last executing test programs:

9m21.047779549s ago: executing program 0 (id=1):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
umount2(&(0x7f0000000240)='./file0\x00', 0x0)

9m20.878937648s ago: executing program 0 (id=10):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
close(0x3)

9m20.696682717s ago: executing program 0 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)

9m20.529151232s ago: executing program 0 (id=16):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

9m20.155063846s ago: executing program 0 (id=20):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09f5000000000000001d020000000900010073797a300000000009000300"], 0x54}}, 0x0)

9m19.791072861s ago: executing program 32 (id=20):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09f5000000000000001d020000000900010073797a300000000009000300"], 0x54}}, 0x0)

6m22.211691162s ago: executing program 2 (id=2953):
socket$inet(0x2, 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
unshare(0x24020400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

6m22.096880244s ago: executing program 2 (id=2957):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"], 0x38}}, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

6m22.031421396s ago: executing program 2 (id=2958):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
io_cancel(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x7c03, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, r0}, 0x0)

6m21.987820578s ago: executing program 2 (id=2959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40)

6m21.954203887s ago: executing program 2 (id=2960):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)

6m21.634568322s ago: executing program 2 (id=2961):
setresuid(0x0, 0xee00, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x60000080)

6m21.460300859s ago: executing program 33 (id=2961):
setresuid(0x0, 0xee00, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x60000080)

4m35.867218881s ago: executing program 4 (id=4998):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0060a9a55806001100933100000800150009000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000108000000000000000000000800150004000000080001007063690011000200303030303a30303a31302e300000000008000300"], 0xcc}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f0001000000000000000000040100804c"], 0x114}], 0x1}, 0x0)

4m35.84198985s ago: executing program 4 (id=5000):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
truncate(&(0x7f0000000000)='./file7\x00', 0xd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m35.700300051s ago: executing program 4 (id=5004):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4m34.006229543s ago: executing program 4 (id=5037):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

4m33.922439523s ago: executing program 4 (id=5038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0)

4m33.398963556s ago: executing program 4 (id=5048):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3000000c})

4m33.086504365s ago: executing program 34 (id=5048):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3000000c})

1m49.129792732s ago: executing program 3 (id=7606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080)

1m48.861882653s ago: executing program 3 (id=7613):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x18)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1m48.519142701s ago: executing program 3 (id=7621):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000040c0), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x40000000000000c1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[])

1m48.319571809s ago: executing program 3 (id=7628):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
chroot(&(0x7f0000000d00)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')

1m48.234785343s ago: executing program 3 (id=7629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
open(0x0, 0x8060, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000400000e602000040"])

1m47.730173986s ago: executing program 3 (id=7636):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x5)
r3 = eventfd2(0x5, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x4, 0x2, r2})

1m47.568212889s ago: executing program 35 (id=7636):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x5)
r3 = eventfd2(0x5, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x4, 0x2, r2})

1m12.550059927s ago: executing program 7 (id=8078):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom$inet(r0, &(0x7f0000000200)=""/185, 0xb9, 0x40000002, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r0, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0)

1m12.379443897s ago: executing program 7 (id=8083):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)
lseek(r0, 0x22367a57, 0x1)

1m12.093093059s ago: executing program 7 (id=8087):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd5600fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804001800000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040)

1m11.900892968s ago: executing program 7 (id=8089):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)

1m11.795054782s ago: executing program 7 (id=8091):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x1)

1m11.339225287s ago: executing program 7 (id=8092):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1})
write$eventfd(r1, &(0x7f0000000080)=0xcc, 0x8)

1m11.01990015s ago: executing program 36 (id=8092):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1})
write$eventfd(r1, &(0x7f0000000080)=0xcc, 0x8)

2.14021096s ago: executing program 9 (id=9071):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})

2.102439052s ago: executing program 9 (id=9072):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
io_uring_enter(0xffffffffffffffff, 0x26c8, 0x0, 0x1, 0x0, 0x10)

2.083867923s ago: executing program 9 (id=9073):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080))

1.986629254s ago: executing program 9 (id=9074):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)

1.421076425s ago: executing program 5 (id=9076):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0)

1.394454483s ago: executing program 5 (id=9078):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)

1.352203585s ago: executing program 5 (id=9079):
add_key$fscrypt_v1(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
syz_clone(0x6001000, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)

1.255192056s ago: executing program 5 (id=9080):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read(r1, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40004, 0x0)
read$ptp(r2, 0x0, 0x0)

1.230825241s ago: executing program 5 (id=9082):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/48, 0x30}], 0x1}, 0x140)

1.12416556s ago: executing program 5 (id=9084):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b00000037ddbd7b1717c4b31d94c5"], 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x88)

1.112592917s ago: executing program 8 (id=9085):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x21)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x20)
read$watch_queue(r1, &(0x7f00000000c0)=""/11, 0xb)
keyctl$revoke(0x3, r0)

1.07747485s ago: executing program 1 (id=9086):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0)

1.011356807s ago: executing program 1 (id=9087):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x80001)
read$alg(r1, &(0x7f0000002200)=""/4130, 0x1053)

967.898306ms ago: executing program 1 (id=9088):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x20)

953.273713ms ago: executing program 8 (id=9089):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0, 0x12}], 0x1, 0x59, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x0, 0x8080000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa973f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc51e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d7780860cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c69f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a2804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085155ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc2b586ad5eb67c7add5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55b7ebc08c4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e6558ca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba808287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b96142e0995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e00", "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"})
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0x80, {0x3000, 0x3000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c577000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"})

914.380754ms ago: executing program 1 (id=9090):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="041000", 0x3}], 0x1, 0x0, 0x0, 0x20040004}, 0x20004011)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140)

795.116753ms ago: executing program 1 (id=9092):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @sit={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4840)

726.483124ms ago: executing program 8 (id=9093):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$unix(r1, &(0x7f00000002c0)="4e08a0ef9ac7f14143949466fbb7d16dbb8b2049c0bba0eaf39d88e72bec9edfea49a56f4e718451bfdee5e13254324baf222ce2cf99b06ad6ccdb8fecc92933c3d5b1fb893bcc012624958354ab790e", 0x50, 0x8080, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/85, 0x55}], 0x2}, 0x100)

662.980357ms ago: executing program 1 (id=9094):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0)

662.353428ms ago: executing program 6 (id=9095):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f000001c340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x5, 0x4a, 0x100cd, 0x6}, &(0x7f0000000580)=0x9c)

661.97912ms ago: executing program 8 (id=9096):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

590.064296ms ago: executing program 6 (id=9097):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, 0x0, 0xdeadbeef, 0x200000c9})

483.214803ms ago: executing program 6 (id=9098):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r3 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

414.696825ms ago: executing program 6 (id=9099):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

279.13894ms ago: executing program 6 (id=9100):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

208.638918ms ago: executing program 6 (id=9101):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}])
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

207.010296ms ago: executing program 9 (id=9102):
capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22})
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

55.748068ms ago: executing program 8 (id=9103):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
pread64(r2, &(0x7f0000000180)=""/195, 0xc3, 0x100)

17.688255ms ago: executing program 9 (id=9104):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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")
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

