IPVS: stop unused estimator thread 0...
[  690.706334][    C0] Unknown status report in ack skb
[  690.719943][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  690.750390][T17684] /dev/rnullb0: Can't lookup blockdev
[  690.889854][   T10] usb 5-1: Using ep0 maxpacket: 16
[  690.902954][   T10] usb 5-1: config 0 has no interfaces?
[  690.908510][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  690.929942][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.985589][   T10] usb 5-1: config 0 descriptor??
[  691.083710][T17699] /dev/rnullb0: Can't lookup blockdev
[  691.208282][    T9] usb 5-1: USB disconnect, device number 17
[  691.360647][ T5824] gspca_zc3xx: reg_r err -32
[  691.374283][T17708] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3919'.
[  691.889722][    T9] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[  691.949916][ T5824] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  691.956305][ T5824] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  692.059849][    T9] usb 7-1: Using ep0 maxpacket: 16
[  692.069397][    T9] usb 7-1: config 4 has an invalid interface number: 85 but max is 2
[  692.086139][    T9] usb 7-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[  692.114933][    T9] usb 7-1: config 4 has an invalid interface number: 128 but max is 2
[  692.132851][    T9] usb 7-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[  692.142205][    T9] usb 7-1: config 4 has an invalid interface number: 157 but max is 2
[  692.151433][    T9] usb 7-1: config 4 has no interface number 0
[  692.157792][    T9] usb 7-1: config 4 has no interface number 1
[  692.166311][    T9] usb 7-1: config 4 has no interface number 2
[  692.173068][    T9] usb 7-1: config 4 interface 85 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  692.207714][    T9] usb 7-1: config 4 interface 128 altsetting 50 endpoint 0x1 has an invalid bInterval 127, changing to 10
[  692.241419][    T9] usb 7-1: config 4 interface 128 altsetting 50 has a duplicate endpoint with address 0xF, skipping
[  692.267455][    T9] usb 7-1: config 4 interface 128 altsetting 50 has a duplicate endpoint with address 0x4, skipping
[  692.295905][    T9] usb 7-1: config 4 interface 128 altsetting 50 has a duplicate endpoint with address 0xF, skipping
[  692.315499][    T9] usb 7-1: config 4 interface 128 altsetting 50 bulk endpoint 0xA has invalid maxpacket 1023
[  692.328077][    T9] usb 7-1: config 4 interface 128 altsetting 50 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  692.351391][    T9] usb 7-1: config 4 interface 128 altsetting 50 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  692.364548][    T9] usb 7-1: config 4 interface 128 altsetting 50 has a duplicate endpoint with address 0xF, skipping
[  692.413421][    T9] usb 7-1: config 4 interface 128 altsetting 50 has a duplicate endpoint with address 0xA, skipping
[  692.427010][   T10] usb 1-1: USB disconnect, device number 53
[  692.470197][    T9] usb 7-1: config 4 interface 128 altsetting 50 has an invalid descriptor for endpoint zero, skipping
[  692.511985][    T9] usb 7-1: config 4 interface 128 altsetting 50 endpoint 0xC has invalid wMaxPacketSize 0
[  692.533314][    T9] usb 7-1: config 4 interface 157 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD
[  692.548996][    T9] usb 7-1: config 4 interface 157 altsetting 0 endpoint 0xD has invalid maxpacket 528, setting to 64
[  692.570231][    T9] usb 7-1: config 4 interface 157 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  692.589924][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  692.601933][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  692.613302][    T9] usb 7-1: config 4 interface 157 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE
[  692.615276][T17752] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3930'.
[  692.626322][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  692.678083][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  692.709640][    T9] usb 7-1: config 4 interface 157 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3
[  692.721816][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  692.734443][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  692.774825][T17758] netlink: 'syz.4.3932': attribute type 10 has an invalid length.
[  692.801574][T17758] /dev/rnullb0: Can't open blockdev
[  692.814576][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  692.856704][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  692.905431][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  692.936865][    T9] usb 7-1: config 4 interface 157 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  692.968242][    T9] usb 7-1: config 4 interface 85 has no altsetting 0
[  692.986955][    T9] usb 7-1: config 4 interface 128 has no altsetting 0
[  693.002102][    T9] usb 7-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=b8.f3
[  693.011860][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.026412][    T9] usb 7-1: Product: à°Š
[  693.031092][    T9] usb 7-1: Manufacturer: ä°Š
[  693.036289][    T9] usb 7-1: SerialNumber: syz
[  693.279861][ T3561] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  693.441657][ T3561] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  693.462598][ T3561] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  693.479390][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.485069][    T9] cxacru 7-1:4.85: usbatm_usb_probe: bind failed: -19!
[  693.500828][ T3561] usb 5-1: Product: syz
[  693.508833][ T3561] usb 5-1: Manufacturer: syz
[  693.521325][ T3561] usb 5-1: SerialNumber: syz
[  693.528489][    T9] cxacru 7-1:4.128: usbatm_usb_probe: bind failed: -19!
[  693.540849][ T3561] usb 5-1: config 0 descriptor??
[  693.562246][ T3561] usb 5-1: bad CDC descriptors
[  693.575469][ T3561] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  693.584207][    T9] cxacru 7-1:4.157: usbatm_usb_probe: bind failed: -19!
[  693.599564][ T3561] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  693.616449][ T3561] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  693.638246][    T9] usb 7-1: USB disconnect, device number 80
[  693.757278][T17766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.796781][T17766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.830975][T17766] fuseblk: Bad value for 'group_id'
[  693.839931][T17766] fuseblk: Bad value for 'group_id'
[  693.876635][ T3561] usb 5-1: USB disconnect, device number 18
[  693.972897][T17788] overlayfs: failed to clone upperpath
[  694.115852][T17793] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.3940'.
[  695.029826][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  695.189801][   T24] usb 5-1: Using ep0 maxpacket: 32
[  695.201632][   T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  695.229909][   T24] usb 5-1: config 0 has no interface number 0
[  695.246857][   T24] usb 5-1: config 0 interface 184 has no altsetting 0
[  695.291081][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  695.314909][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.341910][   T24] usb 5-1: Product: syz
[  695.346144][   T24] usb 5-1: Manufacturer: syz
[  695.367080][   T24] usb 5-1: SerialNumber: syz
[  695.402680][   T24] usb 5-1: config 0 descriptor??
[  695.436316][   T24] smsc75xx v1.0.0
[  695.495728][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3950'.
[  695.505896][T17833] netlink: 'syz.7.3950': attribute type 10 has an invalid length.
[  695.545604][T17833] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  696.055877][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  696.070665][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  696.539377][T17853] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3956'.
[  696.698947][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  696.736862][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  696.760059][T17861] fuseblk: Bad value for 'group_id'
[  696.766111][T17861] fuseblk: Bad value for 'group_id'
[  696.772615][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  696.809954][   T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  697.789740][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  697.936664][ T3561] usb 5-1: USB disconnect, device number 19
[  697.960042][   T24] usb 1-1: Using ep0 maxpacket: 8
[  697.983728][   T24] usb 1-1: config 0 has an invalid interface number: 24 but max is 0
[  698.002546][   T24] usb 1-1: config 0 has no interface number 0
[  698.015184][   T24] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  698.029173][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.052722][   T24] usb 1-1: Product: syz
[  698.057270][   T24] usb 1-1: Manufacturer: syz
[  698.069634][   T24] usb 1-1: SerialNumber: syz
[  698.095191][   T24] usb 1-1: config 0 descriptor??
[  698.176745][T17906] fuseblk: Bad value for 'group_id'
[  698.192519][T17906] fuseblk: Bad value for 'group_id'
[  698.547154][T17919] /dev/rnullb0: Can't open blockdev
[  698.609717][ T5899] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[  698.789581][ T5899] usb 7-1: Using ep0 maxpacket: 16
[  698.797402][ T5899] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  698.799411][   T24] pegasus 1-1:0.24: probe with driver pegasus failed with error -71
[  698.807429][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.833650][   T24] usb 1-1: USB disconnect, device number 54
[  698.879005][ T5899] usb 7-1: config 0 descriptor??
[  698.914140][ T5899] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  699.030487][T17935] fuseblk: Bad value for 'group_id'
[  699.049554][T17935] fuseblk: Bad value for 'group_id'
[  699.129124][T17938] /dev/rnullb0: Can't open blockdev
[  699.136321][ T5899] usb 7-1: Detected FT232A
[  699.144414][ T5899] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  699.180147][ T5899] usb 7-1: USB disconnect, device number 81
[  699.211392][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  699.237786][ T5899] ftdi_sio 7-1:0.0: device disconnected
[  699.442456][T17952] /dev/rnullb0: Can't lookup blockdev
[  699.708103][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3990'.
[  699.734253][T17964] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  699.761331][T17964] /dev/rnullb0: Can't open blockdev
[  700.179953][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  700.213196][T17983] netlink: 'syz.4.3998': attribute type 1 has an invalid length.
[  700.221503][T17983] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3998'.
[  700.349532][    T9] usb 1-1: Using ep0 maxpacket: 16
[  700.391829][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  700.408845][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  700.419108][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.435827][    T9] usb 1-1: Manufacturer: �
[  700.446394][    T9] usb 1-1: SerialNumber: syz
[  700.461907][T17977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  700.589806][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4005'.
[  700.886529][T17977] /dev/rnullb0: Can't open blockdev
[  700.943841][    T9] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  701.013412][    T9] usb 1-1: USB disconnect, device number 55
[  701.096154][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  701.136998][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4012'.
[  701.150973][T18019] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  701.164773][T18019] /dev/rnullb0: Can't open blockdev
[  701.274802][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4014'.
[  701.300173][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  701.481751][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.517586][ T5824] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  701.541401][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.557546][ T5824] usb 5-1: Product: syz
[  701.567663][ T5824] usb 5-1: Manufacturer: syz
[  701.586289][ T5824] usb 5-1: SerialNumber: syz
[  701.602957][ T5824] usb 5-1: config 0 descriptor??
[  701.606632][T18039] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4019'.
[  701.638153][ T5824] usb 5-1: bad CDC descriptors
[  701.651225][ T5824] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  701.679580][ T5824] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  701.693892][ T5824] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  701.842976][T18015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.871795][T18015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.910816][T18015] fuseblk: Bad value for 'group_id'
[  701.916089][T18015] fuseblk: Bad value for 'group_id'
[  701.977182][ T5824] usb 5-1: USB disconnect, device number 20
[  702.066911][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4024'.
[  702.201803][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  702.359592][    T9] usb 1-1: device descriptor read/64, error -71
[  702.555502][T18067] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4029'.
[  702.565118][ T5899] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[  702.609730][    T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  702.622941][T18070] /dev/rnullb0: Can't open blockdev
[  702.734824][ T5899] usb 7-1: config 3 has an invalid interface number: 224 but max is 3
[  702.744408][    T9] usb 1-1: device descriptor read/64, error -71
[  702.751406][ T5899] usb 7-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config
[  702.764081][ T5899] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 4
[  702.764087][T18076] : Can't lookup blockdev
[  702.764110][ T5899] usb 7-1: config 3 has no interface number 0
[  702.784277][ T5899] usb 7-1: config 3 interface 224 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  702.799202][ T5899] usb 7-1: config 3 interface 224 has no altsetting 0
[  702.814424][ T5899] usb 7-1: New USB device found, idVendor=1110, idProduct=9021, bcdDevice=3d.f7
[  702.828816][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.837883][ T5899] usb 7-1: Product: Ы
[  702.845654][ T5899] usb 7-1: Manufacturer: 樧��ꬆۯ打
[  702.852074][ T5899] usb 7-1: SerialNumber: syz
[  702.869922][    T9] usb usb1-port1: attempt power cycle
[  703.077050][ T5899] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9021) Rev (0X3DF7): Eagle II
[  703.208582][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4039'.
[  703.218551][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  703.240565][    T9] usb 1-1: device descriptor read/8, error -71
[  703.305806][T18097] : Can't lookup blockdev
[  703.460844][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4046'.
[  703.479541][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  703.510230][    T9] usb 1-1: device descriptor read/8, error -71
[  703.630014][    T9] usb usb1-port1: unable to enumerate USB device
[  703.856728][T18107] /dev/rnullb0: Can't open blockdev
[  703.913034][ T5899] ueagle-atm 7-1:3.224: usbatm_usb_probe: bind failed: -19!
[  703.943081][ T5899] usb 7-1: USB disconnect, device number 82
[  704.010924][T18126] /dev/rnullb0: Can't open blockdev
[  704.353808][T18139] loop6: detected capacity change from 0 to 7
[  704.366540][T18139] Dev loop6: unable to read RDB block 7
[  704.380199][T18139]  loop6: unable to read partition table
[  704.396967][T18139] loop6: partition table beyond EOD, truncated
[  704.411862][T18139] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  704.818508][T18151] tipc: Started in network mode
[  704.832385][T18151] tipc: Node identity fff, cluster identity 4711
[  704.841786][T18151] tipc: Node number set to 4095
[  704.850093][T18153] : Can't lookup blockdev
[  705.215368][T18172] netlink: 'syz.7.4071': attribute type 5 has an invalid length.
[  705.227489][T18173] netlink: 'syz.4.4070': attribute type 46 has an invalid length.
[  705.236013][T18172] netlink: 'syz.7.4071': attribute type 25 has an invalid length.
[  705.249217][T18172] /dev/rnullb0: Can't lookup blockdev
[  705.289649][T18173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4070'.
[  705.324225][T18173] usb usb8: usbfs: process 18173 (syz.4.4070) did not claim interface 0 before use
[  705.328337][T18177] : Can't lookup blockdev
[  705.546317][T18186] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4076'.
[  705.793109][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4079'.
[  706.059732][    T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  706.219518][    T9] usb 1-1: Using ep0 maxpacket: 8
[  706.231848][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  706.254135][    T9] usb 1-1: config 5 has an invalid interface number: 163 but max is 0
[  706.266207][T18210] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4086'.
[  706.282429][    T9] usb 1-1: config 5 has no interface number 0
[  706.299239][    T9] usb 1-1: config 5 interface 163 has no altsetting 0
[  706.324089][    T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=e2.c9
[  706.334176][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.358287][    T9] usb 1-1: Product: syz
[  706.371872][    T9] usb 1-1: Manufacturer: syz
[  706.376526][    T9] usb 1-1: SerialNumber: syz
[  706.538437][T18220] Can't find a SQUASHFS superblock on nullb0
[  706.717552][    T9] adutux 1-1:5.163: interrupt endpoints not found
[  706.751997][    T9] usb 1-1: USB disconnect, device number 60
[  706.971258][T18240] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4097'.
[  707.119866][ T5824] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[  707.178779][T18251] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4102'.
[  707.209659][T18251] team0: default FDB implementation only supports local addresses
[  707.272328][ T5824] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  707.281360][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.314780][ T5824] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  707.324461][ T5824] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  707.339527][ T5824] usb 7-1: Manufacturer: syz
[  707.355826][ T5824] usb 7-1: config 0 descriptor??
[  707.525704][ T5824] rc_core: IR keymap rc-hauppauge not found
[  707.547591][ T5824] Registered IR keymap rc-empty
[  707.568009][ T5824] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  707.583538][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.615585][ T5824] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input117
[  707.621601][T18266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.628170][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.690676][T18266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.789083][T18270] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4108'.
[  707.823141][T18272] /dev/rnullb0: Can't open blockdev
[  707.905631][T18273] /dev/rnullb0: Can't open blockdev
[  707.977789][T18278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  708.205991][T18266] /dev/rnullb0: Can't open blockdev
[  708.222228][    C1] igorplugusb 7-1:0.0: receive overflow invalid: 90
[  708.260231][ T5824] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  708.430430][ T5824] usb 5-1: Using ep0 maxpacket: 16
[  708.490110][ T5824] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  708.513420][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.543746][ T3561] usb 7-1: USB disconnect, device number 83
[  708.563481][ T5824] usb 5-1: Product: syz
[  708.567707][ T5824] usb 5-1: Manufacturer: syz
[  708.611386][ T5824] usb 5-1: SerialNumber: syz
[  708.636364][ T5824] usb 5-1: config 0 descriptor??
[  708.665240][ T5824] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  708.682406][ T5824] usb 5-1: Detected FT-X
[  708.708221][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4117'.
[  708.879715][ T5824] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  708.892968][ T5824] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  708.913375][ T5824] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  708.935097][ T5824] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  708.969098][ T5824] usb 5-1: USB disconnect, device number 21
[  709.006526][ T5824] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  709.018859][ T5824] ftdi_sio 5-1:0.0: device disconnected
[  709.064674][T18311] /dev/rnullb0: Can't lookup blockdev
[  709.069990][T18312] /dev/rnullb0: Can't lookup blockdev
[  709.218679][T18316] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4120'.
[  709.524519][T18322] /dev/rnullb0: Can't open blockdev
[  709.968404][T18348] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4130'.
[  710.083076][T18355] /dev/rnullb0: Can't open blockdev
[  710.120075][ T5880] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[  710.240289][T18363] /dev/rnullb0: Can't open blockdev
[  710.248964][T18363] fuse: Unknown parameter 'ro000000000100000'
[  710.281284][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  710.307565][ T5880] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  710.325499][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.344009][ T5880] usb 7-1: Product: syz
[  710.348707][ T5880] usb 7-1: Manufacturer: syz
[  710.367611][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  710.375534][ T5880] usb 7-1: SerialNumber: syz
[  710.395181][ T5880] usb 7-1: config 0 descriptor??
[  710.409320][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4136'.
[  710.421661][ T5880] usb 7-1: bad CDC descriptors
[  710.427140][ T5880] cdc_acm 7-1:0.0: Control and data interfaces are not separated!
[  710.436823][ T5880] cdc_acm 7-1:0.0: This needs exactly 3 endpoints
[  710.444240][ T5880] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22
[  710.529653][   T10] usb 5-1: Using ep0 maxpacket: 16
[  710.542695][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.554439][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  710.568418][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  710.584687][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  710.619877][   T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  710.634723][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.651751][T18334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.662953][T18334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.683956][   T10] usb 5-1: config 0 descriptor??
[  710.690776][T18334] fuseblk: Bad value for 'group_id'
[  710.706930][T18334] fuseblk: Bad value for 'group_id'
[  710.720092][ T5880] usb 7-1: USB disconnect, device number 84
[  710.779665][   T24] usb 1-1: Using ep0 maxpacket: 8
[  710.800603][   T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  710.808855][   T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  710.831190][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  710.850122][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  710.862398][   T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  710.889525][   T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  710.913872][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.100949][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.122706][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.152964][   T10] HID 045e:07da: Invalid code 65791 type 1
[  711.154140][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.167596][   T24] usb 1-1: usb_control_msg returned -32
[  711.173783][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.184406][   T24] usbtmc 1-1:16.0: can't read capabilities
[  711.203951][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003C/input/input118
[  711.247979][   T10] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  711.381536][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.391853][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.460254][    T9] usb 5-1: USB disconnect, device number 22
[  711.804935][T18416] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4146'.
[  711.817495][T18417] /dev/rnullb0: Can't open blockdev
[  711.944628][T18420] /dev/rnullb0: Can't open blockdev
[  711.964673][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4148'.
[  712.309935][ T5824] usb 7-1: new low-speed USB device number 85 using dummy_hcd
[  712.504879][ T5824] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  712.522479][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.565337][ T5824] usb 7-1: config 0 descriptor??