0s ago: executing program 8 (id=9105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010300)={&(0x7f00000102c0)='kvm_fpu\x00', r3, 0x0, 0x1}, 0x18)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 524.321911][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  524.341007][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  524.350954][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  524.364226][ T5918] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  524.373679][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.383922][ T5918] usb 8-1: config 0 descriptor??
[  524.558930][T13006] appleir 0003:05AC:8243.007D: item fetching failed at offset 0/1
[  524.570401][T13006] appleir 0003:05AC:8243.007D: parse failed
[  524.579055][T13006] appleir 0003:05AC:8243.007D: probe with driver appleir failed with error -22
[  524.766480][T12997] usb 2-1: USB disconnect, device number 89
[  524.803827][ T5918] plantronics 0003:047F:FFFF.007E: ignoring exceeding usage max
[  524.839938][ T5918] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  524.964319][   T30] audit: type=1400 audit(1755312295.089:1074): avc:  denied  { watch watch_reads } for  pid=23976 comm="syz.8.7721" path="/proc/18/fd" dev="proc" ino=103000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  525.004598][ T5918] usb 8-1: USB disconnect, device number 24
[  525.102913][T23984] netlink: 'syz.8.7724': attribute type 2 has an invalid length.
[  525.110768][T23984] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7724'.
[  525.133116][T23984] nbd: must specify a device to reconfigure
[  525.535235][ T5855] Bluetooth: hci2: command tx timeout
[  525.560036][T24004] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7733'.
[  525.685489][T16953] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  525.844332][T16953] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.857829][T16953] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  525.869894][T16953] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  525.879069][T16953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.887914][T16953] usb 9-1: Product: syz
[  525.892082][T16953] usb 9-1: Manufacturer: syz
[  525.899411][T16953] usb 9-1: SerialNumber: syz
[  525.909511][T16953] cdc_mbim 9-1:1.0: skipping garbage
[  526.128427][T24000] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  526.456871][T24012] netlink: 'syz.7.7736': attribute type 1 has an invalid length.
[  526.464756][T24012] netlink: 'syz.7.7736': attribute type 4 has an invalid length.
[  526.482862][T24012] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.7736'.
[  526.509859][T24015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7737'.
[  526.672835][T24025] loop7: detected capacity change from 0 to 16384
[  526.745949][T24000] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  526.765698][T16953] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  526.780967][T16953] cdc_mbim 9-1:1.0: setting rx_max = 2048
[  526.905305][   T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  526.956675][T24026] loop7: detected capacity change from 16384 to 0
[  526.968032][T16953] cdc_mbim 9-1:1.0: setting tx_max = 184
[  526.979338][T16953] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device
[  526.987792][T16953] wwan wwan0: port wwan0mbim0 attached
[  526.999244][T16953] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, e6:4d:92:d8:24:ae
[  527.065291][   T24] usb 6-1: Using ep0 maxpacket: 16
[  527.070661][   T30] audit: type=1800 audit(1755312297.199:1075): pid=24029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.7745" name="nullb0" dev="devtmpfs" ino=3608 res=0 errno=0
[  527.076093][   T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  527.111279][   T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  527.121232][   T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  527.143681][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.152975][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.161664][   T24] usb 6-1: Product: syz
[  527.169920][   T24] usb 6-1: Manufacturer: syz
[  527.174589][   T24] usb 6-1: SerialNumber: syz
[  527.345516][T16953] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  527.392449][T12997] usb 9-1: USB disconnect, device number 3
[  527.399512][T12997] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM
[  527.462601][T12997] wwan wwan0: port wwan0mbim0 disconnected
[  527.488791][T24038] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  527.517652][T16953] usb 7-1: Using ep0 maxpacket: 8
[  527.524950][T16953] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  527.540508][T16953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  527.551719][T16953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  527.562079][T16953] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.580182][T16953] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  527.589353][T16953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.594865][T24040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7748'.
[  527.611899][   T24] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  527.625333][ T5855] Bluetooth: hci2: command tx timeout
[  527.815146][T16953] usb 7-1: GET_CAPABILITIES returned 0
[  527.821431][T16953] usbtmc 7-1:16.0: can't read capabilities
[  528.046639][T16953] usb 7-1: USB disconnect, device number 53
[  528.345152][T13006] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  528.434958][   T24] usb 6-1: 2:1: cannot get freq at ep 0x82
[  528.454567][   T24] usb 6-1: USB disconnect, device number 86
[  528.510477][T13006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.522039][T13006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.534221][T13006] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  528.555138][T13006] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  528.564216][T13006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.587922][T13006] usb 2-1: config 0 descriptor??
[  529.001080][T13006] chicony 0003:04F2:1421.007F: item fetching failed at offset 1/5
[  529.009043][T12997] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  529.017269][T13006] chicony 0003:04F2:1421.007F: Chicony hid parse failed: -22
[  529.024828][T13006] chicony 0003:04F2:1421.007F: probe with driver chicony failed with error -22
[  529.059897][   T30] audit: type=1400 audit(1755312299.189:1076): avc:  denied  { accept } for  pid=24079 comm="syz.5.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  529.081543][   T30] audit: type=1326 audit(1755312299.209:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24065 comm="syz.8.7760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bcb8ebe9 code=0x7fc00000
[  529.186919][T12997] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  529.211564][T12997] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  529.212043][T16953] usb 2-1: USB disconnect, device number 90
[  529.228906][T12997] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  529.262617][T12997] usb 7-1: config 220 has no interface number 2
[  529.292595][T12997] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  529.326612][T12997] usb 7-1: config 220 interface 0 has no altsetting 0
[  529.333417][T12997] usb 7-1: config 220 interface 76 has no altsetting 0
[  529.342143][T12997] usb 7-1: config 220 interface 1 has no altsetting 0
[  529.351596][T12997] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  529.361604][T12997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.381171][T12997] usb 7-1: Product: syz
[  529.386293][T12997] usb 7-1: Manufacturer: syz
[  529.390910][T12997] usb 7-1: SerialNumber: syz
[  529.619657][T12997] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  529.638139][T12997] usb 7-1: No valid video chain found.
[  529.644649][T12997] usb 7-1: selecting invalid altsetting 0
[  529.680065][T12997] usb 7-1: selecting invalid altsetting 0
[  529.690851][T12997] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  529.711169][T12997] usb 7-1: USB disconnect, device number 54
[  530.135452][T16953] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  530.209957][T12997] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  530.296908][T16953] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.311610][T16953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  530.322741][T16953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  530.341635][T24119] block nbd5: shutting down sockets
[  530.355198][T16953] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  530.390819][T16953] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  530.412262][T12997] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  530.430288][T12997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.438146][T16953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.450769][T16953] usb 9-1: config 0 descriptor??
[  530.451883][T12997] usb 2-1: Product: syz
[  530.472547][T12997] usb 2-1: Manufacturer: syz
[  530.485341][T12997] usb 2-1: SerialNumber: syz
[  530.491381][T24122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  530.505953][T12997] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  530.530359][T13006] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  530.867674][T16953] plantronics 0003:047F:FFFF.0080: ignoring exceeding usage max
[  530.875633][ T5918] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  530.888677][T16953] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  531.050196][ T5918] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  531.051725][T24140] program syz.7.7790 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  531.059745][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.075121][T13002] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  531.092167][ T5918] usb 7-1: Product: syz
[  531.096444][ T5918] usb 7-1: Manufacturer: syz
[  531.105258][ T5918] usb 7-1: SerialNumber: syz
[  531.117036][ T5918] usb 7-1: config 0 descriptor??
[  531.169623][ T5918] usb 2-1: USB disconnect, device number 91
[  531.245200][T13002] usb 6-1: Using ep0 maxpacket: 32
[  531.252406][T13002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.263421][T13002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.273220][T13002] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  531.283277][T13002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.297474][T13002] usb 6-1: config 0 descriptor??
[  531.304417][T13002] hub 6-1:0.0: USB hub found
[  531.388935][T16953] usb 7-1: USB disconnect, device number 55
[  531.484829][T24150] netlink: 'syz.7.7794': attribute type 5 has an invalid length.
[  531.521650][T13002] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  531.615216][T13006] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  531.622268][T13006] ath9k_htc: Failed to initialize the device
[  531.663212][ T5918] usb 2-1: ath9k_htc: USB layer deinitialized
[  531.946879][T13002] usbhid 6-1:0.0: can't add hid device: -71
[  531.952965][T13002] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  531.976128][T13002] usb 6-1: USB disconnect, device number 87
[  532.035314][T16953] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  532.115364][ T5918] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  532.185303][T16953] usb 8-1: Using ep0 maxpacket: 16
[  532.193251][T16953] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  532.206909][T16953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  532.223483][T16953] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  532.235359][T16953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.243349][T16953] usb 8-1: Product: syz
[  532.250984][T16953] usb 8-1: Manufacturer: syz
[  532.260041][T16953] usb 8-1: SerialNumber: syz
[  532.268316][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  532.274912][T16953] usb 8-1: config 0 descriptor??
[  532.280348][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.293868][T16953] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  532.303232][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  532.312363][T16953] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  532.319454][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.329234][ T5918] usb 2-1: config 0 descriptor??
[  532.761569][ T5918] hid_parser_main: 1 callbacks suppressed
[  532.761589][ T5918] mcp2221 0003:04D8:00DD.0081: unknown main item tag 0x0
[  532.775731][ T5918] mcp2221 0003:04D8:00DD.0081: unknown main item tag 0x0
[  532.782835][ T5918] mcp2221 0003:04D8:00DD.0081: unknown main item tag 0x0
[  532.790926][ T5918] mcp2221 0003:04D8:00DD.0081: unknown main item tag 0x0
[  532.804192][ T5918] mcp2221 0003:04D8:00DD.0081: unknown main item tag 0x0
[  532.821970][ T5918] mcp2221 0003:04D8:00DD.0081: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  532.902271][T16953] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  532.913158][T16953] em28xx 8-1:0.0: Config register raw data: 0xfe
[  532.922428][T16953] em28xx 8-1:0.0: I2S Audio (3 sample rate(s))
[  532.929025][T16953] em28xx 8-1:0.0: No AC97 audio processor
[  532.955340][T12989] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  532.986485][T13000] usb 9-1: USB disconnect, device number 4
[  533.111889][T12989] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  533.128032][T12989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.140810][T12989] usb 6-1: Product: syz
[  533.151617][T12989] usb 6-1: Manufacturer: syz
[  533.158223][T12989] usb 6-1: SerialNumber: syz
[  533.172484][T12989] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  533.192216][T12997] usb 2-1: USB disconnect, device number 92
[  533.201516][T13000] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  533.332018][T16953] usb 8-1: USB disconnect, device number 25
[  533.882602][T13006] usb 6-1: USB disconnect, device number 88
[  534.011289][T24213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input120
[  534.426394][T24224] program syz.8.7828 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  534.495218][T13000] usb 6-1: Service connection timeout for: 256
[  534.501462][T13000] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  534.528726][T13000] ath9k_htc: Failed to initialize the device
[  534.555515][T13006] usb 6-1: ath9k_htc: USB layer deinitialized
[  535.457125][T12997] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0
[  535.622370][T12997] hid-generic 0000:0000:0000.0082: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  536.005374][T12997] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  536.015220][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  536.015616][   T51] Bluetooth: hci0: command 0x0c20 tx timeout
[  536.024279][T24211] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[  536.035775][T12989] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  536.152974][T24273] syzkaller1: tun_chr_ioctl cmd 1074025677
[  536.159017][T24273] syzkaller1: Linktype set failed because interface is up
[  536.196883][T12997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.212546][T12997] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  536.218660][T12989] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  536.222768][T12997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.244876][T12989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.262837][T12997] usb 9-1: config 0 descriptor??
[  536.265910][T12989] usb 7-1: Product: syz
[  536.271928][T12989] usb 7-1: Manufacturer: syz
[  536.285462][T12989] usb 7-1: SerialNumber: syz
[  536.292291][T12989] usb 7-1: config 0 descriptor??
[  536.487261][T12997] usbhid 9-1:0.0: can't add hid device: -71
[  536.493283][T12997] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  536.524330][T12997] usb 9-1: USB disconnect, device number 5
[  536.623079][T24284] netlink: 'syz.7.7855': attribute type 13 has an invalid length.
[  536.816015][T16953] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  536.974781][T11286] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb4
[  536.987073][T16953] usb 2-1: Using ep0 maxpacket: 16
[  536.995712][T12997] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  536.996313][T16953] usb 2-1: config 0 has no interfaces?
[  537.035134][T16953] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  537.050442][T16953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.082567][T16953] usb 2-1: config 0 descriptor??
[  537.126866][T24297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7859'.
[  537.160282][T12997] usb 9-1: Using ep0 maxpacket: 16
[  537.171089][T12997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.193678][T12997] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  537.218579][T12997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.244621][T12997] usb 9-1: config 0 descriptor??
[  537.315705][T12989] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  537.333335][T16953] usb 2-1: USB disconnect, device number 93
[  537.519404][T12989] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  537.552133][T12989] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  537.575522][T12989] asix 7-1:0.0: probe with driver asix failed with error -71
[  537.603735][T12989] usb 7-1: USB disconnect, device number 56
[  537.679782][T12997] mcp2221 0003:04D8:00DD.0083: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  537.879528][T24310] netlink: 'syz.7.7865': attribute type 4 has an invalid length.
[  537.915274][T24310] netlink: 'syz.7.7865': attribute type 4 has an invalid length.
[  538.066524][T24318] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7869'.