[  712.949706][    T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  713.121846][    T9] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  713.145207][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  713.160877][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  713.183735][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.207474][    T9] usb 5-1: config 0 descriptor??
[  713.450095][   T10] usb 1-1: USB disconnect, device number 61
[  713.590125][T18490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4164'.
[  713.661499][    T9] lenovo 0003:17EF:60A3.003D: unknown main item tag 0x0
[  713.684369][    T9] lenovo 0003:17EF:60A3.003D: unknown main item tag 0x0
[  713.698345][    T9] lenovo 0003:17EF:60A3.003D: unknown main item tag 0x0
[  713.719804][    T9] lenovo 0003:17EF:60A3.003D: unknown main item tag 0x0
[  713.726838][    T9] lenovo 0003:17EF:60A3.003D: unknown main item tag 0x0
[  713.780569][    T9] lenovo 0003:17EF:60A3.003D: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0
[  713.805764][T18496] MTD: Couldn't look up '/dev/rnullb0': -15
[  714.040160][   T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  714.082705][   T43] usb 5-1: USB disconnect, device number 23
[  714.181265][T18507] /dev/rnullb0: Can't lookup blockdev
[  714.223136][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.242793][   T10] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  714.258599][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.277008][   T10] usb 1-1: Product: syz
[  714.285827][   T10] usb 1-1: Manufacturer: syz
[  714.297350][   T10] usb 1-1: SerialNumber: syz
[  714.313814][   T10] usb 1-1: config 0 descriptor??
[  714.325057][   T10] usb 1-1: bad CDC descriptors
[  714.343609][   T10] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[  714.365051][   T10] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[  714.375300][   T10] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[  714.410633][T18517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4170'.
[  714.429046][ T5824] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  714.448978][ T5824] asix 7-1:0.0: probe with driver asix failed with error -71
[  714.502126][ T5824] usb 7-1: USB disconnect, device number 85
[  714.537060][T18494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.561200][T18494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.581139][T18494] fuseblk: Bad value for 'group_id'
[  714.586410][T18494] fuseblk: Bad value for 'group_id'
[  714.622577][   T43] usb 1-1: USB disconnect, device number 62
[  715.273876][T18544] /dev/rnullb0: Can't lookup blockdev
[  715.339656][   T10] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  715.426230][T18551] /dev/rnullb0: Can't lookup blockdev
[  715.438139][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'.
[  715.519551][   T10] usb 7-1: Using ep0 maxpacket: 8
[  715.527109][   T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  715.536078][   T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  715.559043][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  715.587657][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  715.610081][   T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  715.649717][   T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  715.655282][T18563] zonefs (nullb0) ERROR: Not a zoned block device
[  715.681634][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.920662][   T10] usb 7-1: usb_control_msg returned -32
[  715.938901][   T10] usbtmc 7-1:16.0: can't read capabilities
[  716.129979][T18588] /dev/rnullb0: Can't open blockdev
[  716.275588][T18595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.294881][T18595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.305413][ T3561] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  716.334956][T18595] usbtmc 7-1:16.0: usb_control_msg returned -32
[  716.351395][ T5833] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  716.395649][T18598] dvmrp0: entered allmulticast mode
[  716.427231][T18598] /dev/rnullb0: Can't open blockdev
[  716.471232][ T3561] usb 5-1: Using ep0 maxpacket: 32
[  716.478670][ T3561] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  716.488454][ T3561] usb 5-1: config 0 has no interface number 0
[  716.497913][ T3561] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  716.508121][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.516467][ T3561] usb 5-1: Product: syz
[  716.521106][ T3561] usb 5-1: Manufacturer: syz
[  716.526258][ T3561] usb 5-1: SerialNumber: syz
[  716.535327][ T3561] usb 5-1: config 0 descriptor??
[  716.544783][ T3561] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  716.554273][ T3561] usb 5-1: selecting invalid altsetting 1
[  716.560745][ T3561] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  716.572156][ T3561] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  716.583075][ T3561] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  716.591929][ T3561] usb 5-1: media controller created
[  716.623796][ T3561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  716.824135][ T3561] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  716.848428][ T3561] zl10353_read_register: readreg error (reg=127, ret==-71)
[  716.866541][ T3561] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  716.917038][T18617] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4199'.
[  716.960408][ T3561] usb 5-1: USB disconnect, device number 24
[  717.163387][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'.
[  717.415341][T18640] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4210'.
[  717.478718][T18643] dvmrp0: entered allmulticast mode
[  717.544138][T18645] /dev/rnullb0: Can't lookup blockdev
[  717.759166][T18653] net_ratelimit: 143 callbacks suppressed
[  717.759186][T18653] TCP: out of memory -- consider tuning tcp_mem
[  717.901773][T18660] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.4216'.
[  718.071652][T18664] /dev/rnullb0: Can't lookup blockdev
[  718.139010][ T5824] usb 7-1: USB disconnect, device number 86
[  718.255845][T18671] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4221'.
[  718.316537][T18673] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  718.326199][T18673] /dev/rnullb0: Can't open blockdev
[  718.599773][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4230'.
[  718.759690][T18697] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4235'.
[  719.069715][T18695] can0: slcan on ttyS3.
[  719.254768][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'.
[  719.367746][T18723] dlm: no locking on control device
[  719.500972][T18694] can0 (unregistered): slcan off ttyS3.
[  719.770634][ T5833] Bluetooth: hci2: unexpected subevent 0x01 length: 25 > 18
[  719.896896][T18745] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  720.777855][T18770] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[  720.861780][T18778] /dev/rnullb0: Can't lookup blockdev
[  720.988356][T18783] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0)
[  721.001518][T18784] /dev/rnullb0: Can't open blockdev
[  721.402061][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4263'.
[  721.528563][T18806] netlink: 'syz.4.4266': attribute type 83 has an invalid length.
[  721.604016][T18808] /dev/rnullb0: Can't open blockdev
[  721.805545][ T3561] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  721.953860][ T3561] usb 5-1: device descriptor read/64, error -71
[  722.106100][T18825] /dev/rnullb0: Can't open blockdev
[  722.203906][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'.
[  722.216780][ T3561] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  722.359585][ T3561] usb 5-1: device descriptor read/64, error -71
[  722.472908][ T3561] usb usb5-port1: attempt power cycle
[  722.762213][T18850] dvmrp0: entered allmulticast mode
[  722.818030][T18852] /dev/rnullb0: Can't open blockdev
[  722.822142][ T3561] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  722.850819][ T3561] usb 5-1: device descriptor read/8, error -71
[  722.889541][T12562] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  723.051892][T12562] usb 1-1: Using ep0 maxpacket: 8
[  723.066375][T12562] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  723.092426][T12562] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  723.103273][ T3561] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  723.119562][T12562] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  723.129644][T12562] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  723.147288][T12562] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  723.166515][T12562] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  723.170407][T18866] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4293'.
[  723.176179][ T3561] usb 5-1: device descriptor read/8, error -71
[  723.198050][T12562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.310300][ T3561] usb usb5-port1: unable to enumerate USB device
[  723.328417][T18871] /dev/rnullb0: Can't open blockdev
[  723.425459][T12562] usb 1-1: usb_control_msg returned -32
[  723.434438][T18845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.447224][T12562] usbtmc 1-1:16.0: can't read capabilities
[  723.453840][T18845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.455196][T18874] /dev/rnullb0: Can't open blockdev
[  723.479395][T18876] netlink: 'syz.7.4297': attribute type 29 has an invalid length.
[  723.499391][T18876] netlink: 'syz.7.4297': attribute type 29 has an invalid length.
[  723.509749][T18876] netlink: 'syz.7.4297': attribute type 29 has an invalid length.
[  723.827187][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4303'.
[  724.601422][T18914] FAULT_INJECTION: forcing a failure.
[  724.601422][T18914] name failslab, interval 1, probability 0, space 0, times 0
[  724.637907][T18914] CPU: 1 UID: 0 PID: 18914 Comm: syz.4.4314 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  724.637938][T18914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  724.637951][T18914] Call Trace:
[  724.637960][T18914]  <TASK>
[  724.637969][T18914]  dump_stack_lvl+0x189/0x250
[  724.638000][T18914]  ? __pfx____ratelimit+0x10/0x10
[  724.638029][T18914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  724.638053][T18914]  ? __pfx__printk+0x10/0x10
[  724.638084][T18914]  ? __pfx___might_resched+0x10/0x10
[  724.638105][T18914]  ? fs_reclaim_acquire+0x7d/0x100
[  724.638145][T18914]  should_fail_ex+0x414/0x560
[  724.638183][T18914]  should_failslab+0xa8/0x100
[  724.638211][T18914]  __kmalloc_noprof+0xcb/0x4f0
[  724.638233][T18914]  ? kfree+0x4d/0x440
[  724.638251][T18914]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  724.638283][T18914]  tomoyo_realpath_from_path+0xe3/0x5d0
[  724.638310][T18914]  ? tomoyo_domain+0xd9/0x130
[  724.638341][T18914]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  724.638374][T18914]  tomoyo_path_number_perm+0x1e8/0x5a0
[  724.638410][T18914]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  724.638460][T18914]  ? __lock_acquire+0xab9/0xd20
[  724.638513][T18914]  ? __fget_files+0x2a/0x420
[  724.638545][T18914]  ? __fget_files+0x2a/0x420
[  724.638573][T18914]  ? __fget_files+0x3a0/0x420
[  724.638600][T18914]  ? __fget_files+0x2a/0x420
[  724.638633][T18914]  security_file_ioctl+0xcb/0x2d0
[  724.638667][T18914]  __se_sys_ioctl+0x47/0x170
[  724.638694][T18914]  do_syscall_64+0xfa/0x3b0
[  724.638719][T18914]  ? lockdep_hardirqs_on+0x9c/0x150
[  724.638745][T18914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.638766][T18914]  ? clear_bhb_loop+0x60/0xb0
[  724.638792][T18914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.638813][T18914] RIP: 0033:0x7fe50e18e929
[  724.638833][T18914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  724.638851][T18914] RSP: 002b:00007fe50ef4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  724.638874][T18914] RAX: ffffffffffffffda RBX: 00007fe50e3b5fa0 RCX: 00007fe50e18e929
[  724.638890][T18914] RDX: 0000200000000080 RSI: 000000004008af30 RDI: 0000000000000005
[  724.638904][T18914] RBP: 00007fe50ef4f090 R08: 0000000000000000 R09: 0000000000000000
[  724.638917][T18914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.638930][T18914] R13: 0000000000000000 R14: 00007fe50e3b5fa0 R15: 00007ffcfc065c88
[  724.638963][T18914]  </TASK>
[  724.638972][T18914] ERROR: Out of memory at tomoyo_realpath_from_path.
[  725.672437][T12562] usb 1-1: USB disconnect, device number 63
[  725.697457][T18938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  725.710080][T18938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  725.720336][T18938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  725.733125][T18938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  725.745702][T18938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  725.792191][T18941] /dev/rnullb0: Can't open blockdev
[  725.832155][   T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.022355][   T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.053386][T18948] FAULT_INJECTION: forcing a failure.
[  726.053386][T18948] name failslab, interval 1, probability 0, space 0, times 0
[  726.069830][T18948] CPU: 1 UID: 0 PID: 18948 Comm: syz.4.4326 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  726.069859][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  726.069871][T18948] Call Trace:
[  726.069880][T18948]  <TASK>
[  726.069889][T18948]  dump_stack_lvl+0x189/0x250
[  726.069918][T18948]  ? __pfx____ratelimit+0x10/0x10
[  726.069945][T18948]  ? __pfx_dump_stack_lvl+0x10/0x10
[  726.069978][T18948]  ? __pfx__printk+0x10/0x10
[  726.070005][T18948]  ? __pfx___might_resched+0x10/0x10
[  726.070026][T18948]  ? fs_reclaim_acquire+0x7d/0x100
[  726.070057][T18948]  should_fail_ex+0x414/0x560
[  726.070087][T18948]  should_failslab+0xa8/0x100
[  726.070110][T18948]  __kmalloc_noprof+0xcb/0x4f0
[  726.070128][T18948]  ? tomoyo_encode+0x28b/0x550
[  726.070150][T18948]  tomoyo_encode+0x28b/0x550
[  726.070173][T18948]  tomoyo_realpath_from_path+0x58d/0x5d0
[  726.070202][T18948]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  726.070227][T18948]  tomoyo_path_number_perm+0x1e8/0x5a0
[  726.070255][T18948]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  726.070294][T18948]  ? __lock_acquire+0xab9/0xd20
[  726.070336][T18948]  ? __fget_files+0x2a/0x420
[  726.070362][T18948]  ? __fget_files+0x2a/0x420
[  726.070384][T18948]  ? __fget_files+0x3a0/0x420
[  726.070406][T18948]  ? __fget_files+0x2a/0x420
[  726.070433][T18948]  security_file_ioctl+0xcb/0x2d0
[  726.070459][T18948]  __se_sys_ioctl+0x47/0x170
[  726.070480][T18948]  do_syscall_64+0xfa/0x3b0
[  726.070503][T18948]  ? lockdep_hardirqs_on+0x9c/0x150
[  726.070522][T18948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.070538][T18948]  ? clear_bhb_loop+0x60/0xb0
[  726.070558][T18948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.070574][T18948] RIP: 0033:0x7fe50e18e929
[  726.070590][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  726.070604][T18948] RSP: 002b:00007fe50ef4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.070622][T18948] RAX: ffffffffffffffda RBX: 00007fe50e3b5fa0 RCX: 00007fe50e18e929
[  726.070635][T18948] RDX: 0000200000000080 RSI: 000000004008af30 RDI: 0000000000000005
[  726.070646][T18948] RBP: 00007fe50ef4f090 R08: 0000000000000000 R09: 0000000000000000
[  726.070668][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.070678][T18948] R13: 0000000000000000 R14: 00007fe50e3b5fa0 R15: 00007ffcfc065c88
[  726.070705][T18948]  </TASK>
[  726.070728][T18948] ERROR: Out of memory at tomoyo_realpath_from_path.
[  726.415430][   T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.495747][T18957] pimreg: entered allmulticast mode
[  726.564134][   T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.777915][T18937] chnl_net:caif_netlink_parms(): no params data found
[  726.863793][   T36] bridge_slave_1: left allmulticast mode
[  726.874396][   T36] bridge_slave_1: left promiscuous mode
[  726.882787][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.894228][   T36] bridge_slave_0: left allmulticast mode
[  726.902559][   T36] bridge_slave_0: left promiscuous mode
[  726.908391][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.248528][   T36] dvmrp0 (unregistering): left allmulticast mode
[  727.518108][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  727.529297][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  727.542041][   T36] bond0 (unregistering): Released all slaves
[  727.676128][T18937] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.685268][T18937] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.696308][T18937] bridge_slave_0: entered allmulticast mode
[  727.706169][T18937] bridge_slave_0: entered promiscuous mode
[  727.737863][T18937] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.745298][T18937] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.752797][T18937] bridge_slave_1: entered allmulticast mode
[  727.760313][T18937] bridge_slave_1: entered promiscuous mode
[  727.856978][T18937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.867915][T11706] Bluetooth: hci2: command tx timeout
[  727.879141][T18937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.937426][T18937] team0: Port device team_slave_0 added
[  727.960669][T18937] team0: Port device team_slave_1 added
[  728.066760][T18937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  728.077748][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  728.103795][    C1] vkms_vblank_simulate: vblank timer overrun
[  728.111388][T18937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  728.140807][T18937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  728.147793][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  728.173700][    C1] vkms_vblank_simulate: vblank timer overrun
[  728.188436][T18937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  728.229498][   T36] hsr_slave_0: left promiscuous mode
[  728.238668][   T36] hsr_slave_1: left promiscuous mode
[  728.250307][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  728.257770][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  728.266322][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  728.273967][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  728.343341][   T36] veth0_macvtap: left promiscuous mode
[  728.349190][   T36] veth1_vlan: left promiscuous mode
[  728.360159][   T36] veth0_vlan: left promiscuous mode
[  729.281644][   T36] team0 (unregistering): Port device team_slave_1 removed
[  729.334267][   T36] team0 (unregistering): Port device team_slave_0 removed
[  729.945143][T11706] Bluetooth: hci2: command tx timeout
[  730.043773][T19018] /dev/rnullb0: Can't open blockdev
[  730.114771][T18937] hsr_slave_0: entered promiscuous mode
[  730.121998][T18937] hsr_slave_1: entered promiscuous mode
[  730.479665][ T5880] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  730.680629][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  730.705465][ T5880] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  730.717982][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.726417][ T5880] usb 5-1: Product: syz
[  730.736391][ T5880] usb 5-1: Manufacturer: syz
[  730.746519][ T5880] usb 5-1: SerialNumber: syz
[  730.750201][ T3561] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  730.789136][ T5880] usb 5-1: config 0 descriptor??
[  730.820609][ T5880] usb 5-1: bad CDC descriptors
[  730.826182][ T5880] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  730.854909][ T5880] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  730.874994][ T5880] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  730.919655][ T3561] usb 1-1: Using ep0 maxpacket: 32
[  730.935140][ T3561] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  730.950861][ T3561] usb 1-1: config 0 has no interface number 0
[  730.957062][ T3561] usb 1-1: config 0 interface 184 has no altsetting 0
[  730.994297][ T3561] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  731.003548][ T3561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.023794][ T3561] usb 1-1: Product: syz
[  731.028018][ T3561] usb 1-1: Manufacturer: syz
[  731.055207][T19022] fuseblk: Bad value for 'group_id'
[  731.056763][ T3561] usb 1-1: SerialNumber: syz
[  731.070903][T19022] fuseblk: Bad value for 'group_id'
[  731.096432][   T10] usb 5-1: USB disconnect, device number 29
[  731.096968][ T3561] usb 1-1: config 0 descriptor??
[  731.148166][ T3561] smsc75xx v1.0.0
[  731.341818][T18937] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  731.364293][T18937] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  731.401994][T18937] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  731.436830][T18937] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  731.707554][T18937] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.757032][ T3561] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  731.773412][T18937] 8021q: adding VLAN 0 to HW filter on device team0
[  731.795554][ T3561] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  731.848650][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.855916][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  731.888065][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.895335][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  732.019752][T11706] Bluetooth: hci2: command tx timeout
[  732.094529][T19080] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4353'.
[  732.325507][T19093] /dev/rnullb0: Can't open blockdev
[  732.476714][T18937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.515567][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4357'.
[  732.553476][T19101] /dev/rnullb0: Can't open blockdev
[  732.626805][ T3561] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  732.652270][ T3561] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  732.690025][ T3561] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  732.728686][ T3561] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[  733.178351][T18937] veth0_vlan: entered promiscuous mode
[  733.211925][T18937] veth1_vlan: entered promiscuous mode
[  733.268486][T18937] veth0_macvtap: entered promiscuous mode
[  733.295574][T18937] veth1_macvtap: entered promiscuous mode
[  733.302710][ T3561] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  733.364184][T18937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  733.408740][T18937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  733.452468][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  733.470234][ T3561] usb 5-1: Using ep0 maxpacket: 8
[  733.485018][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  733.493635][ T3561] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  733.512055][ T3561] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  733.520713][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  733.526207][T19136] netlink: 'syz.7.4362': attribute type 83 has an invalid length.