[  538.077054][T13006] usb 9-1: USB disconnect, device number 6
[  538.347047][T24340] netlink: 136 bytes leftover after parsing attributes in process `syz.6.7879'.
[  538.405203][T12989] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  538.465457][T12997] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  538.580850][T12989] usb 8-1: config 0 interface 0 has no altsetting 0
[  538.588478][T12989] usb 8-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  538.611067][T12989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.629731][T12997] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  538.630952][T12989] usb 8-1: config 0 descriptor??
[  538.657354][T12997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  538.684473][T12997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  538.699372][T12997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  538.745780][T12997] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  538.755318][T12997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.766723][T12997] usb 2-1: config 0 descriptor??
[  539.093099][T12989] zeroplus 0003:0C12:0005.0084: item fetching failed at offset 0/3
[  539.110128][T12989] zeroplus 0003:0C12:0005.0084: parse failed
[  539.123408][T12989] zeroplus 0003:0C12:0005.0084: probe with driver zeroplus failed with error -22
[  539.183832][T12997] plantronics 0003:047F:FFFF.0085: ignoring exceeding usage max
[  539.208979][T12997] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  539.339817][T13000] usb 8-1: USB disconnect, device number 26
[  539.542444][T13000] usb 2-1: USB disconnect, device number 94
[  540.362116][T24403] netlink: 'syz.8.7904': attribute type 13 has an invalid length.
[  540.485042][T24410] SELinux: failed to load policy
[  540.835285][T12997] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  541.009615][T12997] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  541.030439][T12997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  541.035794][T13000] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  541.063486][T12997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  541.081979][T12997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  541.099676][T12997] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  541.110741][T12997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.128645][T12997] usb 2-1: config 0 descriptor??
[  541.144511][T24415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  541.209297][T13000] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  541.230775][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7917'.
[  541.239726][T13000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.265195][T13000] usb 8-1: Product: syz
[  541.269379][T13000] usb 8-1: Manufacturer: syz
[  541.273968][T13000] usb 8-1: SerialNumber: syz
[  541.299912][T13000] usb 8-1: config 0 descriptor??
[  541.473957][T24440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  541.574093][T12997] plantronics 0003:047F:FFFF.0086: reserved main item tag 0xd
[  541.604357][T12989] usb 8-1: USB disconnect, device number 27
[  541.615355][T13000] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  541.634003][T12997] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  541.786796][T13000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.803824][T13000] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  541.820009][T13000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.830184][T13000] usb 6-1: config 0 descriptor??
[  541.877509][T12989] usb 2-1: USB disconnect, device number 95
[  542.241424][T13000] keytouch 0003:0926:3333.0087: fixing up Keytouch IEC report descriptor
[  542.252324][T13000] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0087/input/input122
[  542.333138][T13000] keytouch 0003:0926:3333.0087: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  542.383085][T24472] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7934'.
[  542.453828][T24476] tls_set_device_offload: netdev not found
[  542.642805][T24487] input: syz0 as /devices/virtual/input/input123
[  542.754700][T24491] SELinux: failed to load policy
[  542.855319][T12997] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  543.005208][T13000] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  543.023426][T12997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.042578][T12997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  543.053311][T12997] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  543.071432][T12997] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  543.076600][T24504] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.7948'.
[  543.080878][T12997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.108907][T12997] usb 8-1: config 0 descriptor??
[  543.169848][T24507] netlink: 'syz.8.7949': attribute type 1 has an invalid length.
[  543.176880][T13000] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  543.177868][T24507] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7949'.
[  543.195414][T13000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.196239][T24507] netlink: 'syz.8.7949': attribute type 2 has an invalid length.
[  543.212582][T24507] netlink: 'syz.8.7949': attribute type 1 has an invalid length.
[  543.213022][T13000] usb 2-1: config 0 descriptor??
[  543.272180][T13000] cp210x 2-1:0.0: cp210x converter detected
[  543.527446][T12997] chicony 0003:04F2:1421.0088: item fetching failed at offset 1/5
[  543.537383][T12997] chicony 0003:04F2:1421.0088: Chicony hid parse failed: -22
[  543.544818][T12997] chicony 0003:04F2:1421.0088: probe with driver chicony failed with error -22
[  543.670641][T13000] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  543.681617][T13000] usb 2-1: cp210x converter now attached to ttyUSB0
[  543.748931][T12997] usb 8-1: USB disconnect, device number 28
[  543.892667][T13000] usb 2-1: USB disconnect, device number 96
[  543.901651][T13000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  543.910447][T13000] cp210x 2-1:0.0: device disconnected
[  544.167525][T24534] input: syz0 as /devices/virtual/input/input124
[  544.424076][T13006] usb 6-1: USB disconnect, device number 89
[  544.590998][   T30] audit: type=1400 audit(1755312314.719:1078): avc:  denied  { allowed } for  pid=24547 comm="syz.8.7967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  544.825217][T24560] input: syz1 as /devices/virtual/input/input125
[  545.052949][   T30] audit: type=1400 audit(1755312315.179:1079): avc:  denied  { watch_reads } for  pid=24571 comm="syz.8.7978" path="/70/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  545.171249][T24577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7980'.
[  545.246363][T24579] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7981'.
[  545.505213][T12989] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  545.575407][   T30] audit: type=1400 audit(1755312315.699:1080): avc:  denied  { mounton } for  pid=24591 comm="syz.8.7987" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  545.596784][    C0] vkms_vblank_simulate: vblank timer overrun
[  545.675272][T12989] usb 2-1: Using ep0 maxpacket: 8
[  545.687883][T12989] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  545.711985][T12989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10
[  545.743969][T12989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024
[  545.766803][T12989] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  545.780804][T12989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.789901][T12989] usb 2-1: Product: syz
[  545.794209][T12989] usb 2-1: Manufacturer: syz
[  545.799892][T12989] usb 2-1: SerialNumber: syz
[  545.811055][T12989] usb 2-1: config 0 descriptor??
[  545.906094][T12989] rc_core: IR keymap rc-streamzap not found
[  545.914108][T12989] Registered IR keymap rc-empty
[  545.920121][T12989] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  545.933016][T12989] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input126
[  546.033684][ T5904] usb 2-1: USB disconnect, device number 97
[  546.093178][T24612] netlink: 'syz.6.7994': attribute type 30 has an invalid length.
[  546.761711][T24644] input: syz0 as /devices/virtual/input/input127
[  546.877583][   T30] audit: type=1400 audit(1755312317.009:1081): avc:  denied  { read } for  pid=24646 comm="syz.7.8008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  547.243772][T24665] input: syz1 as /devices/virtual/input/input128
[  548.015232][T13006] kernel read not supported for file /dsp (pid: 13006 comm: kworker/0:16)
[  548.184017][T24690] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.8027'.
[  548.367385][   T30] audit: type=1400 audit(1755312318.489:1082): avc:  denied  { bind } for  pid=24695 comm="syz.6.8025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  548.558883][T24704] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input129
[  548.695199][T13006] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  548.805269][ T5904] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  548.867003][T13006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.883847][T13006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.894860][T13006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  548.910698][T13006] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  548.925875][T13006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.953941][T13006] usb 7-1: config 0 descriptor??
[  548.959268][ T5904] usb 6-1: Using ep0 maxpacket: 16
[  548.982866][ T5904] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  548.996769][ T5904] usb 6-1: config 0 has no interface number 0
[  549.003011][ T5904] usb 6-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30
[  549.021215][ T5904] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  549.031855][ T5904] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  549.087884][ T5904] usb 6-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171
[  549.225754][ T5904] usb 6-1: config 0 interface 41 has no altsetting 0
[  549.257873][ T5904] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  549.285312][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.293368][ T5904] usb 6-1: Product: syz
[  549.333873][ T5904] usb 6-1: Manufacturer: syz
[  549.338629][ T5904] usb 6-1: SerialNumber: syz
[  549.373303][ T5904] usb 6-1: config 0 descriptor??
[  549.394316][T24708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  549.413651][T24708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  549.431830][T13006] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  549.544888][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8046'.
[  549.658843][T24708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  549.678418][T24708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  550.047362][    C1] plantronics 0003:047F:FFFF.0089: hid_field_extract() called with n (132) > 32! (swapper/1)
[  550.261265][T16953] usb 7-1: USB disconnect, device number 57
[  550.318634][ T5904] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  550.531883][ T5904] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  550.542804][ T5904] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  550.552927][ T5904] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  550.563669][ T5904] usb 6-1: USB disconnect, device number 90
[  551.226243][T13000] libceph: connect (1)[c::]:6789 error -101
[  551.239392][T13006] libceph: connect (1)[c::]:6789 error -101
[  551.243902][T13000] libceph: mon0 (1)[c::]:6789 connect error
[  551.246015][T13006] libceph: mon0 (1)[c::]:6789 connect error
[  551.261860][ T3165] Bluetooth: hci5: Frame reassembly failed (-84)
[  551.276159][T13006] libceph: connect (1)[c::]:6789 error -101
[  551.282302][T13006] libceph: mon0 (1)[c::]:6789 connect error
[  551.301831][T13000] libceph: connect (1)[c::]:6789 error -101
[  551.319581][T13000] libceph: mon0 (1)[c::]:6789 connect error
[  551.365762][ T5904] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  551.529349][ T5904] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  551.548082][ T5904] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  551.559418][T13006] libceph: connect (1)[c::]:6789 error -101
[  551.578723][T13006] libceph: mon0 (1)[c::]:6789 connect error
[  551.584693][ T5904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  551.587042][T12989] libceph: connect (1)[c::]:6789 error -101
[  551.594681][ T5904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  551.608257][T12989] libceph: mon0 (1)[c::]:6789 connect error
[  551.611767][ T5904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  551.630974][ T5904] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  551.640229][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  551.648327][ T5904] usb 7-1: Product: syz
[  551.652533][ T5904] usb 7-1: Manufacturer: syz
[  551.660453][ T5904] cdc_wdm 7-1:1.0: skipping garbage
[  551.665732][ T5904] cdc_wdm 7-1:1.0: skipping garbage
[  551.671633][ T5904] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  551.677624][ T5904] cdc_wdm 7-1:1.0: Unknown control protocol
[  551.815217][T13000] usb 2-1: new low-speed USB device number 98 using dummy_hcd
[  551.882570][ T5904] usb 7-1: USB disconnect, device number 58
[  551.968202][T24759] ceph: No mds server is up or the cluster is laggy
[  551.968303][T24764] ceph: No mds server is up or the cluster is laggy
[  551.983183][T13000] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  551.998400][T13000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.011695][T13000] usb 2-1: config 0 descriptor??
[  552.427067][T24799] No control pipe specified
[  552.433330][T24799] overlayfs: missing 'lowerdir'
[  552.545199][T12997] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  552.697378][T12997] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  552.706113][T12997] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  552.716429][T12997] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  552.725810][T12997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  552.737662][T12997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  552.750048][T12997] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  552.759129][T12997] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  552.767212][T12997] usb 7-1: Product: syz
[  552.771384][T12997] usb 7-1: Manufacturer: syz
[  552.781354][T12997] cdc_wdm 7-1:1.0: skipping garbage
[  552.786637][T12997] cdc_wdm 7-1:1.0: skipping garbage
[  552.792819][T12997] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  552.798886][T12997] cdc_wdm 7-1:1.0: Unknown control protocol
[  553.002015][   T24] usb 7-1: USB disconnect, device number 59
[  553.240344][T13000] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  553.250763][T13000] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  553.261996][T13000] asix 2-1:0.0: probe with driver asix failed with error -71
[  553.271954][T13000] usb 2-1: USB disconnect, device number 98
[  553.295182][   T51] Bluetooth: hci0: command 0x0c20 tx timeout
[  553.295315][T24266] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  553.303411][T24768] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[  553.312098][T18767] Bluetooth: hci5: command 0x1003 tx timeout
[  553.392194][T24808] netlink: 51 bytes leftover after parsing attributes in process `syz.7.8073'.
[  554.117278][   T30] audit: type=1400 audit(1755312324.239:1083): avc:  denied  { mounton } for  pid=24834 comm="syz.7.8083" path="/630/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  554.391318][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8087'.
[  554.797494][T13000] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  554.805311][T13002] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  554.966611][T13002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.979722][T13000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.985832][T13002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.018456][T13002] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  555.019798][T13000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.048684][T13002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.075384][T13000] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  555.083168][T13002] usb 6-1: config 0 descriptor??
[  555.084428][T13000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.117871][T13000] usb 7-1: config 0 descriptor??
[  555.524435][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.547658][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.572086][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.595148][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.615150][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.621999][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.651710][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.665191][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.672387][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.679280][T13002] sony 0003:054C:024B.008A: unknown main item tag 0x0
[  555.687374][T13002] sony 0003:054C:024B.008A: unexpected long global item
[  555.695544][T13002] sony 0003:054C:024B.008A: parse failed
[  555.702455][T13002] sony 0003:054C:024B.008A: probe with driver sony failed with error -22
[  555.816044][T13002] usb 6-1: USB disconnect, device number 91
[  555.924173][T18767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  555.938140][T18767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  555.953152][T18767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  555.963564][T18767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  555.971398][T18767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  556.044731][T24864] lo speed is unknown, defaulting to 1000