[  733.534372][ T1147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.560094][ T3561] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  733.580991][ T3561] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  733.603549][ T3561] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  733.656294][ T3561] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  733.669819][ T3561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.682647][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.721119][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.765761][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.777608][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.884436][ T5824] usb 1-1: USB disconnect, device number 64
[  733.900403][ T3561] usb 5-1: GET_CAPABILITIES returned 42
[  733.906060][ T3561] usbtmc 5-1:16.0: can't read capabilities
[  734.100372][T11706] Bluetooth: hci2: command tx timeout
[  734.478186][T19162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  734.510191][T19162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.556767][T19162] usbtmc 5-1:16.0: usb_control_msg returned -32
[  734.679522][    T9] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  734.849719][    T9] usb 7-1: Using ep0 maxpacket: 8
[  734.857526][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  734.869615][    T9] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  734.890013][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.938563][    T9] usb 7-1: config 0 descriptor??
[  734.983446][T18938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  734.998927][T18938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  735.008043][T18938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  735.020322][T18938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  735.028050][T18938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  735.318868][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.363072][    T9] a4tech 0003:09DA:001A.003E: item fetching failed at offset 4/5
[  735.395924][    T9] a4tech 0003:09DA:001A.003E: parse failed
[  735.409516][    T9] a4tech 0003:09DA:001A.003E: probe with driver a4tech failed with error -22
[  735.496243][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.558875][T19156] /dev/rnullb0: Can't open blockdev
[  735.573714][T12562] usb 7-1: USB disconnect, device number 87
[  735.644227][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.746186][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  735.771468][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.065320][ T5880] usb 5-1: USB disconnect, device number 30
[  736.240169][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'.
[  736.443700][   T36] dummy0: left allmulticast mode
[  736.455584][   T36] dummy0: left promiscuous mode
[  736.472689][   T36] bridge0: port 3(dummy0) entered disabled state
[  736.501842][   T36] bridge_slave_1: left allmulticast mode
[  736.507553][   T36] bridge_slave_1: left promiscuous mode
[  736.528036][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.544931][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.919237][   T36] dvmrp0 (unregistering): left allmulticast mode
[  737.065296][T18938] Bluetooth: hci3: command tx timeout
[  737.164760][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.175759][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.187530][   T36] bond0 (unregistering): Released all slaves
[  737.332372][   T36] tipc: Left network mode
[  737.433153][T19226] /dev/rnullb0: Can't lookup blockdev
[  737.450028][T19174] chnl_net:caif_netlink_parms(): no params data found
[  737.617554][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4381'.
[  737.739733][ T5824] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  737.780655][ T5880] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  737.852521][T19174] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.869721][T19174] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.877106][T19174] bridge_slave_0: entered allmulticast mode
[  737.892227][T19174] bridge_slave_0: entered promiscuous mode
[  737.905183][T19174] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.913479][T19174] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.920872][ T5824] usb 7-1: Using ep0 maxpacket: 8
[  737.934550][ T5824] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  737.948328][ T5824] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  737.961234][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.964571][T19174] bridge_slave_1: entered allmulticast mode
[  737.985664][ T5880] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  737.993778][ T5824] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  738.006943][T19174] bridge_slave_1: entered promiscuous mode
[  738.013027][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.013056][ T5880] usb 5-1: Product: syz
[  738.013074][ T5880] usb 5-1: Manufacturer: syz
[  738.013091][ T5880] usb 5-1: SerialNumber: syz
[  738.031101][ T5880] usb 5-1: config 0 descriptor??
[  738.042444][ T5824] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  738.054869][ T5824] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  738.077650][ T5824] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  738.089303][ T5880] usb 5-1: bad CDC descriptors
[  738.122474][ T5880] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  738.143258][ T5880] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  738.152610][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.153426][ T5880] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  738.275875][T19174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  738.307293][T19227] fuseblk: Bad value for 'group_id'
[  738.315680][T19227] fuseblk: Bad value for 'group_id'
[  738.338895][ T5880] usb 5-1: USB disconnect, device number 31
[  738.357813][T19174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  738.395158][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.404472][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.416631][ T5824] usb 7-1: usb_control_msg returned -32
[  738.432845][ T5824] usbtmc 7-1:16.0: can't read capabilities
[  738.443258][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.478185][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.578023][T19229] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  738.667172][T19174] team0: Port device team_slave_0 added
[  738.706728][T19174] team0: Port device team_slave_1 added
[  738.777126][   T36] hsr_slave_0: left promiscuous mode
[  738.796986][ T5880] usb 7-1: USB disconnect, device number 88
[  738.808985][   T36] hsr_slave_1: left promiscuous mode
[  738.821156][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  738.838952][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  738.860792][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  738.868371][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  738.922624][   T36] veth0_macvtap: left promiscuous mode
[  738.928397][   T36] veth1_vlan: left promiscuous mode
[  738.938461][   T36] veth0_vlan: left promiscuous mode
[  739.149965][T18938] Bluetooth: hci3: command tx timeout
[  739.636378][   T36] team0 (unregistering): Port device team_slave_1 removed
[  739.686899][   T36] team0 (unregistering): Port device team_slave_0 removed
[  740.279219][T19174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  740.300905][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  740.336809][T19174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  740.351341][T19174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  740.358324][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  740.386102][T19174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.588313][T19174] hsr_slave_0: entered promiscuous mode
[  740.602294][T19174] hsr_slave_1: entered promiscuous mode
[  740.615511][T19174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  740.628906][T19174] Cannot create hsr debugfs directory
[  740.635464][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4390'.
[  740.840908][T19279] /dev/rnullb0: Can't lookup blockdev
[  740.980162][ T3561] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  741.070337][ T5880] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  741.150138][ T3561] usb 7-1: Using ep0 maxpacket: 8
[  741.159034][ T3561] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13
[  741.172531][ T3561] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  741.181991][ T3561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.190611][ T3561] usb 7-1: Product: syz
[  741.195180][ T3561] usb 7-1: Manufacturer: syz
[  741.200390][ T3561] usb 7-1: SerialNumber: syz
[  741.216534][ T3561] usb 7-1: config 0 descriptor??
[  741.232185][T18938] Bluetooth: hci3: command tx timeout
[  741.233701][ T3561] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  741.256049][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  741.278465][ T5880] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  741.293410][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.303761][ T5880] usb 5-1: Product: syz
[  741.308989][ T5880] usb 5-1: Manufacturer: syz
[  741.315205][ T5880] usb 5-1: SerialNumber: syz
[  741.340344][ T5880] usb 5-1: config 0 descriptor??
[  741.355551][ T5880] usb 5-1: bad CDC descriptors
[  741.377728][ T5880] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  741.393544][ T5880] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  741.405497][ T5880] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  741.558313][T19282] fuseblk: Bad value for 'group_id'
[  741.563718][T19282] fuseblk: Bad value for 'group_id'
[  741.587022][ T9820] usb 5-1: USB disconnect, device number 32
[  741.745229][T19174] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  741.756514][T19174] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  741.770159][T19174] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  741.783648][T19174] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  742.044548][T19174] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.076781][T19174] 8021q: adding VLAN 0 to HW filter on device team0
[  742.105571][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.112800][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.154016][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.164600][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.445174][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4402'.
[  742.579919][ T5824] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  742.740205][ T5824] usb 5-1: Using ep0 maxpacket: 8
[  742.746210][T19174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  742.766362][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short
[  742.789584][ T5824] usb 5-1: too many configurations: 89, using maximum allowed: 8
[  742.813851][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.835206][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.851364][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.862570][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.881088][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.889208][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.897941][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.907577][ T5824] usb 5-1: config 8 interface 0 has no altsetting 0
[  742.928633][ T5824] usb 5-1: string descriptor 0 read error: -22
[  742.935911][ T5824] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  742.948144][T19174] veth0_vlan: entered promiscuous mode
[  742.958669][ T5824] usb 5-1: New USB device strings: Mfr=202, Product=227, SerialNumber=38
[  743.005549][ T5824] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  743.021628][T19174] veth1_vlan: entered promiscuous mode
[  743.049061][ T5824] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  743.081964][ T5824] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  743.089179][ T5824] usb 5-1: media controller created
[  743.123737][T19174] veth0_macvtap: entered promiscuous mode
[  743.146052][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  743.158401][T19174] veth1_macvtap: entered promiscuous mode
[  743.201050][T19320] usb 5-1: dvb_usb_au6610: wlen=0, aborting
[  743.225411][T19174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  743.234419][T19320] /dev/rnullb0: Can't open blockdev
[  743.247634][T19320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.278875][T19320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.289075][T19174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  743.303180][T18938] Bluetooth: hci3: command tx timeout
[  743.316043][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.346228][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.362899][ T5824] zl10353_read_register: readreg error (reg=127, ret==0)
[  743.373354][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.408079][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.464343][T19356] /dev/rnullb0: Can't open blockdev
[  743.545084][ T5824] usb 5-1: USB disconnect, device number 33
[  743.696021][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.728783][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.816294][T11954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.844747][T11954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.481704][ T3561] gspca_zc3xx: reg_w_i err -71
[  744.509674][ T3561] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  744.535703][ T3561] usb 7-1: USB disconnect, device number 89
[  744.554665][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'.
[  745.010101][ T3561] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  745.181593][ T3561] usb 5-1: Using ep0 maxpacket: 8
[  745.202958][ T3561] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  745.212261][ T3561] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  745.259548][ T3561] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  745.288931][ T3561] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  745.329554][ T3561] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  745.379530][ T3561] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  745.388997][ T3561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.485705][T11706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  745.500881][T11706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  745.512772][T11706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  745.529358][T11706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  745.541381][T11706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  745.750803][ T3561] usb 5-1: usb_control_msg returned -32
[  745.752661][T19423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.764937][ T9820] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  745.769998][ T3561] usbtmc 5-1:16.0: can't read capabilities
[  745.783790][T19423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.859661][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'.
[  745.879684][T19423] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  745.931626][ T9820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  745.952307][ T9820] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  745.969526][ T9820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.992352][ T9820] usb 7-1: Product: syz
[  745.996589][ T9820] usb 7-1: Manufacturer: syz
[  746.030279][ T9820] usb 7-1: SerialNumber: syz
[  746.050899][ T9820] usb 7-1: config 0 descriptor??
[  746.066610][ T9820] usb 7-1: bad CDC descriptors
[  746.093623][ T9820] cdc_acm 7-1:0.0: Control and data interfaces are not separated!
[  746.139046][ T9820] cdc_acm 7-1:0.0: This needs exactly 3 endpoints
[  746.190701][ T9820] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22
[  746.273578][T19415] fuseblk: Bad value for 'group_id'
[  746.283082][T19415] fuseblk: Bad value for 'group_id'
[  746.304143][ T9820] usb 7-1: USB disconnect, device number 90
[  746.384610][    T9] usb 5-1: USB disconnect, device number 34
[  746.539379][T19416] chnl_net:caif_netlink_parms(): no params data found
[  746.636144][T19416] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.643431][T19416] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.651169][T19416] bridge_slave_0: entered allmulticast mode
[  746.658475][T19416] bridge_slave_0: entered promiscuous mode
[  746.668006][T19416] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.676618][T19416] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.684038][T19416] bridge_slave_1: entered allmulticast mode
[  746.692505][T19416] bridge_slave_1: entered promiscuous mode
[  746.728602][T19416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.742345][T19416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.778036][T19416] team0: Port device team_slave_0 added
[  746.786315][T19416] team0: Port device team_slave_1 added
[  746.824399][T19416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  746.831796][T19416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.858656][T19416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  746.871553][T19416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  746.878545][T19416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.905723][T19416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.959589][ T3561] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  747.042444][T19416] hsr_slave_0: entered promiscuous mode
[  747.049345][T19416] hsr_slave_1: entered promiscuous mode
[  747.054833][T19447] /dev/rnullb0: Can't open blockdev
[  747.065366][T19416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  747.073537][T19416] Cannot create hsr debugfs directory
[  747.119769][ T3561] usb 1-1: Using ep0 maxpacket: 8
[  747.133221][ T3561] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  747.163405][ T3561] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  747.184535][ T3561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.201501][ T3561] usb 1-1: Product: syz
[  747.205748][ T3561] usb 1-1: Manufacturer: syz
[  747.210944][ T3561] usb 1-1: SerialNumber: syz
[  747.244624][ T3561] usb 1-1: config 0 descriptor??
[  747.258762][ T3561] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  747.476587][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  747.495197][T19416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.619644][ T9820] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  747.630115][T18938] Bluetooth: hci1: command tx timeout
[  747.642710][T19416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.673565][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4435'.
[  747.757528][T19416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.795059][ T9820] usb 5-1: Using ep0 maxpacket: 16
[  747.805091][T19455] /dev/rnullb0: Can't open blockdev
[  747.835981][ T9820] usb 5-1: unable to get BOS descriptor or descriptor too short
[  747.855469][ T9820] usb 5-1: unable to read config index 0 descriptor/start: -71
[  747.866510][ T9820] usb 5-1: can't read configurations, error -71
[  747.868013][T19416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.891123][T19462] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4436'.
[  747.900743][T19462] tc_dump_action: action bad kind
[  748.106768][T19416] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  748.122993][T19416] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  748.134513][T19416] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  748.145982][T19416] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  748.251230][T19416] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.283924][T19416] 8021q: adding VLAN 0 to HW filter on device team0
[  748.297846][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.305071][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.319867][    T9] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  748.341574][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.348772][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.485013][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  748.505733][    T9] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  748.528831][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.551170][    T9] usb 7-1: Product: syz
[  748.555400][    T9] usb 7-1: Manufacturer: syz
[  748.569658][    T9] usb 7-1: SerialNumber: syz
[  748.586225][    T9] usb 7-1: config 0 descriptor??
[  748.605946][    T9] usb 7-1: bad CDC descriptors
[  748.621290][    T9] cdc_acm 7-1:0.0: Control and data interfaces are not separated!
[  748.629584][    T9] cdc_acm 7-1:0.0: This needs exactly 3 endpoints
[  748.636149][    T9] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22
[  748.757692][T19416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.815654][T19469] fuseblk: Bad value for 'group_id'
[  748.823844][T19469] fuseblk: Bad value for 'group_id'
[  748.835956][ T5824] usb 7-1: USB disconnect, device number 91
[  748.932058][ T9820] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  749.099020][T19416] veth0_vlan: entered promiscuous mode
[  749.113356][T19416] veth1_vlan: entered promiscuous mode
[  749.119797][ T9820] usb 5-1: Using ep0 maxpacket: 8
[  749.133880][ T9820] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  749.156304][ T9820] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  749.172142][ T9820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  749.185339][T19416] veth0_macvtap: entered promiscuous mode
[  749.196629][T19416] veth1_macvtap: entered promiscuous mode
[  749.202574][ T9820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  749.216944][ T9820] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  749.244648][T19416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.252184][ T9820] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  749.265857][ T9820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.278233][T19416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.297562][ T3561] gspca_zc3xx: reg_r err -32
[  749.323529][T11954] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.334025][   T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.348808][   T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.358402][   T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.495448][ T9820] usb 5-1: usb_control_msg returned -32
[  749.505423][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.513520][ T9820] usbtmc 5-1:16.0: can't read capabilities
[  749.530013][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.588581][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.596558][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.671214][T19492] ptm ptm25: ldisc open failed (-12), clearing slot 25
[  749.709786][T18938] Bluetooth: hci1: command tx timeout
[  749.889805][ T3561] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  749.898586][ T3561] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  749.949647][ T9820] usb 8-1: new low-speed USB device number 67 using dummy_hcd
[  750.003280][T19505] delete_channel: no stack
[  750.007876][T19505] delete_channel: no stack
[  750.086914][T19507] /dev/rnullb0: Can't open blockdev
[  750.114006][ T9820] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  750.123124][ T9820] usb 8-1: config 0 has no interface number 0
[  750.129287][ T9820] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  750.143639][ T9820] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  750.154935][ T9820] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  750.164373][ T9820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.175759][ T9820] usb 8-1: config 0 descriptor??
[  750.185812][T19497] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  750.216148][ T9820] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  750.361049][ T3561] usb 1-1: USB disconnect, device number 65
[  750.427756][ T9820] usb 8-1: USB disconnect, device number 67
[  750.555877][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4448'.
[  750.666213][T19497] /dev/rnullb0: Can't open blockdev
[  750.779814][ T3561] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  750.847117][T19525] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4452'.
[  750.924409][T19527] dvmrp0: entered allmulticast mode
[  750.943275][ T3561] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.962315][ T3561] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  750.980202][ T3561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.988329][ T3561] usb 1-1: Product: syz
[  750.993656][ T3561] usb 1-1: Manufacturer: syz
[  750.998320][ T3561] usb 1-1: SerialNumber: syz
[  751.022056][ T3561] usb 1-1: config 0 descriptor??
[  751.044687][ T3561] usb 1-1: bad CDC descriptors
[  751.051790][ T3561] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[  751.060328][ T3561] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[  751.072866][ T3561] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[  751.205262][T19533] usb usb8: usbfs: process 19533 (syz.6.4456) did not claim interface 0 before use
[  751.261107][T19515] fuseblk: Bad value for 'group_id'
[  751.266377][T19515] fuseblk: Bad value for 'group_id'
[  751.290998][ T3561] usb 1-1: USB disconnect, device number 66
[  751.497300][T19540] /dev/rnullb0: Can't open blockdev
[  751.593376][ T9820] usb 5-1: USB disconnect, device number 36
[  751.781538][T18938] Bluetooth: hci1: command tx timeout
[  751.849649][ T5880] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[  752.019774][ T5880] usb 8-1: Using ep0 maxpacket: 8
[  752.027776][ T5880] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13
[  752.052159][ T5880] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  752.079543][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.087632][ T5880] usb 8-1: Product: syz
[  752.109639][ T5880] usb 8-1: Manufacturer: syz
[  752.114299][ T5880] usb 8-1: SerialNumber: syz
[  752.132901][ T5880] usb 8-1: config 0 descriptor??
[  752.152456][ T5880] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  752.244666][T11706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  752.256338][T11706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  752.267054][T11706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  752.276695][T11706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  752.285177][T11706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  752.350503][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4464'.
[  752.707820][T11954] smc: removing ib device syz1
[  753.731736][T19550] chnl_net:caif_netlink_parms(): no params data found
[  753.860496][T18938] Bluetooth: hci1: command tx timeout
[  754.324387][T19550] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.331973][T19550] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.339264][T19550] bridge_slave_0: entered allmulticast mode
[  754.352829][T18938] Bluetooth: hci4: command tx timeout
[  754.379034][T19550] bridge_slave_0: entered promiscuous mode
[  754.395656][T19550] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.423699][T19550] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.448261][T19550] bridge_slave_1: entered allmulticast mode
[  754.474907][T19550] bridge_slave_1: entered promiscuous mode
[  754.694595][T19550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.739339][T19550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.861108][T19550] team0: Port device team_slave_0 added
[  754.871191][T19550] team0: Port device team_slave_1 added
[  754.922520][T19550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.931642][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.958952][T19550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.973067][T19550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.981146][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  755.007531][T19550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.115711][T19550] hsr_slave_0: entered promiscuous mode
[  755.124113][T19550] hsr_slave_1: entered promiscuous mode
[  755.133316][T19550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  755.150637][T19550] Cannot create hsr debugfs directory
[  755.421897][ T5880] gspca_zc3xx: reg_w_i err -71
[  755.460498][ T5880] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  755.475039][ T5880] usb 8-1: USB disconnect, device number 68
[  756.012056][T19550] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  756.033526][T19550] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  756.075045][T19550] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  756.118258][T19550] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  756.339065][T19550] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.417239][T19587] syzkaller1: entered promiscuous mode
[  756.428564][T18938] Bluetooth: hci4: command tx timeout
[  756.435890][T19587] syzkaller1: entered allmulticast mode
[  756.446741][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4473'.