[  556.333588][T24864] chnl_net:caif_netlink_parms(): no params data found
[  556.354004][T13000] uclogic 0003:256C:006D.008B: failed retrieving string descriptor #100: -71
[  556.362996][T13000] uclogic 0003:256C:006D.008B: failed retrieving pen parameters: -71
[  556.375698][T13000] uclogic 0003:256C:006D.008B: failed probing pen v1 parameters: -71
[  556.394357][T13000] uclogic 0003:256C:006D.008B: failed probing parameters: -71
[  556.414596][T13000] uclogic 0003:256C:006D.008B: probe with driver uclogic failed with error -71
[  556.434845][T13000] usb 7-1: USB disconnect, device number 60
[  556.628835][T24864] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.643129][T24864] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.661031][T24864] bridge_slave_0: entered allmulticast mode
[  556.682464][T24864] bridge_slave_0: entered promiscuous mode
[  556.704968][T24864] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.720836][T24864] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.730339][T24864] bridge_slave_1: entered allmulticast mode
[  556.741175][T24864] bridge_slave_1: entered promiscuous mode
[  556.784576][T24864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.802153][T24864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.844680][T24864] team0: Port device team_slave_0 added
[  556.852894][T24864] team0: Port device team_slave_1 added
[  556.901973][T24864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.910166][T24864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.937590][T24864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.950346][T24864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.957767][T24864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.984094][T24864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.021731][T24864] hsr_slave_0: entered promiscuous mode
[  557.028530][T24864] hsr_slave_1: entered promiscuous mode
[  557.034692][T24864] debugfs: 'hsr0' already exists in 'hsr'
[  557.040506][T24864] Cannot create hsr debugfs directory
[  557.158689][T24864] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  557.169702][T24864] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  557.179401][T24864] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  557.190002][T24864] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  557.210582][T24864] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.217759][T24864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.225133][T24864] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.232206][T24864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.278386][T24864] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.293559][T11239] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.303586][T11239] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.320634][T24864] 8021q: adding VLAN 0 to HW filter on device team0
[  557.332247][T11286] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.339375][T11286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.353520][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.360662][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.508966][T24864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.671030][T24894] ceph: No mds server is up or the cluster is laggy
[  557.683381][T24864] veth0_vlan: entered promiscuous mode
[  557.713417][T24864] veth1_vlan: entered promiscuous mode
[  557.763449][T24864] veth0_macvtap: entered promiscuous mode
[  557.772047][T24864] veth1_macvtap: entered promiscuous mode
[  557.788225][T24864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.799851][T24864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.816026][T11263] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.824740][T11263] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.833895][T11263] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.848690][T11263] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.857984][T24266] Bluetooth: hci2: command tx timeout
[  557.910505][T11239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.919070][T11239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.946140][T11286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.954244][T11286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.014365][T24916] veth0: entered promiscuous mode
[  558.016090][T24266] Bluetooth: hci1: command tx timeout
[  558.028233][T24916] veth0: left promiscuous mode
[  558.394451][T24940] netlink: 'syz.8.8113': attribute type 11 has an invalid length.
[  558.406016][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8113'.
[  558.448899][T24940] netlink: 'syz.8.8113': attribute type 11 has an invalid length.
[  558.464300][T11286] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  558.505164][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8113'.
[  558.531506][T11286] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.560630][T11286] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.586496][T11286] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.701811][   T30] audit: type=1400 audit(1755312328.829:1084): avc:  denied  { sqpoll } for  pid=24946 comm="syz.8.8116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  558.864304][T24953] binder: 24952:24953 ioctl c0306201 2000000001c0 returned -14
[  558.913379][T24951] bridge2: entered allmulticast mode
[  558.943059][T24951] team0: Port device bridge2 added
[  559.189330][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8130'.
[  559.193433][T24973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8131'.
[  559.199976][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8130'.
[  559.222716][T24972] Bluetooth: hci0: too big key_count value 47413
[  559.713201][T24993] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8139'.
[  559.934602][   T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  560.085330][   T24] usb 10-1: Using ep0 maxpacket: 16
[  560.092779][   T24] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  560.098156][T25004] lo speed is unknown, defaulting to 1000
[  560.103007][T24266] Bluetooth: hci1: command tx timeout
[  560.126718][   T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  560.145130][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  560.156641][   T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  560.175697][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.183794][   T24] usb 10-1: Product: syz
[  560.188209][   T24] usb 10-1: Manufacturer: syz
[  560.192887][   T24] usb 10-1: SerialNumber: syz
[  560.450015][T25015] input: syz1 as /devices/virtual/input/input130
[  560.611094][   T24] usb 10-1: 0:2 : does not exist
[  560.625291][T12989] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  560.785334][T12989] usb 2-1: Using ep0 maxpacket: 8
[  560.805337][T12989] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  560.827089][T12989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  560.862864][T25024] fuse: Bad value for 'fd'
[  560.867280][T12989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  560.867308][T12989] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  560.867364][T12989] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  560.867386][T12989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.879339][T12989] usbtmc 2-1:16.0: bulk endpoints not found
[  560.890699][T13002] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[  561.020225][T25030] overlayfs: failed to clone upperpath
[  561.086832][T13002] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  561.094901][T13002] usb 9-1: config 0 has no interface number 0
[  561.109238][T13002] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  561.135530][T13002] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  561.145321][T13000] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  561.158610][T13002] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  561.188798][ T5904] usb 2-1: USB disconnect, device number 99
[  561.203098][T13002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.216956][T13002] usb 9-1: config 0 descriptor??
[  561.222809][T25022] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  561.255693][T13002] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  561.305273][T13000] usb 6-1: Using ep0 maxpacket: 16
[  561.312013][T13000] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  561.320507][T13000] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  561.329680][T13000] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.340202][T13000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  561.349142][T13000] usb 6-1: config 0 has no interface number 0
[  561.355404][T13000] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  561.366802][T13000] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  561.378997][T13000] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  561.388918][T13000] usb 6-1: config 0 interface 125 has no altsetting 0
[  561.398225][T13000] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  561.407423][T13000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.415494][T13000] usb 6-1: Product: syz
[  561.419652][T13000] usb 6-1: Manufacturer: syz
[  561.424238][T13000] usb 6-1: SerialNumber: syz
[  561.431042][T13000] usb 6-1: config 0 descriptor??
[  561.444136][ T5904] usb 10-1: USB disconnect, device number 2
[  561.481756][T13002] usb 9-1: USB disconnect, device number 7
[  561.659216][T13000] usb 6-1: USB disconnect, device number 92
[  562.175670][T24266] Bluetooth: hci1: command tx timeout
[  562.445356][T13000] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  562.495238][ T5904] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  562.605212][T13000] usb 10-1: Using ep0 maxpacket: 8
[  562.613798][T13000] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  562.636371][T13000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.655428][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  562.660226][T13000] usb 10-1: Product: syz
[  562.665510][T13000] usb 10-1: Manufacturer: syz
[  562.666746][ T5904] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  562.670249][T13000] usb 10-1: SerialNumber: syz
[  562.691780][T13000] usb 10-1: config 0 descriptor??
[  562.703944][ T5904] usb 6-1: config 0 has no interface number 0
[  562.707045][T13000] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  562.728539][ T5904] usb 6-1: config 0 interface 184 has no altsetting 0
[  562.747557][ T5904] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  562.778035][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.795174][ T5904] usb 6-1: Product: syz
[  562.800529][ T5904] usb 6-1: Manufacturer: syz
[  562.810420][ T5904] usb 6-1: SerialNumber: syz
[  562.823354][ T5904] usb 6-1: config 0 descriptor??
[  562.838102][ T5904] smsc75xx v1.0.0
[  563.458580][ T5904] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  563.474905][ T5904] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  563.595150][T13006] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  563.756904][T13006] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[  563.765424][T13006] usb 9-1: config 0 has no interface number 0
[  563.773898][T13006] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  563.783181][T13006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.792472][T13006] usb 9-1: Product: syz
[  563.796666][T13006] usb 9-1: Manufacturer: syz
[  563.801252][T13006] usb 9-1: SerialNumber: syz
[  563.808445][T13006] usb 9-1: config 0 descriptor??
[  563.887951][ T5904] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  563.900221][ T5904] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  563.909970][ T5904] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  563.919808][ T5904] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  563.919980][T13000] gspca_sonixj: reg_w1 err -71
[  563.931156][ T5904] usb 6-1: USB disconnect, device number 93
[  563.939513][T13002] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  563.954290][T13000] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[  563.971945][T13000] usb 10-1: USB disconnect, device number 3
[  564.039905][T25121] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  564.102915][T13002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.118379][T13002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.134868][T13002] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  564.147794][T13002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.165934][T13002] usb 2-1: config 0 descriptor??
[  564.255489][T24266] Bluetooth: hci1: command tx timeout
[  564.515305][T25145] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  564.709764][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8213'.
[  564.795204][T13002] usb 2-1: language id specifier not provided by device, defaulting to English
[  564.824345][T13006] usb 9-1: non-Atmel transceiver xxxxe6de
[  565.027405][T13006] usb 9-1: Firmware version (0.0) predates our first public release.
[  565.051663][T13006] usb 9-1: Please update to version 0.2 or newer
[  565.069238][T13006] usb 9-1: atusb_probe: initialization failed, error = -19
[  565.087524][T13006] usb 9-1: USB disconnect, device number 8
[  565.199578][T13002] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.008C/input/input131
[  565.220153][T13002] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.008C/input/input132
[  565.246937][T13002] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.008C/input/input133
[  565.270415][T13002] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.008C/input/input134
[  565.289372][T13002] uclogic 0003:256C:006D.008C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  565.353431][   T30] audit: type=1400 audit(1755312335.479:1085): avc:  denied  { listen } for  pid=25190 comm="syz.9.8226" path=2F32302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  565.418218][T12989] usb 2-1: USB disconnect, device number 100
[  565.443184][T25195] lo speed is unknown, defaulting to 1000
[  565.662116][T25200] netlink: 'syz.6.8230': attribute type 7 has an invalid length.
[  565.682366][T25200] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8230'.
[  566.151321][   T30] audit: type=1400 audit(1755312336.269:1086): avc:  denied  { read } for  pid=25225 comm="syz.1.8240" path="socket:[109226]" dev="sockfs" ino=109226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  566.243642][   T30] audit: type=1400 audit(1755312336.369:1087): avc:  denied  { name_bind } for  pid=25229 comm="syz.8.8242" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  566.334719][T25236] SELinux: ebitmap: truncated map
[  566.368427][T25236] SELinux: failed to load policy
[  566.605893][T25248] dvmrp0: left allmulticast mode
[  567.427633][T25273] veth0: entered promiscuous mode
[  567.476193][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8262'.
[  567.646542][T25273] veth0 (unregistering): left promiscuous mode
[  567.905461][T13002] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  568.054072][T25292] input: syz1 as /devices/virtual/input/input135
[  568.096096][T13002] usb 2-1: Using ep0 maxpacket: 16
[  568.107516][T13002] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  568.124248][T13002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.170118][T13002] usb 2-1: config 0 has no interface number 0
[  568.192242][T13002] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  568.217422][T13002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.268341][T13002] usb 2-1: Product: syz
[  568.274628][T13002] usb 2-1: Manufacturer: syz
[  568.284737][T13002] usb 2-1: SerialNumber: syz
[  568.313201][T13002] usb 2-1: config 0 descriptor??
[  568.331452][T13002] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  568.345097][T13002] usb 2-1: No valid video chain found.
[  568.377271][T25304] overlayfs: failed to verify upper (30/file0, ino=181, err=-116)
[  568.395931][T25304] overlayfs: failed to verify index dir 'upper' xattr
[  568.405939][T12989] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  568.415925][T25304] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  568.536692][T13002] usb 2-1: USB disconnect, device number 101
[  568.556602][T12989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.570326][T12989] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  568.583906][T12989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.595420][T12989] usb 6-1: Product: syz
[  568.599596][T12989] usb 6-1: Manufacturer: syz
[  568.604662][T12989] usb 6-1: SerialNumber: syz
[  568.612240][T12989] usb 6-1: config 0 descriptor??
[  568.740845][T25312] siw: device registration error -23
[  568.795293][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  568.818577][T25314] lo speed is unknown, defaulting to 1000
[  568.834428][T13000] usb 6-1: USB disconnect, device number 94
[  568.956855][   T24] usb 10-1: config 0 has an invalid interface number: 98 but max is 0
[  568.975265][   T24] usb 10-1: config 0 has no interface number 0
[  568.981464][   T24] usb 10-1: config 0 interface 98 has no altsetting 0
[  568.994412][   T24] usb 10-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  569.009795][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.020352][   T24] usb 10-1: Product: syz
[  569.024663][   T24] usb 10-1: Manufacturer: syz
[  569.032420][   T24] usb 10-1: SerialNumber: syz
[  569.040688][   T24] usb 10-1: config 0 descriptor??
[  569.294935][   T24] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  569.827516][T25344] bridge: RTM_NEWNEIGH with invalid ether address
[  569.865364][T13006] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  569.944761][T25353] netlink: 'syz.9.8292': attribute type 4 has an invalid length.
[  569.966709][T25353] netlink: 'syz.9.8292': attribute type 4 has an invalid length.
[  570.025241][T13006] usb 9-1: Using ep0 maxpacket: 16
[  570.038658][T13006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.053189][T13006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2039, setting to 1024
[  570.068000][T13006] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  570.078477][T13006] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  570.096632][T13006] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  570.109690][T13006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.110603][   T24] usb 10-1: [ueagle-atm] pre-firmware device, uploading firmware
[  570.117723][T13006] usb 9-1: Product: syz
[  570.117741][T13006] usb 9-1: Manufacturer: syz
[  570.117756][T13006] usb 9-1: SerialNumber: syz
[  570.120285][T25337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  570.146547][   T24] usb 10-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  570.154738][T16953] usb 10-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  570.164369][T16953] usb 10-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  570.181235][   T24] usb 10-1: USB disconnect, device number 4
[  570.423042][T25337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  570.440866][T25337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  570.455165][ T5904] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  570.611431][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  570.624728][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  570.634760][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  570.644642][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  570.656287][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  570.670713][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  570.679900][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.906805][ T5904] usb 2-1: GET_CAPABILITIES returned 0
[  570.919584][ T5904] usbtmc 2-1:16.0: can't read capabilities
[  570.969906][T25387] fuse: Bad value for 'fd'
[  571.276812][T13006] cdc_ncm 9-1:1.0: SET_CRC_MODE failed
[  571.342239][T13006] cdc_ncm 9-1:1.0: SET_NTB_FORMAT failed
[  571.373679][T13006] cdc_ncm 9-1:1.0: bind() failure
[  571.389530][T16954] usb 2-1: USB disconnect, device number 102
[  571.415188][T13006] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  571.422157][T13006] cdc_ncm 9-1:1.1: bind() failure
[  571.436648][T13006] usb 9-1: USB disconnect, device number 9
[  571.741276][T12997] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  571.910471][T12997] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.950868][T12997] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  571.963136][T12997] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  571.979160][T12997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.991146][T12997] usb 6-1: Product: syz
[  571.997833][T12997] usb 6-1: Manufacturer: syz
[  572.005214][T12997] usb 6-1: SerialNumber: syz
[  572.017314][T12997] cdc_mbim 6-1:1.0: skipping garbage
[  572.231739][T25395] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  572.869630][T25395] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  572.880433][T12997] cdc_mbim 6-1:1.0: setting rx_max = 16384
[  573.090424][T12997] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  573.170918][T12997] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  573.186959][T12997] wwan wwan0: port wwan0mbim0 attached
[  573.208084][T12997] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 86:eb:5a:ff:9c:d1
[  573.244858][T12997] usb 6-1: USB disconnect, device number 95
[  573.266826][T12997] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  573.422230][T12997] wwan wwan0: port wwan0mbim0 disconnected
[  573.709929][T25473] veth1_to_bridge: entered allmulticast mode
[  573.730758][T25473] veth1_to_bridge: left allmulticast mode
[  573.745724][T13002] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  573.933773][T13002] usb 9-1: Using ep0 maxpacket: 16
[  573.941492][T13002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.963182][T13002] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  573.995104][T13002] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  574.004286][T13002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.032776][T13002] usb 9-1: config 0 descriptor??
[  574.464378][T13002] HID 045e:07da: Invalid code 65791 type 1
[  574.478831][T13002] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.008D/input/input136
[  574.509138][T13002] microsoft 0003:045E:07DA.008D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  574.695277][T16954] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  574.900017][T16954] usb 10-1: Using ep0 maxpacket: 32
[  574.907922][T16954] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.935163][T16954] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.948243][T16954] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  574.979189][T16954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.013929][T16954] usb 10-1: config 0 descriptor??
[  575.049497][T16954] hub 10-1:0.0: USB hub found
[  575.274660][T16954] hub 10-1:0.0: 1 port detected
[  575.292499][T13000] usb 9-1: USB disconnect, device number 10
[  575.503823][   T30] audit: type=1400 audit(1755312345.629:1088): avc:  denied  { mounton } for  pid=25535 comm="syz.1.8368" path="/203/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  575.902704][T13000] hub 10-1:0.0: activate --> -90
[  576.318295][T12989] usb 10-1: USB disconnect, device number 5
[  576.837218][T25580] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.8383'.
[  577.250756][T25590] netlink: 'syz.6.8388': attribute type 1 has an invalid length.
[  577.286692][T25590] netlink: 'syz.6.8388': attribute type 2 has an invalid length.
[  577.317813][T25594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  577.913107][T11258] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.931843][T11258] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.049113][T11258] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.075419][T11258] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.163399][T11258] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.176770][T11258] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.265285][T11258] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.279498][T11258] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.620275][T11258] bridge_slave_0: left allmulticast mode
[  578.648401][T11258] bridge_slave_0: left promiscuous mode
[  578.675594][T11258] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.014003][T25648] netlink: 'syz.5.8411': attribute type 10 has an invalid length.
[  579.287463][T25658] netlink: 'syz.8.8414': attribute type 4 has an invalid length.
[  579.339380][T25660] netlink: 'syz.8.8414': attribute type 4 has an invalid length.
[  579.719987][T11258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.730028][T11258] bond_slave_0: left promiscuous mode
[  579.738029][T11258] bond0 (unregistering): (slave bond1): Releasing backup interface
[  579.749193][T11258] bond1 (unregistering): left promiscuous mode
[  579.758277][T11258] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  579.767717][T11258] batadv0: left promiscuous mode
[  579.780228][T11258] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  579.789628][T11258] bridge_slave_1: left promiscuous mode
[  579.797881][T11258] bond0 (unregistering): Released all slaves
[  579.905893][T16954] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  579.925769][T11258] bond1 (unregistering): Released all slaves
[  579.972977][T25648] team0: Port device dummy0 added
[  580.057335][T16954] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  580.069364][T16954] usb 10-1: config 0 has no interface number 0
[  580.110043][T16954] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  580.150549][T16954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.201372][T16954] usb 10-1: Product: syz
[  580.210112][T25686] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  580.215848][T16954] usb 10-1: Manufacturer: syz
[  580.245201][T16954] usb 10-1: SerialNumber: syz
[  580.262529][T16954] usb 10-1: config 0 descriptor??
[  580.501561][T16954] usb 10-1: Found UVC 0.08 device syz (046d:0823)
[  580.520084][T16954] usb 10-1: No valid video chain found.
[  580.559629][T16954] usb 10-1: USB disconnect, device number 6
[  580.669966][T11258] hsr_slave_0: left promiscuous mode
[  580.679023][T11258] hsr_slave_1: left promiscuous mode
[  580.684968][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.700503][T11258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.710114][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.722083][T11258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.747614][T11258] veth1_macvtap: left promiscuous mode
[  580.753181][T11258] veth0_macvtap: left promiscuous mode
[  580.761235][T11258] veth1_vlan: left promiscuous mode
[  580.772301][T11258] veth0_vlan: left promiscuous mode
[  580.875357][ T5904] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  580.906142][T13002] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  581.050765][ T5904] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  581.075134][ T5904] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  581.091747][T13002] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.109879][T13002] usb 9-1: config 0 interface 0 has no altsetting 0
[  581.117146][ T5904] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  581.135243][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.144942][T13002] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  581.154418][T13002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.163724][T13002] usb 9-1: Product: syz
[  581.171423][T13002] usb 9-1: Manufacturer: syz
[  581.176786][T13002] usb 9-1: SerialNumber: syz
[  581.191344][T13002] usb 9-1: config 0 descriptor??
[  581.201510][T13002] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  581.243769][T13002] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  581.277063][T13002] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  581.296337][T13002] usb 9-1: media controller created
[  581.341722][T13002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  581.435122][T13002] DVB: Unable to find symbol tda10046_attach()
[  581.441349][T13002] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  581.450300][T13002] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  581.549447][T11258] team0 (unregistering): Port device team_slave_1 removed
[  581.582253][ T5904] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  581.594487][ T5904] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input137
[  581.618108][ T5904] input: failed to attach handler kbd to device input137, error: -5
[  581.639120][T11258] team0 (unregistering): Port device team_slave_0 removed
[  581.652419][ T5904] usb 2-1: USB disconnect, device number 103
[  582.385298][T11239] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  582.386339][T25738] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  582.464409][T13002] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  582.499198][T13002] usb 9-1: USB disconnect, device number 11
[  582.695192][T13000] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  582.772521][T11258] IPVS: stop unused estimator thread 0...
[  582.863899][T13000] usb 6-1: Using ep0 maxpacket: 32
[  582.877355][T13000] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  582.907309][T13000] usb 6-1: config 0 has no interface number 0
[  582.925462][T13000] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  582.954862][T25763] syzkaller1: entered promiscuous mode
[  582.958637][T13000] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  582.965236][T25763] syzkaller1: entered allmulticast mode
[  582.987400][T13000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.009543][T13000] usb 6-1: Product: syz
[  583.013734][T13000] usb 6-1: Manufacturer: syz
[  583.056092][T13000] usb 6-1: SerialNumber: syz
[  583.070198][T13000] usb 6-1: config 0 descriptor??
[  583.092489][T13000] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  583.122719][T13000] em28xx 6-1:0.132: Video interface 132 found:
[  583.322840][T25769] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.8462'.
[  583.332939][T13006] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  583.529096][T13006] usb 9-1: Using ep0 maxpacket: 8
[  583.538080][T13006] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  583.565176][T13000] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  583.566792][T13006] usb 9-1: config 0 has no interface number 0
[  583.606568][   T30] audit: type=1400 audit(1755312353.729:1089): avc:  denied  { bind } for  pid=25777 comm="syz.9.8465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  583.625668][T13006] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  583.683418][T13006] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  583.719690][T13006] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  583.755961][T13006] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  583.783674][T13000] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  583.792323][T13006] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  583.797202][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'.
[  583.814678][T13006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.825171][T13000] em28xx 6-1:0.132: board has no eeprom
[  583.846880][T25782] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8467'.
[  583.863033][T13006] usb 9-1: config 0 descriptor??
[  583.899778][T13006] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  583.915143][T13000] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  583.944387][T11263] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  583.944487][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'.
[  583.962147][T13000] em28xx 6-1:0.132: analog set to bulk mode.
[  583.975109][T16954] em28xx 6-1:0.132: Registering V4L2 extension
[  583.981436][T11263] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  583.981472][T11263] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  583.981501][T11263] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  584.028705][T13000] usb 6-1: USB disconnect, device number 96
[  584.037804][T25782] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8467'.
[  584.043926][T13000] em28xx 6-1:0.132: Disconnecting em28xx
[  584.212186][   T24] usb 9-1: USB disconnect, device number 12
[  584.226286][   T24] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  584.352844][T16954] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  584.378083][T16954] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  584.405168][T16954] em28xx 6-1:0.132: No AC97 audio processor
[  584.436884][T16954] usb 6-1: Decoder not found
[  584.446239][T16954] em28xx 6-1:0.132: failed to create media graph
[  584.462819][T16954] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  584.479337][T16954] em28xx 6-1:0.132: Remote control support is not available for this card.
[  584.508637][T13000] em28xx 6-1:0.132: Closing input extension
[  584.528053][T13000] em28xx 6-1:0.132: Freeing device
[  586.068770][   T30] audit: type=1400 audit(1755312356.189:1090): avc:  denied  { read } for  pid=25850 comm="syz.5.8492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  586.175680][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  586.753963][T25882] netlink: 'syz.8.8507': attribute type 39 has an invalid length.
[  587.902184][T25934] 9pnet_fd: Insufficient options for proto=fd
[  588.352563][T25948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8534'.
[  588.385136][T13006] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  588.535145][T13006] usb 9-1: Using ep0 maxpacket: 32
[  588.542110][T13006] usb 9-1: config 0 has no interfaces?
[  588.547869][T13006] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  588.557198][T13006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.573455][T13006] usb 9-1: config 0 descriptor??
[  588.803498][T13006] usb 9-1: USB disconnect, device number 13
[  589.584509][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8555'.
[  589.603039][T25996] bridge_slave_1: left allmulticast mode
[  589.631061][T25996] bridge_slave_1: left promiscuous mode
[  589.641251][T25996] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.658037][T25996] bridge_slave_0: left allmulticast mode
[  589.675613][T25996] bridge_slave_0: left promiscuous mode
[  589.681804][T25996] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.125280][T13000] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  590.139354][T26010] lo speed is unknown, defaulting to 1000
[  590.318224][T13000] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  590.331131][T13000] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  590.396503][T13000] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  590.417900][T13000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.435348][T13000] usb 2-1: Product: syz
[  590.439960][T13000] usb 2-1: Manufacturer: syz
[  590.444560][T13000] usb 2-1: SerialNumber: syz
[  590.454534][T13000] usb 2-1: config 0 descriptor??