[  756.481057][T19550] 8021q: adding VLAN 0 to HW filter on device team0
[  756.511905][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.519125][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  756.633797][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.641077][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.652460][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4477'.
[  756.795322][T19604] binder: 19603:19604 ioctl 40046205 0 returned -22
[  757.135427][T19550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  757.401362][T19630] binder: 19603:19630 ioctl c0306201 0 returned -14
[  757.431272][T19609] binder: 19603:19609 ioctl c0306201 0 returned -14
[  757.439358][T19631] FAULT_INJECTION: forcing a failure.
[  757.439358][T19631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  757.452566][T19609] support for the xor transformation has been removed.
[  757.485891][T19631] CPU: 0 UID: 0 PID: 19631 Comm: syz.7.4483 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  757.485932][T19631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  757.485945][T19631] Call Trace:
[  757.485953][T19631]  <TASK>
[  757.485963][T19631]  dump_stack_lvl+0x189/0x250
[  757.485993][T19631]  ? __pfx____ratelimit+0x10/0x10
[  757.486023][T19631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  757.486126][T19631]  ? __pfx__printk+0x10/0x10
[  757.486173][T19631]  should_fail_ex+0x414/0x560
[  757.486210][T19631]  _copy_to_user+0x31/0xb0
[  757.486263][T19631]  simple_read_from_buffer+0xe1/0x170
[  757.486295][T19631]  proc_fail_nth_read+0x1df/0x250
[  757.486331][T19631]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  757.486366][T19631]  ? rw_verify_area+0x258/0x650
[  757.486389][T19631]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  757.486421][T19631]  vfs_read+0x1fd/0x980
[  757.486449][T19631]  ? __pfx___mutex_lock+0x10/0x10
[  757.486478][T19631]  ? __pfx_vfs_read+0x10/0x10
[  757.486504][T19631]  ? __fget_files+0x2a/0x420
[  757.486536][T19631]  ? __fget_files+0x3a0/0x420
[  757.486564][T19631]  ? __fget_files+0x2a/0x420
[  757.486602][T19631]  ksys_read+0x145/0x250
[  757.486629][T19631]  ? __pfx_ksys_read+0x10/0x10
[  757.486658][T19631]  ? do_syscall_64+0xbe/0x3b0
[  757.486689][T19631]  do_syscall_64+0xfa/0x3b0
[  757.486715][T19631]  ? lockdep_hardirqs_on+0x9c/0x150
[  757.486739][T19631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.486760][T19631]  ? clear_bhb_loop+0x60/0xb0
[  757.486786][T19631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.486805][T19631] RIP: 0033:0x7f6a5f38d33c
[  757.486826][T19631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  757.486843][T19631] RSP: 002b:00007f6a6027e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  757.486866][T19631] RAX: ffffffffffffffda RBX: 00007f6a5f5b6080 RCX: 00007f6a5f38d33c
[  757.486883][T19631] RDX: 000000000000000f RSI: 00007f6a6027e0a0 RDI: 0000000000000007
[  757.486897][T19631] RBP: 00007f6a6027e090 R08: 0000000000000000 R09: 0000000000000000
[  757.486911][T19631] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  757.486952][T19631] R13: 0000000000000000 R14: 00007f6a5f5b6080 R15: 00007ffc396d23f8
[  757.486985][T19631]  </TASK>
[  757.927166][   T36] bridge_slave_1: left allmulticast mode
[  757.932927][   T36] bridge_slave_1: left promiscuous mode
[  757.942343][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.970145][   T36] bridge_slave_0: left allmulticast mode
[  757.975856][   T36] bridge_slave_0: left promiscuous mode
[  757.982257][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.386532][   T36] dvmrp0 (unregistering): left allmulticast mode
[  758.501995][T18938] Bluetooth: hci4: command tx timeout
[  758.652163][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.663487][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.675143][   T36] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  758.688025][   T36] bond0 (unregistering): Released all slaves
[  758.818952][   T36] tipc: Left network mode
[  758.860056][T19550] veth0_vlan: entered promiscuous mode
[  758.937715][T19550] veth1_vlan: entered promiscuous mode
[  759.089971][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4490'.
[  759.165171][T19550] veth0_macvtap: entered promiscuous mode
[  759.197722][T19550] veth1_macvtap: entered promiscuous mode
[  759.372251][   T36] hsr_slave_0: left promiscuous mode
[  759.378867][   T36] hsr_slave_1: left promiscuous mode
[  759.402442][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.415859][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  759.436665][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  759.444441][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.519317][   T36] veth1_macvtap: left promiscuous mode
[  759.525987][   T36] veth0_macvtap: left promiscuous mode
[  759.540321][   T36] veth1_vlan: left promiscuous mode
[  759.555094][   T36] veth0_vlan: left promiscuous mode
[  759.592966][T19673] ==================================================================
[  759.601088][T19673] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160
[  759.609015][T19673] Read of size 8 at addr ffff88804d8e31b0 by task syz.6.4495/19673
[  759.616934][T19673] 
[  759.619287][T19673] CPU: 1 UID: 0 PID: 19673 Comm: syz.6.4495 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  759.619311][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  759.619323][T19673] Call Trace:
[  759.619334][T19673]  <TASK>
[  759.619342][T19673]  dump_stack_lvl+0x189/0x250
[  759.619364][T19673]  ? __virt_addr_valid+0x1c8/0x5c0
[  759.619385][T19673]  ? rcu_is_watching+0x15/0xb0
[  759.619403][T19673]  ? __kasan_check_byte+0x12/0x40
[  759.619426][T19673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  759.619446][T19673]  ? rcu_is_watching+0x15/0xb0
[  759.619464][T19673]  ? lock_release+0x4b/0x3e0
[  759.619492][T19673]  ? __virt_addr_valid+0x1c8/0x5c0
[  759.619513][T19673]  ? __virt_addr_valid+0x4a5/0x5c0
[  759.619533][T19673]  print_report+0xd2/0x2b0
[  759.619558][T19673]  ? pause_parse_request+0x40/0x160
[  759.619578][T19673]  kasan_report+0x118/0x150
[  759.619599][T19673]  ? pause_parse_request+0x40/0x160
[  759.619622][T19673]  ? __pfx_pause_parse_request+0x10/0x10
[  759.619642][T19673]  pause_parse_request+0x40/0x160
[  759.619664][T19673]  ? __pfx_pause_parse_request+0x10/0x10
[  759.619683][T19673]  ethnl_default_set_doit+0x2c1/0xa40
[  759.619709][T19673]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  759.619730][T19673]  genl_family_rcv_msg_doit+0x215/0x300
[  759.619751][T19673]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  759.619773][T19673]  ? bpf_lsm_capable+0x9/0x20
[  759.619791][T19673]  ? security_capable+0x7e/0x2e0
[  759.619811][T19673]  genl_rcv_msg+0x60e/0x790
[  759.619837][T19673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  759.619853][T19673]  ? ref_tracker_free+0x63a/0x7d0
[  759.619869][T19673]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  759.619895][T19673]  ? __pfx_ref_tracker_free+0x10/0x10
[  759.619916][T19673]  netlink_rcv_skb+0x205/0x470
[  759.619938][T19673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  759.619955][T19673]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  759.619983][T19673]  ? down_read+0x1ad/0x2e0
[  759.620008][T19673]  genl_rcv+0x28/0x40
[  759.620022][T19673]  netlink_unicast+0x758/0x8d0
[  759.620046][T19673]  netlink_sendmsg+0x805/0xb30
[  759.620074][T19673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  759.620099][T19673]  ? aa_sock_msg_perm+0xf1/0x1d0
[  759.620119][T19673]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  759.620144][T19673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  759.620167][T19673]  __sock_sendmsg+0x21c/0x270
[  759.620188][T19673]  ____sys_sendmsg+0x505/0x830
[  759.620216][T19673]  ? __pfx_____sys_sendmsg+0x10/0x10
[  759.620245][T19673]  ? import_iovec+0x74/0xa0
[  759.620273][T19673]  ___sys_sendmsg+0x21f/0x2a0
[  759.620299][T19673]  ? __pfx____sys_sendmsg+0x10/0x10
[  759.620340][T19673]  ? __fget_files+0x2a/0x420
[  759.620363][T19673]  ? __fget_files+0x3a0/0x420
[  759.620391][T19673]  __x64_sys_sendmsg+0x19b/0x260
[  759.620418][T19673]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  759.620448][T19673]  ? rcu_is_watching+0x15/0xb0
[  759.620466][T19673]  ? do_syscall_64+0xbe/0x3b0
[  759.620490][T19673]  do_syscall_64+0xfa/0x3b0
[  759.620511][T19673]  ? lockdep_hardirqs_on+0x9c/0x150
[  759.620531][T19673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.620548][T19673]  ? clear_bhb_loop+0x60/0xb0
[  759.620567][T19673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.620585][T19673] RIP: 0033:0x7fe91e98e929
[  759.620602][T19673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  759.620618][T19673] RSP: 002b:00007fe91f7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  759.620637][T19673] RAX: ffffffffffffffda RBX: 00007fe91ebb5fa0 RCX: 00007fe91e98e929