[  590.462308][T26006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  590.495908][T26006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  590.755781][T26006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  590.779824][T26006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  590.835792][T26037] syzkaller1: entered promiscuous mode
[  590.855164][T26037] syzkaller1: entered allmulticast mode
[  591.203127][T26057] input: syz0 as /devices/virtual/input/input138
[  591.480730][T26065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  591.504157][T26070] overlayfs: upper fs does not support file handles, falling back to index=off.
[  591.804610][T24266] Bluetooth: hci4: connection err: -111
[  591.837173][T13000] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  591.870241][T13000] dm9601 2-1:0.0 eth17: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[  591.886787][T13000] usb 2-1: USB disconnect, device number 104
[  591.894338][T13000] dm9601 2-1:0.0 eth17: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  591.896840][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8595'.
[  592.165386][T13006] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  592.312925][   T30] audit: type=1800 audit(1755312362.439:1091): pid=26108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.8602" name="nullb0" dev="devtmpfs" ino=3608 res=0 errno=0
[  592.326852][T13006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.369425][T13006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.406528][T13006] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  592.427973][T13006] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  592.444986][T13006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.464546][T13006] usb 6-1: config 0 descriptor??
[  592.893366][T13006] plantronics 0003:047F:FFFF.008E: ignoring exceeding usage max
[  592.933402][T13006] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  593.134089][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8616'.
[  593.185735][T13006] usb 6-1: USB disconnect, device number 97
[  593.526408][T26151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8622'.
[  594.255632][T13000] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  594.329236][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8640'.
[  594.415220][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  594.439394][T13000] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  594.456773][T13000] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  594.477165][T13000] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  594.493806][T13000] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  594.517326][T13000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  594.539469][T13000] usb 10-1: Product: syz
[  594.544133][T13000] usb 10-1: Manufacturer: syz
[  594.552979][T13000] usb 10-1: SerialNumber: syz
[  594.782234][T13000] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  594.991301][T13000] usb 10-1: USB disconnect, device number 7
[  594.999849][T13000] usblp0: removed
[  595.611466][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8666'.
[  596.235322][   T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  596.350415][T26269] program syz.8.8674 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  596.407227][   T24] usb 10-1: Using ep0 maxpacket: 32
[  596.426600][   T24] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[  596.436008][   T24] usb 10-1: config 0 has no interface number 0
[  596.443317][   T24] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  596.458200][   T24] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  596.468364][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.478506][   T24] usb 10-1: Product: syz
[  596.482820][   T24] usb 10-1: Manufacturer: syz
[  596.488211][   T24] usb 10-1: SerialNumber: syz
[  596.509925][   T24] usb 10-1: config 0 descriptor??
[  596.518076][   T24] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  596.528222][    C1] sd 0:0:1:0: [sda] tag#1073 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  596.538616][    C1] sd 0:0:1:0: [sda] tag#1073 CDB: Write(6) 0a 00 00 00 00 00
[  596.554605][   T24] em28xx 10-1:0.132: Video interface 132 found:
[  596.682247][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8680'.
[  596.711166][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8680'.
[  596.951502][   T24] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[  597.160029][   T24] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  597.170227][   T24] em28xx 10-1:0.132: board has no eeprom
[  597.245184][   T24] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  597.253212][   T24] em28xx 10-1:0.132: analog set to bulk mode.
[  597.259753][T16954] em28xx 10-1:0.132: Registering V4L2 extension
[  597.286670][   T24] usb 10-1: USB disconnect, device number 8
[  597.307648][   T24] em28xx 10-1:0.132: Disconnecting em28xx
[  597.420523][T16954] em28xx 10-1:0.132: Config register raw data: 0xffffffed
[  597.432044][T16954] em28xx 10-1:0.132: AC97 chip type couldn't be determined
[  597.440601][T16954] em28xx 10-1:0.132: No AC97 audio processor
[  597.447279][T13006] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  597.449545][T16954] usb 10-1: Decoder not found
[  597.459867][T16954] em28xx 10-1:0.132: failed to create media graph
[  597.466353][T16954] em28xx 10-1:0.132: V4L2 device video103 deregistered
[  597.473847][T16954] em28xx 10-1:0.132: Remote control support is not available for this card.
[  597.482903][   T24] em28xx 10-1:0.132: Closing input extension
[  597.490819][   T24] em28xx 10-1:0.132: Freeing device
[  597.605305][T13006] usb 2-1: Using ep0 maxpacket: 16
[  597.611932][T13006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.623897][T13006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.636224][T13006] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  597.645628][T13006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.655818][T13006] usb 2-1: config 0 descriptor??
[  597.675199][ T5904] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  597.835498][ T5904] usb 6-1: Using ep0 maxpacket: 16
[  597.853973][   T30] audit: type=1400 audit(1755312367.979:1092): avc:  denied  { audit_write } for  pid=26314 comm="syz.9.8693" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  597.855845][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.898283][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.942201][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  597.972861][T26319] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.8695'.
[  597.993179][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  598.023232][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.049785][ T5904] usb 6-1: config 0 descriptor??
[  598.122060][T13006] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.008F/input/input141
[  598.295879][T13006] appleir 0003:05AC:8241.008F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  598.405767][ T6014] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  598.480830][ T5904] hid_parser_main: 138 callbacks suppressed
[  598.480851][ T5904] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0
[  598.518448][ T5904] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0
[  598.557986][ T5904] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0
[  598.578550][ T6014] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  598.591373][ T5904] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0
[  598.598835][ T6014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.635332][ T5904] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0
[  598.683864][ T6014] usb 10-1: config 0 descriptor??
[  598.718330][ T6014] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  598.764725][ T5904] microsoft 0003:045E:07DA.0090: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  598.778862][ T5904] microsoft 0003:045E:07DA.0090: no inputs found
[  598.785323][ T5904] microsoft 0003:045E:07DA.0090: could not initialize ff, continuing anyway
[  598.797609][ T5904] usb 6-1: USB disconnect, device number 98
[  599.179066][T26352] overlayfs: failed to set uuid (216/file0, err=-1); falling back to uuid=null.
[  599.192203][T26352] overlayfs: failed to verify upper root origin
[  599.523684][ T6014] gspca_stv06xx: I2C: Read error writing address: -71
[  599.554502][ T6014] usb 10-1: USB disconnect, device number 9
[  599.686343][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8719'.
[  599.717984][T26381] 8021q: adding VLAN 0 to HW filter on device bond1
[  599.731338][T13002] libceph: connect (1)[c::]:6789 error -101
[  599.739431][T13002] libceph: mon0 (1)[c::]:6789 connect error
[  599.752354][T26381] 8021q: adding VLAN 0 to HW filter on device bond1
[  599.759542][T26381] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  599.771551][T26381] bond1: (slave vcan1): Error -95 calling set_mac_address
[  599.973488][T26392] kvm: user requested TSC rate below hardware speed
[  599.984037][T26392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  600.011104][T13002] libceph: connect (1)[c::]:6789 error -101
[  600.017962][T13002] libceph: mon0 (1)[c::]:6789 connect error
[  600.036150][T13006] usb 2-1: USB disconnect, device number 105
[  600.171725][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8727'.
[  600.183807][T26402] netlink: 'syz.9.8727': attribute type 30 has an invalid length.
[  600.247421][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8727'.
[  600.269949][T26402] netlink: 'syz.9.8727': attribute type 30 has an invalid length.
[  600.398539][   T30] audit: type=1400 audit(1755312370.529:1093): avc:  denied  { name_bind 0x1000000 } for  pid=26416 comm="syz.1.8733" path="socket:[114930]" dev="sockfs" ino=114930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  600.525589][T13006] libceph: connect (1)[c::]:6789 error -101
[  600.531687][T13006] libceph: mon0 (1)[c::]:6789 connect error
[  600.561878][T26384] ceph: No mds server is up or the cluster is laggy
[  600.572539][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8737'.
[  600.594964][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8737'.
[  600.625293][T26429] netlink: 'syz.6.8737': attribute type 20 has an invalid length.
[  600.650699][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8737'.
[  600.690334][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8737'.
[  600.718639][T26429] netlink: 'syz.6.8737': attribute type 20 has an invalid length.
[  600.995265][ T5904] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  601.155422][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  601.176832][ T5904] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  601.194414][ T5904] usb 2-1: config 0 has no interface number 0
[  601.210747][ T5904] usb 2-1: config 0 interface 184 has no altsetting 0
[  601.238974][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  601.254791][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.282775][ T5904] usb 2-1: Product: syz
[  601.292431][ T5904] usb 2-1: Manufacturer: syz
[  601.299907][ T5904] usb 2-1: SerialNumber: syz
[  601.313550][ T5904] usb 2-1: config 0 descriptor??
[  601.348257][ T5904] smsc75xx v1.0.0
[  602.216251][T26490] virtiofs: Unknown parameter 'always 1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 18	nlmon0    :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 20	batadv0   :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 21	vxcan0    :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 22	vxcan1    :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 23	veth0     :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 24	veth1     :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 25	wg0       :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 26	wg1       :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 27	wg2       :     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 28	veth0_to_bridge:     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 29	bridge_slave_0:     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 30	veth1_to_bridge:     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 31	bridge_slave_1:     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 32	veth0_to_bond:     1      V3
[  602.216251][T26490] 				010000E0     1 0:00000000		0
[  602.216251][T26490] 33	bond_slave_0:     1      V3
[  602.216251][T26490] 				010000E0     1 0:0
[  602.217916][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8761'.
[  602.373622][    C0] vkms_vblank_simulate: vblank timer overrun
[  602.681560][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  602.695316][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  602.729419][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  602.770277][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  602.780050][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  602.790425][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  602.800335][ T5904] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  602.812941][ T5904] usb 2-1: USB disconnect, device number 106
[  603.164355][   T30] audit: type=1400 audit(1755312373.289:1094): avc:  denied  { create } for  pid=26507 comm="syz.5.8770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  603.184078][    C0] vkms_vblank_simulate: vblank timer overrun
[  603.191898][   T30] audit: type=1400 audit(1755312373.289:1095): avc:  denied  { listen } for  pid=26507 comm="syz.5.8770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  603.212359][   T30] audit: type=1400 audit(1755312373.289:1096): avc:  denied  { accept } for  pid=26507 comm="syz.5.8770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  603.315231][ T5904] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  603.466969][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.478117][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  603.487999][ T5904] usb 9-1: New USB device found, idVendor=38de, idProduct=1142, bcdDevice= 0.00
[  603.497048][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.507072][ T5904] usb 9-1: config 0 descriptor??
[  603.741549][T26517] netlink: 'syz.6.8774': attribute type 1 has an invalid length.
[  603.749788][T26517] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8774'.
[  603.929256][ T5904] hid-generic 0003:38DE:1142.0091: unknown main item tag 0x0
[  603.939393][ T5904] hid-generic 0003:38DE:1142.0091: unknown main item tag 0x0
[  603.958922][ T5904] hid-generic 0003:38DE:1142.0091: unknown main item tag 0x0
[  603.974366][ T5904] hid-generic 0003:38DE:1142.0091: unknown main item tag 0x0
[  603.983798][ T5904] hid-generic 0003:38DE:1142.0091: unknown main item tag 0x0
[  604.024649][ T5904] hid-generic 0003:38DE:1142.0091: hidraw0: USB HID v0.00 Device [HID 38de:1142] on usb-dummy_hcd.8-1/input0
[  604.145252][T18767] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  604.154838][T18767] CPU: 0 UID: 0 PID: 18767 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  604.154874][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  604.154889][T18767] Workqueue: hci4 hci_rx_work
[  604.154910][T18767] Call Trace:
[  604.154919][T18767]  <TASK>
[  604.154927][T18767]  dump_stack_lvl+0x16c/0x1f0
[  604.154949][T18767]  sysfs_warn_dup+0x7f/0xa0
[  604.154974][T18767]  sysfs_create_dir_ns+0x24b/0x2b0
[  604.154997][T18767]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  604.155020][T18767]  ? find_held_lock+0x2b/0x80
[  604.155051][T18767]  ? do_raw_spin_unlock+0x172/0x230
[  604.155073][T18767]  kobject_add_internal+0x2c4/0x9b0
[  604.155098][T18767]  kobject_add+0x16e/0x240
[  604.155116][T18767]  ? __pfx_kobject_add+0x10/0x10
[  604.155137][T18767]  ? do_raw_spin_unlock+0x172/0x230
[  604.155155][T18767]  ? kobject_put+0xab/0x5a0
[  604.155180][T18767]  device_add+0x288/0x1aa0
[  604.155201][T18767]  ? __pfx_dev_set_name+0x10/0x10
[  604.155226][T18767]  ? __pfx_device_add+0x10/0x10
[  604.155249][T18767]  ? mgmt_send_event_skb+0x2fb/0x460
[  604.155282][T18767]  hci_conn_add_sysfs+0x17e/0x230
[  604.155301][T18767]  le_conn_complete_evt+0x1075/0x1d70
[  604.155327][T18767]  ? preempt_count_sub+0x150/0x160
[  604.155353][T18767]  ? find_held_lock+0x2b/0x80
[  604.155372][T18767]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  604.155395][T18767]  ? hci_event_packet+0x459/0x11c0
[  604.155424][T18767]  ? __mutex_unlock_slowpath+0x163/0x800
[  604.155449][T18767]  hci_le_conn_complete_evt+0x23c/0x370
[  604.155481][T18767]  hci_le_meta_evt+0x354/0x5e0
[  604.155510][T18767]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  604.155541][T18767]  hci_event_packet+0x682/0x11c0
[  604.155569][T18767]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  604.155598][T18767]  ? __pfx_hci_event_packet+0x10/0x10
[  604.155626][T18767]  ? kcov_remote_start+0x3c9/0x6d0
[  604.155646][T18767]  ? lockdep_hardirqs_on+0x7c/0x110
[  604.155671][T18767]  hci_rx_work+0x2c5/0x16b0
[  604.155689][T18767]  ? rcu_is_watching+0x12/0xc0
[  604.155715][T18767]  process_one_work+0x9cc/0x1b70
[  604.155747][T18767]  ? __pfx_process_one_work+0x10/0x10
[  604.155775][T18767]  ? assign_work+0x1a0/0x250
[  604.155797][T18767]  worker_thread+0x6c8/0xf10
[  604.155830][T18767]  ? __pfx_worker_thread+0x10/0x10
[  604.155854][T18767]  kthread+0x3c5/0x780
[  604.155872][T18767]  ? __pfx_kthread+0x10/0x10
[  604.155890][T18767]  ? rcu_is_watching+0x12/0xc0
[  604.155909][T18767]  ? __pfx_kthread+0x10/0x10
[  604.155927][T18767]  ret_from_fork+0x5d7/0x6f0
[  604.155945][T18767]  ? __pfx_kthread+0x10/0x10
[  604.155962][T18767]  ret_from_fork_asm+0x1a/0x30
[  604.155998][T18767]  </TASK>
[  604.408806][    C0] vkms_vblank_simulate: vblank timer overrun
[  604.416319][T18767] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  604.430358][T18767] Bluetooth: hci4: failed to register connection device
[  604.580359][T26546] lo speed is unknown, defaulting to 1000
[  604.835240][   T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  604.845187][T13000] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  604.990264][   T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  604.999836][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.009179][T13000] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  605.018130][T13000] usb 6-1: config 0 has no interface number 0
[  605.024701][   T24] usb 2-1: config 0 descriptor??
[  605.032856][T13000] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  605.044482][T13000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.052574][T13000] usb 6-1: Product: syz
[  605.060066][T13000] usb 6-1: Manufacturer: syz
[  605.064657][T13000] usb 6-1: SerialNumber: syz
[  605.071315][T13000] usb 6-1: config 0 descriptor??
[  605.077883][T13000] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  605.088966][T13000] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22
[  605.321746][T13002] usb 6-1: USB disconnect, device number 99
[  605.427308][T26558] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8788'.
[  605.455151][T18767] Bluetooth: hci4: command 0x041b tx timeout
[  605.987651][ T5904] usb 9-1: USB disconnect, device number 14
[  606.249746][   T24] usb 2-1: Cannot set autoneg
[  606.261499][   T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  606.281480][   T24] usb 2-1: USB disconnect, device number 107
[  608.233732][   T30] audit: type=1400 audit(1755312378.359:1097): avc:  denied  { ioctl } for  pid=26640 comm="syz.8.8820" path="socket:[115481]" dev="sockfs" ino=115481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  608.361974][T26652] netlink: 'syz.8.8825': attribute type 1 has an invalid length.
[  608.383216][   T30] audit: type=1400 audit(1755312378.429:1098): avc:  denied  { read } for  pid=26647 comm="syz.1.8824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  608.402473][T26652] 8021q: adding VLAN 0 to HW filter on device bond2
[  608.525274][T26652] bond2: (slave geneve2): making interface the new active one
[  608.549923][T26652] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  609.150939][   T30] audit: type=1400 audit(1755312379.279:1099): avc:  denied  { write } for  pid=26680 comm="syz.1.8837" path="socket:[116012]" dev="sockfs" ino=116012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  609.566604][T12997] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  609.696581][ T5918] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  609.729475][T12997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.746210][T12997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  609.803967][T12997] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  609.829162][T12997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.842295][T12997] usb 2-1: config 0 descriptor??
[  609.855193][ T5918] usb 9-1: Using ep0 maxpacket: 32
[  609.889410][ T5918] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  609.922336][ T5918] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  609.941058][ T5918] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  609.952048][ T5918] usb 9-1: config 1 has no interface number 0
[  609.974646][ T5918] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  609.996225][ T5918] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  610.024573][ T5918] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  610.033868][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.102027][ T5918] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  610.308734][ T5918] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  610.311963][T12997] kovaplus 0003:1E7D:2D50.0092: unknown main item tag 0x0
[  610.322910][T12997] kovaplus 0003:1E7D:2D50.0092: unknown main item tag 0x0
[  610.343942][T12997] kovaplus 0003:1E7D:2D50.0092: unknown main item tag 0x0
[  610.373960][T12997] kovaplus 0003:1E7D:2D50.0092: unknown main item tag 0x0
[  610.385121][T12997] kovaplus 0003:1E7D:2D50.0092: unknown main item tag 0x0
[  610.434283][T12997] kovaplus 0003:1E7D:2D50.0092: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  610.575457][T18767] Bluetooth: hci0: command 0x0c20 tx timeout
[  610.578417][   T51] Bluetooth: hci4: command 0x041b tx timeout
[  610.737772][T12997] kovaplus 0003:1E7D:2D50.0092: couldn't init struct kovaplus_device
[  610.746070][T12997] kovaplus 0003:1E7D:2D50.0092: couldn't install mouse
[  610.753291][ T5918] usb 9-1: USB disconnect, device number 15
[  610.755031][T12997] kovaplus 0003:1E7D:2D50.0092: probe with driver kovaplus failed with error -32
[  610.760616][ T5918] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  610.771993][T12997] usb 2-1: USB disconnect, device number 108
[  611.065239][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  611.349232][T26732] overlayfs: failed to clone lowerpath
[  611.479957][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8859'.
[  611.638745][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8864'.
[  611.801550][T26754] netlink: 'syz.6.8869': attribute type 39 has an invalid length.
[  613.013382][T26808] netlink: 'syz.5.8892': attribute type 12 has an invalid length.
[  613.031260][T26807] SELinux:  unknown common 
[  613.038856][T26807] SELinux: failed to load policy
[  613.180455][T24266] Bluetooth: hci4: unexpected event for opcode 0x0c23
[  613.576583][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8905'.
[  613.902637][T11286] Bluetooth: hci5: Frame reassembly failed (-84)
[  614.318199][T26870] futex_wake_op: syz.8.8919 tries to shift op by -1; fix this program
[  614.563595][T26885] Bluetooth: hci0: service_discovery: too big uuid_count value 65535
[  615.038982][T26910] lo speed is unknown, defaulting to 1000
[  615.285293][T12997] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  615.314752][T26924] input: syz1 as /devices/virtual/input/input142
[  615.463867][T12997] usb 10-1: config 0 has an invalid interface number: 204 but max is 0
[  615.483300][T12997] usb 10-1: config 0 has no interface number 0
[  615.497902][T12997] usb 10-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  615.525221][T12997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.533322][T12997] usb 10-1: Product: syz
[  615.555301][T12997] usb 10-1: Manufacturer: syz
[  615.560017][T12997] usb 10-1: SerialNumber: syz
[  615.568214][T12997] usb 10-1: config 0 descriptor??
[  615.587046][T12997] ems_usb 10-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  615.606050][T12997] ems_usb 10-1:0.204: probe with driver ems_usb failed with error -22
[  615.868157][T12997] usb 10-1: USB disconnect, device number 10
[  615.945173][T24266] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  615.952339][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[  615.956562][T26912] delete_channel: no stack
[  616.347526][T13006] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  616.517335][T26953] netlink: 'syz.9.8953': attribute type 1 has an invalid length.
[  616.521559][T13006] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  616.546084][T13006] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  616.561810][T13006] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  616.575779][T13006] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  616.605165][T13006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.621754][T13006] usb 6-1: Product: syz
[  616.626170][T13006] usb 6-1: Manufacturer: syz
[  616.639616][T13006] usb 6-1: SerialNumber: syz
[  616.650699][T13006] usb 6-1: config 0 descriptor??
[  616.657301][T26953] 8021q: adding VLAN 0 to HW filter on device bond1
[  616.668116][T26933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  616.675441][T12997] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[  616.683535][T26933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  616.692355][T13006] usb 6-1: ucan: probing device on interface #0
[  616.713020][T26955] bond1: (slave geneve2): making interface the new active one
[  616.757692][T26955] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  616.868726][T12997] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  616.885610][T12997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.909768][T12997] usb 2-1: Product: syz
[  616.914225][T12997] usb 2-1: Manufacturer: syz
[  616.951583][T12997] usb 2-1: SerialNumber: syz
[  616.966008][T12997] usb 2-1: config 0 descriptor??
[  617.114638][T13006] usb 6-1: ucan: device reported invalid device info
[  617.121719][T13006] usb 6-1: ucan: probe failed; try to update the device firmware
[  617.176987][T12997] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  617.289658][T26981] netlink: 'syz.6.8965': attribute type 13 has an invalid length.
[  617.308617][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8965'.
[  617.320519][   T24] usb 6-1: USB disconnect, device number 100
[  617.337095][T26981] netlink: 'syz.6.8965': attribute type 13 has an invalid length.
[  617.354717][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8965'.
[  617.404521][T26985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  617.519189][   T30] audit: type=1400 audit(1755312387.649:1100): avc:  denied  { read } for  pid=26988 comm="syz.8.8968" path="socket:[117480]" dev="sockfs" ino=117480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  617.543348][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.569112][T26993] netlink: 240 bytes leftover after parsing attributes in process `syz.8.8968'.
[  617.839891][T27005] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8975'.
[  618.181381][T12997] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  618.192762][T12997] usb 2-1: USB disconnect, device number 109
[  618.215336][ T5904] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  618.222964][T13006] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  618.395323][T13006] usb 10-1: Using ep0 maxpacket: 32
[  618.402272][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.413281][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  618.423241][T13006] usb 10-1: config 0 has an invalid interface number: 225 but max is 0
[  618.431551][T13006] usb 10-1: config 0 has no interface number 0
[  618.438613][ T5904] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  618.451690][ T5904] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  618.460829][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.470415][T13006] usb 10-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[  618.480963][ T5904] usb 9-1: config 0 descriptor??
[  618.485961][T13006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.494026][T13006] usb 10-1: Product: syz
[  618.498535][T13006] usb 10-1: Manufacturer: syz
[  618.503274][T13006] usb 10-1: SerialNumber: syz
[  618.511721][T13006] usb 10-1: config 0 descriptor??
[  618.585222][ T5918] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  618.741694][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.763311][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  618.783707][ T5918] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  618.827367][ T5918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  618.839442][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.855788][ T5918] usb 6-1: Product: syz
[  618.862708][ T5918] usb 6-1: Manufacturer: syz
[  618.868228][ T5918] usb 6-1: SerialNumber: syz
[  618.914496][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.927942][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.940570][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.950816][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.961485][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.969547][ T5904] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0
[  618.990342][ T5904] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  619.102844][T27028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  619.141558][T13006] mos7840 10-1:0.225: required endpoints missing
[  619.150406][T13006] usb 10-1: USB disconnect, device number 11
[  619.414701][T24266] Bluetooth: hci1: link tx timeout
[  619.423227][T24266] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  619.440094][T24266] Bluetooth: hci1: link tx timeout
[  619.445388][T24266] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  619.561645][T27068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9002'.
[  619.914299][T27028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  620.134449][ T5918] cdc_ncm 6-1:1.0: bind() failure
[  620.145532][ T5918] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  620.165482][ T5918] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  620.191689][ T5918] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  620.217275][ T5918] usb 6-1: USB disconnect, device number 101
[  620.756398][T27094] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.937726][   T24] usb 9-1: USB disconnect, device number 16
[  620.960154][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9018'.
[  620.973296][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9018'.
[  620.982339][T27109] netlink: 'syz.1.9018': attribute type 6 has an invalid length.
[  621.000937][ T3165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  621.010062][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9018'.
[  621.024253][ T3165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  621.034855][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9018'.
[  621.045985][ T3165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  621.054769][ T3165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  621.057632][T27109] netlink: 'syz.1.9018': attribute type 6 has an invalid length.
[  621.146003][T13000] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  621.184300][T27120] netlink: 'syz.1.9022': attribute type 12 has an invalid length.
[  621.193441][T27120] netlink: 'syz.1.9022': attribute type 29 has an invalid length.
[  621.205951][T27120] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9022'.
[  621.214999][T27120] netlink: 'syz.1.9022': attribute type 2 has an invalid length.
[  621.265339][T27123] netlink: 'syz.1.9022': attribute type 12 has an invalid length.
[  621.273176][T27123] netlink: 'syz.1.9022': attribute type 29 has an invalid length.
[  621.310457][T13000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.334565][T13000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.404179][T13000] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  621.425836][T13000] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  621.452280][T13000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.473331][T24266] Bluetooth: hci1: command 0x0406 tx timeout
[  621.495768][T13000] usb 6-1: config 0 descriptor??
[  621.602773][T27146] atomic_op ffff888061c42998 conn xmit_atomic 0000000000000000
[  621.887370][T27157] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  621.898440][   T24] IPVS: starting estimator thread 0...
[  621.917467][T13000] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  621.985115][T27162] IPVS: using max 45 ests per chain, 108000 per kthread
[  622.167935][T13000] usb 6-1: USB disconnect, device number 102
[  622.182089][T27179] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  622.190296][T27179] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  622.199093][T27179] hsr_slave_0: left promiscuous mode
[  622.208867][T27179] hsr_slave_1: left promiscuous mode
[  622.365853][ T6014] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  622.537149][ T6014] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  622.547035][ T6014] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  622.560084][ T6014] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  622.570631][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.576837][ T5918] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  622.742217][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  622.758437][T13000] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  622.766651][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  622.779042][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  622.794563][ T6014] usb 9-1: usb_control_msg returned -32
[  622.795562][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  622.801255][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  622.823743][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.834758][ T5918] usb 2-1: config 0 descriptor??
[  622.834921][ T6014] usbtmc 9-1:16.0: can't read capabilities
[  622.847058][T27186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  622.928511][T13000] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  622.941002][T13000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  622.953127][T13000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  622.968143][T13000] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  622.981793][T13000] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  622.991090][T13000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.004295][T13000] usb 10-1: config 0 descriptor??
[  623.010357][T27194] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  623.267840][ T5918] plantronics 0003:047F:FFFF.0095: reserved main item tag 0xd