[  759.620651][T19673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  759.620663][T19673] RBP: 00007fe91ea10b39 R08: 0000000000000000 R09: 0000000000000000
[  759.620675][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.620686][T19673] R13: 0000000000000000 R14: 00007fe91ebb5fa0 R15: 00007ffd45c9e338
[  759.620705][T19673]  </TASK>
[  759.620712][T19673] 
[  760.002725][T19673] Allocated by task 19673:
[  760.007148][T19673]  kasan_save_track+0x3e/0x80
[  760.011842][T19673]  __kasan_kmalloc+0x93/0xb0
[  760.016611][T19673]  __kmalloc_noprof+0x27a/0x4f0
[  760.021468][T19673]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  760.027542][T19673]  genl_family_rcv_msg_doit+0xb8/0x300
[  760.033005][T19673]  genl_rcv_msg+0x60e/0x790
[  760.037510][T19673]  netlink_rcv_skb+0x205/0x470
[  760.042310][T19673]  genl_rcv+0x28/0x40
[  760.046308][T19673]  netlink_unicast+0x758/0x8d0
[  760.051112][T19673]  netlink_sendmsg+0x805/0xb30
[  760.055930][T19673]  __sock_sendmsg+0x21c/0x270
[  760.060638][T19673]  ____sys_sendmsg+0x505/0x830
[  760.065427][T19673]  ___sys_sendmsg+0x21f/0x2a0
[  760.070120][T19673]  __x64_sys_sendmsg+0x19b/0x260
[  760.075083][T19673]  do_syscall_64+0xfa/0x3b0
[  760.079599][T19673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.085493][T19673] 
[  760.087825][T19673] The buggy address belongs to the object at ffff88804d8e3180
[  760.087825][T19673]  which belongs to the cache kmalloc-64 of size 64
[  760.101715][T19673] The buggy address is located 8 bytes to the right of
[  760.101715][T19673]  allocated 40-byte region [ffff88804d8e3180, ffff88804d8e31a8)
[  760.116138][T19673] 
[  760.118505][T19673] The buggy address belongs to the physical page:
[  760.124939][T19673] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d8e3
[  760.133719][T19673] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  760.141198][T19673] page_type: f5(slab)
[  760.145208][T19673] raw: 00fff00000000000 ffff88801a8418c0 ffffea00016fcf80 dead000000000007
[  760.153804][T19673] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[  760.162393][T19673] page dumped because: kasan: bad access detected
[  760.168823][T19673] page_owner tracks the page as allocated
[  760.174541][T19673] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7284, tgid 7283 (syz.4.418), ts 168295280921, free_ts 161422656636
[  760.193850][T19673]  post_alloc_hook+0x240/0x2a0
[  760.198699][T19673]  get_page_from_freelist+0x21e4/0x22c0
[  760.204307][T19673]  __alloc_frozen_pages_noprof+0x181/0x370
[  760.210231][T19673]  alloc_pages_mpol+0x232/0x4a0
[  760.215188][T19673]  allocate_slab+0x8a/0x370
[  760.219714][T19673]  ___slab_alloc+0xbeb/0x1410
[  760.224408][T19673]  __kmalloc_noprof+0x305/0x4f0
[  760.229271][T19673]  hash_ip4_resize+0x9b5/0x1990
[  760.234135][T19673]  call_ad+0x44e/0xb00
[  760.238226][T19673]  ip_set_ad+0x791/0x930
[  760.242491][T19673]  nfnetlink_rcv_msg+0xb4a/0x1130
[  760.247534][T19673]  netlink_rcv_skb+0x205/0x470
[  760.252322][T19673]  nfnetlink_rcv+0x26a/0x2520
[  760.257009][T19673]  netlink_unicast+0x758/0x8d0
[  760.261786][T19673]  netlink_sendmsg+0x805/0xb30
[  760.266665][T19673]  __sock_sendmsg+0x21c/0x270
[  760.271351][T19673] page last free pid 5203 tgid 5203 stack trace:
[  760.277682][T19673]  __free_frozen_pages+0xb80/0xd80
[  760.282913][T19673]  __slab_free+0x303/0x3c0
[  760.287342][T19673]  qlist_free_all+0x97/0x140
[  760.291941][T19673]  kasan_quarantine_reduce+0x148/0x160
[  760.297417][T19673]  __kasan_slab_alloc+0x22/0x80
[  760.302292][T19673]  __kmalloc_noprof+0x224/0x4f0
[  760.307261][T19673]  tomoyo_realpath_from_path+0xe3/0x5d0
[  760.312828][T19673]  tomoyo_path_perm+0x213/0x4b0
[  760.317717][T19673]  security_inode_getattr+0x12f/0x330
[  760.323107][T19673]  __x64_sys_newfstat+0xfc/0x200
[  760.328061][T19673]  do_syscall_64+0xfa/0x3b0
[  760.332576][T19673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.338477][T19673] 
[  760.340813][T19673] Memory state around the buggy address:
[  760.346444][T19673]  ffff88804d8e3080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  760.354507][T19673]  ffff88804d8e3100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  760.362579][T19673] >ffff88804d8e3180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  760.370679][T19673]                                      ^
[  760.376309][T19673]  ffff88804d8e3200: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  760.384393][T19673]  ffff88804d8e3280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  760.392472][T19673] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  760.426230][T19673] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  760.433491][T19673] CPU: 1 UID: 0 PID: 19673 Comm: syz.6.4495 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  760.445071][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  760.455171][T19673] Call Trace:
[  760.458490][T19673]  <TASK>
[  760.461454][T19673]  dump_stack_lvl+0x99/0x250
[  760.466102][T19673]  ? __asan_memcpy+0x40/0x70
[  760.470730][T19673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  760.475971][T19673]  ? __pfx__printk+0x10/0x10
[  760.480611][T19673]  panic+0x2db/0x790
[  760.484550][T19673]  ? __pfx_panic+0x10/0x10
[  760.489272][T19673]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  760.495282][T19673]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  760.501626][T19673]  ? print_memory_metadata+0x314/0x400
[  760.507189][T19673]  ? pause_parse_request+0x40/0x160
[  760.512405][T19673]  check_panic_on_warn+0x89/0xb0
[  760.517366][T19673]  ? pause_parse_request+0x40/0x160
[  760.522719][T19673]  end_report+0x78/0x160
[  760.526995][T19673]  kasan_report+0x129/0x150
[  760.531519][T19673]  ? pause_parse_request+0x40/0x160
[  760.536737][T19673]  ? __pfx_pause_parse_request+0x10/0x10
[  760.542381][T19673]  pause_parse_request+0x40/0x160
[  760.547427][T19673]  ? __pfx_pause_parse_request+0x10/0x10
[  760.553080][T19673]  ethnl_default_set_doit+0x2c1/0xa40
[  760.558488][T19673]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  760.564844][T19673]  genl_family_rcv_msg_doit+0x215/0x300
[  760.570415][T19673]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  760.576515][T19673]  ? bpf_lsm_capable+0x9/0x20
[  760.581209][T19673]  ? security_capable+0x7e/0x2e0
[  760.586162][T19673]  genl_rcv_msg+0x60e/0x790
[  760.590687][T19673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  760.595718][T19673]  ? ref_tracker_free+0x63a/0x7d0
[  760.600749][T19673]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  760.606671][T19673]  ? __pfx_ref_tracker_free+0x10/0x10
[  760.612052][T19673]  netlink_rcv_skb+0x205/0x470
[  760.616832][T19673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  760.621966][T19673]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  760.627273][T19673]  ? down_read+0x1ad/0x2e0
[  760.631703][T19673]  genl_rcv+0x28/0x40
[  760.635690][T19673]  netlink_unicast+0x758/0x8d0
[  760.640471][T19673]  netlink_sendmsg+0x805/0xb30
[  760.645353][T19673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  760.650649][T19673]  ? aa_sock_msg_perm+0xf1/0x1d0
[  760.655593][T19673]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  760.660896][T19673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  760.666195][T19673]  __sock_sendmsg+0x21c/0x270
[  760.670935][T19673]  ____sys_sendmsg+0x505/0x830
[  760.675715][T19673]  ? __pfx_____sys_sendmsg+0x10/0x10
[  760.681029][T19673]  ? import_iovec+0x74/0xa0
[  760.685550][T19673]  ___sys_sendmsg+0x21f/0x2a0
[  760.690243][T19673]  ? __pfx____sys_sendmsg+0x10/0x10
[  760.695468][T19673]  ? __fget_files+0x2a/0x420
[  760.700074][T19673]  ? __fget_files+0x3a0/0x420
[  760.704818][T19673]  __x64_sys_sendmsg+0x19b/0x260
[  760.709871][T19673]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  760.715377][T19673]  ? rcu_is_watching+0x15/0xb0
[  760.720166][T19673]  ? do_syscall_64+0xbe/0x3b0
[  760.724866][T19673]  do_syscall_64+0xfa/0x3b0
[  760.729390][T19673]  ? lockdep_hardirqs_on+0x9c/0x150
[  760.734624][T19673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.740720][T19673]  ? clear_bhb_loop+0x60/0xb0
[  760.745418][T19673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.751320][T19673] RIP: 0033:0x7fe91e98e929
[  760.755754][T19673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  760.775808][T19673] RSP: 002b:00007fe91f7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  760.784259][T19673] RAX: ffffffffffffffda RBX: 00007fe91ebb5fa0 RCX: 00007fe91e98e929
[  760.792257][T19673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  760.800257][T19673] RBP: 00007fe91ea10b39 R08: 0000000000000000 R09: 0000000000000000
[  760.808274][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  760.816701][T19673] R13: 0000000000000000 R14: 00007fe91ebb5fa0 R15: 00007ffd45c9e338
[  760.824719][T19673]  </TASK>
[  760.828192][T19673] Kernel Offset: disabled
[  760.832526][T19673] Rebooting in 86400 seconds..