[  623.278592][ T5918] plantronics 0003:047F:FFFF.0095: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  623.431257][T13000] plantronics 0003:047F:FFFF.0096: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  623.494294][T13000] usb 2-1: USB disconnect, device number 110
[  623.642941][ T6014] usb 10-1: USB disconnect, device number 12
[  624.067237][T27223] lo speed is unknown, defaulting to 1000
[  624.099134][   T30] audit: type=1326 audit(1755312394.229:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.6.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636d38ebe9 code=0x7fc00000
[  624.372685][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031077c00: rx timeout, send abort
[  624.385424][T13000] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  624.545120][T13000] usb 2-1: Using ep0 maxpacket: 32
[  624.600065][T13000] usb 2-1: unable to get BOS descriptor or descriptor too short
[  624.608122][T13000] usb 2-1: no configurations
[  624.615098][T13000] usb 2-1: can't read configurations, error -22
[  624.645317][ T6014] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  624.796752][ T6014] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  624.804968][ T6014] usb 10-1: config 0 has no interface number 0
[  624.811243][ T6014] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.823160][ T6014] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.825966][   T30] audit: type=1326 audit(1755312394.959:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.6.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f636d38ebe9 code=0x7fc00000
[  624.856994][ T6014] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  624.857047][ T6014] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  624.857068][ T6014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.858949][ T6014] usb 10-1: config 0 descriptor??
[  624.887974][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031077c00: abort rx timeout. Force session deactivation
[  624.945556][   T30] audit: type=1400 audit(1755312395.059:1103): avc:  denied  { bind } for  pid=27239 comm="syz.6.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  625.135489][T16954] usb 9-1: USB disconnect, device number 17
[  625.555898][T16954] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  625.568385][ T6014] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0097/input/input146
[  625.662346][ T6014] uclogic 0003:28BD:0042.0097: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1
[  625.710111][ T6014] usb 10-1: USB disconnect, device number 13
[  625.739188][T16954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.785487][T16954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.805318][T16954] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  625.814368][T16954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.852375][T16954] usb 6-1: config 0 descriptor??
[  626.282664][T16954] hid_mf 0003:0079:1846.0098: item fetching failed at offset 10/11
[  626.294771][T16954] hid_mf 0003:0079:1846.0098: HID parse failed.
[  626.307755][T16954] hid_mf 0003:0079:1846.0098: probe with driver hid_mf failed with error -22
[  626.411189][T27307] 
[  626.413535][T27307] =====================================================
[  626.420454][T27307] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  626.427894][T27307] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted
[  626.434988][T27307] -----------------------------------------------------
[  626.441903][T27307] syz.9.9104/27307 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  626.449612][T27307] ffff8880728dde88 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  626.458323][T27307] 
[  626.458323][T27307] and this task is already holding:
[  626.465679][T27307] ffff88802bbbb028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  626.475505][T27307] which would create a new lock dependency:
[  626.481371][T27307]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  626.489442][T27307] 
[  626.489442][T27307] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  626.498867][T27307]  (&client->buffer_lock){..-.}-{3:3}
[  626.498887][T27307] 
[  626.498887][T27307] ... which became SOFTIRQ-irq-safe at:
[  626.511913][T27307]   lock_acquire+0x179/0x350
[  626.516505][T27307]   _raw_spin_lock+0x2e/0x40
[  626.521087][T27307]   evdev_pass_values+0x10e/0x9b0
[  626.526098][T27307]   evdev_events+0x1bb/0x390
[  626.530683][T27307]   input_pass_values+0x74e/0x880
[  626.535696][T27307]   input_handle_event+0xb29/0x14d0
[  626.540878][T27307]   input_event+0x8e/0xd0
[  626.545192][T27307]   hidinput_hid_event+0xa10/0x2420
[  626.550372][T27307]   hid_process_event+0x4b7/0x5e0
[  626.555380][T27307]   hid_report_raw_event+0xa0a/0x1290
[  626.560744][T27307]   __hid_input_report.constprop.0+0x33f/0x450
[  626.566899][T27307]   hid_irq_in+0x35e/0x870
[  626.571308][T27307]   __usb_hcd_giveback_urb+0x38d/0x6e0
[  626.576760][T27307]   usb_hcd_giveback_urb+0x39b/0x450
[  626.582043][T27307]   dummy_timer+0x1814/0x3a30
[  626.586702][T27307]   __hrtimer_run_queues+0x202/0xad0
[  626.591977][T27307]   hrtimer_run_softirq+0x17d/0x350
[  626.597158][T27307]   handle_softirqs+0x216/0x8e0
[  626.601990][T27307]   __irq_exit_rcu+0x109/0x170
[  626.606732][T27307]   irq_exit_rcu+0x9/0x30
[  626.611042][T27307]   sysvec_apic_timer_interrupt+0xa4/0xc0
[  626.616748][T27307]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  626.622794][T27307]   finish_task_switch.isra.0+0x22a/0xc10
[  626.628504][T27307]   __schedule+0x1198/0x5de0
[  626.633087][T27307]   schedule_idle+0x5c/0x90
[  626.637569][T27307]   do_idle+0x2b6/0x510
[  626.641707][T27307]   cpu_startup_entry+0x4f/0x60
[  626.646542][T27307]   start_secondary+0x21d/0x2b0
[  626.651378][T27307]   common_startup_64+0x13e/0x148
[  626.656378][T27307] 
[  626.656378][T27307] to a SOFTIRQ-irq-unsafe lock:
[  626.663369][T27307]  (tasklist_lock){.+.+}-{3:3}
[  626.663389][T27307] 
[  626.663389][T27307] ... which became SOFTIRQ-irq-unsafe at:
[  626.675970][T27307] ...
[  626.675976][T27307]   lock_acquire+0x179/0x350
[  626.683103][T27307]   _raw_read_lock+0x5f/0x70
[  626.687674][T27307]   __do_wait+0x105/0x890
[  626.691983][T27307]   do_wait+0x21e/0x5a0
[  626.696118][T27307]   kernel_wait+0x9f/0x160
[  626.700507][T27307]   call_usermodehelper_exec_work+0xf1/0x170
[  626.706464][T27307]   process_one_work+0x9cc/0x1b70
[  626.711463][T27307]   worker_thread+0x6c8/0xf10
[  626.716114][T27307]   kthread+0x3c5/0x780
[  626.720243][T27307]   ret_from_fork+0x5d7/0x6f0
[  626.724891][T27307]   ret_from_fork_asm+0x1a/0x30
[  626.729718][T27307] 
[  626.729718][T27307] other info that might help us debug this:
[  626.729718][T27307] 
[  626.739919][T27307] Chain exists of:
[  626.739919][T27307]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[  626.739919][T27307] 
[  626.753011][T27307]  Possible interrupt unsafe locking scenario:
[  626.753011][T27307] 
[  626.761298][T27307]        CPU0                    CPU1
[  626.766638][T27307]        ----                    ----
[  626.771981][T27307]   lock(tasklist_lock);
[  626.776199][T27307]                                local_irq_disable();
[  626.782924][T27307]                                lock(&client->buffer_lock);
[  626.790267][T27307]                                lock(&new->fa_lock);
[  626.797000][T27307]   <Interrupt>
[  626.800428][T27307]     lock(&client->buffer_lock);
[  626.805429][T27307] 
[  626.805429][T27307]  *** DEADLOCK ***
[  626.805429][T27307] 
[  626.813547][T27307] 7 locks held by syz.9.9104/27307:
[  626.818714][T27307]  #0: ffff88802aef1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750
[  626.827828][T27307]  #1: ffff888021b79230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0
[  626.837900][T27307]  #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0
[  626.847532][T27307]  #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880
[  626.857073][T27307]  #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390
[  626.866182][T27307]  #5: ffff88802bbbb028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  626.876422][T27307]  #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510
[  626.885455][T27307] 
[  626.885455][T27307] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  626.895828][T27307] -> (&client->buffer_lock){..-.}-{3:3} {
[  626.901546][T27307]    IN-SOFTIRQ-W at:
[  626.905501][T27307]                     lock_acquire+0x179/0x350
[  626.911638][T27307]                     _raw_spin_lock+0x2e/0x40
[  626.917773][T27307]                     evdev_pass_values+0x10e/0x9b0
[  626.924339][T27307]                     evdev_events+0x1bb/0x390
[  626.930476][T27307]                     input_pass_values+0x74e/0x880
[  626.937040][T27307]                     input_handle_event+0xb29/0x14d0
[  626.943779][T27307]                     input_event+0x8e/0xd0
[  626.949650][T27307]                     hidinput_hid_event+0xa10/0x2420
[  626.956386][T27307]                     hid_process_event+0x4b7/0x5e0
[  626.962953][T27307]                     hid_report_raw_event+0xa0a/0x1290
[  626.969869][T27307]                     __hid_input_report.constprop.0+0x33f/0x450
[  626.977577][T27307]                     hid_irq_in+0x35e/0x870
[  626.983537][T27307]                     __usb_hcd_giveback_urb+0x38d/0x6e0
[  626.990540][T27307]                     usb_hcd_giveback_urb+0x39b/0x450
[  626.997367][T27307]                     dummy_timer+0x1814/0x3a30
[  627.003598][T27307]                     __hrtimer_run_queues+0x202/0xad0
[  627.010424][T27307]                     hrtimer_run_softirq+0x17d/0x350
[  627.017164][T27307]                     handle_softirqs+0x216/0x8e0
[  627.023566][T27307]                     __irq_exit_rcu+0x109/0x170
[  627.029872][T27307]                     irq_exit_rcu+0x9/0x30
[  627.035743][T27307]                     sysvec_apic_timer_interrupt+0xa4/0xc0
[  627.043010][T27307]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  627.050613][T27307]                     finish_task_switch.isra.0+0x22a/0xc10
[  627.057871][T27307]                     __schedule+0x1198/0x5de0
[  627.064005][T27307]                     schedule_idle+0x5c/0x90
[  627.070043][T27307]                     do_idle+0x2b6/0x510
[  627.075742][T27307]                     cpu_startup_entry+0x4f/0x60
[  627.082137][T27307]                     start_secondary+0x21d/0x2b0
[  627.088532][T27307]                     common_startup_64+0x13e/0x148
[  627.095098][T27307]    INITIAL USE at:
[  627.098964][T27307]                    lock_acquire+0x179/0x350
[  627.105011][T27307]                    _raw_spin_lock+0x2e/0x40
[  627.111059][T27307]                    evdev_pass_values+0x10e/0x9b0
[  627.117541][T27307]                    evdev_events+0x1bb/0x390
[  627.123583][T27307]                    input_pass_values+0x74e/0x880
[  627.130060][T27307]                    input_handle_event+0xf00/0x14d0
[  627.136714][T27307]                    input_inject_event+0x1e8/0x3b0
[  627.143290][T27307]                    evdev_write+0x457/0x750
[  627.149338][T27307]                    vfs_write+0x29d/0x11d0
[  627.155209][T27307]                    ksys_write+0x1f8/0x250
[  627.161077][T27307]                    do_syscall_64+0xcd/0x4c0
[  627.167120][T27307]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.174564][T27307]  }
[  627.177049][T27307]  ... key      at: [<ffffffff9b15c2a0>] __key.1+0x0/0x40
[  627.184144][T27307] 
[  627.184144][T27307] the dependencies between the lock to be acquired
[  627.184151][T27307]  and SOFTIRQ-irq-unsafe lock:
[  627.197621][T27307]   -> (tasklist_lock){.+.+}-{3:3} {
[  627.202895][T27307]      HARDIRQ-ON-R at:
[  627.207024][T27307]                         lock_acquire+0x179/0x350
[  627.213509][T27307]                         _raw_read_lock+0x5f/0x70
[  627.219991][T27307]                         __do_wait+0x105/0x890
[  627.226214][T27307]                         do_wait+0x21e/0x5a0
[  627.232262][T27307]                         kernel_wait+0x9f/0x160
[  627.238562][T27307]                         call_usermodehelper_exec_work+0xf1/0x170
[  627.246433][T27307]                         process_one_work+0x9cc/0x1b70
[  627.253361][T27307]                         worker_thread+0x6c8/0xf10
[  627.259923][T27307]                         kthread+0x3c5/0x780
[  627.265963][T27307]                         ret_from_fork+0x5d7/0x6f0
[  627.272539][T27307]                         ret_from_fork_asm+0x1a/0x30
[  627.279279][T27307]      SOFTIRQ-ON-R at:
[  627.283406][T27307]                         lock_acquire+0x179/0x350
[  627.289893][T27307]                         _raw_read_lock+0x5f/0x70
[  627.296378][T27307]                         __do_wait+0x105/0x890
[  627.302601][T27307]                         do_wait+0x21e/0x5a0
[  627.308649][T27307]                         kernel_wait+0x9f/0x160
[  627.314949][T27307]                         call_usermodehelper_exec_work+0xf1/0x170
[  627.322817][T27307]                         process_one_work+0x9cc/0x1b70
[  627.329730][T27307]                         worker_thread+0x6c8/0xf10
[  627.336294][T27307]                         kthread+0x3c5/0x780
[  627.342333][T27307]                         ret_from_fork+0x5d7/0x6f0
[  627.348894][T27307]                         ret_from_fork_asm+0x1a/0x30
[  627.355634][T27307]      INITIAL USE at:
[  627.359675][T27307]                        lock_acquire+0x179/0x350
[  627.366071][T27307]                        _raw_write_lock_irq+0x36/0x50
[  627.372903][T27307]                        copy_process+0x4caf/0x7690
[  627.379472][T27307]                        kernel_clone+0xfc/0x930
[  627.385779][T27307]                        user_mode_thread+0xc7/0x110
[  627.392434][T27307]                        rest_init+0x23/0x2b0
[  627.398485][T27307]                        start_kernel+0x3ee/0x4d0
[  627.404883][T27307]                        x86_64_start_reservations+0x18/0x30
[  627.412247][T27307]                        x86_64_start_kernel+0x130/0x190
[  627.419251][T27307]                        common_startup_64+0x13e/0x148
[  627.426079][T27307]      INITIAL READ USE at:
[  627.430557][T27307]                             lock_acquire+0x179/0x350
[  627.437388][T27307]                             _raw_read_lock+0x5f/0x70
[  627.444217][T27307]                             __do_wait+0x105/0x890
[  627.450787][T27307]                             do_wait+0x21e/0x5a0
[  627.457183][T27307]                             kernel_wait+0x9f/0x160
[  627.463831][T27307]                             call_usermodehelper_exec_work+0xf1/0x170
[  627.472055][T27307]                             process_one_work+0x9cc/0x1b70
[  627.480629][T27307]                             worker_thread+0x6c8/0xf10
[  627.487549][T27307]                             kthread+0x3c5/0x780
[  627.493946][T27307]                             ret_from_fork+0x5d7/0x6f0
[  627.500859][T27307]                             ret_from_fork_asm+0x1a/0x30
[  627.507946][T27307]    }
[  627.510590][T27307]    ... key      at: [<ffffffff8e20c098>] tasklist_lock+0x18/0x40
[  627.518458][T27307]    ... acquired at:
[  627.522414][T27307]    _raw_read_lock+0x5f/0x70
[  627.527086][T27307]    send_sigurg+0xed/0xc80
[  627.531578][T27307]    sk_send_sigurg+0x76/0x360
[  627.536335][T27307]    unix_stream_sendmsg+0xfa5/0x1340
[  627.541699][T27307]    ____sys_sendmsg+0xa98/0xc70
[  627.546618][T27307]    ___sys_sendmsg+0x134/0x1d0
[  627.551441][T27307]    __sys_sendmmsg+0x200/0x420
[  627.556265][T27307]    __x64_sys_sendmmsg+0x9c/0x100
[  627.561369][T27307]    do_syscall_64+0xcd/0x4c0
[  627.566026][T27307]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.572074][T27307] 
[  627.574374][T27307]  -> (&f_owner->lock){....}-{3:3} {
[  627.579751][T27307]     INITIAL USE at:
[  627.583707][T27307]                      lock_acquire+0x179/0x350
[  627.589935][T27307]                      _raw_write_lock_irq+0x36/0x50
[  627.596619][T27307]                      __f_setown+0x61/0x3c0
[  627.602588][T27307]                      f_setown+0x122/0x290
[  627.608480][T27307]                      do_fcntl+0xfa6/0x15a0
[  627.614455][T27307]                      __x64_sys_fcntl+0x163/0x200
[  627.620940][T27307]                      do_syscall_64+0xcd/0x4c0
[  627.627159][T27307]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.634767][T27307]     INITIAL READ USE at:
[  627.639161][T27307]                           lock_acquire+0x179/0x350
[  627.645818][T27307]                           _raw_read_lock_irq+0x67/0x80
[  627.652848][T27307]                           f_getown+0x57/0x300
[  627.659087][T27307]                           do_fcntl+0xf5f/0x15a0
[  627.665497][T27307]                           __x64_sys_fcntl+0x163/0x200
[  627.672415][T27307]                           do_syscall_64+0xcd/0x4c0
[  627.679065][T27307]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.687106][T27307]   }
[  627.689670][T27307]   ... key      at: [<ffffffff9ae8c2e0>] __key.1+0x0/0x40
[  627.696847][T27307]   ... acquired at:
[  627.700709][T27307]    _raw_read_lock_irqsave+0x74/0x90
[  627.706064][T27307]    send_sigio+0x31/0x3e0
[  627.710458][T27307]    kill_fasync+0x214/0x510
[  627.715029][T27307]    sock_wake_async+0x132/0x160
[  627.719950][T27307]    unix_release_sock+0xc0d/0x14f0
[  627.725123][T27307]    unix_release+0x91/0xf0
[  627.729598][T27307]    __sock_release+0xb0/0x270
[  627.734335][T27307]    sock_close+0x1c/0x30
[  627.738636][T27307]    __fput+0x3ff/0xb70
[  627.742769][T27307]    task_work_run+0x150/0x240
[  627.747509][T27307]    exit_to_user_mode_loop+0xeb/0x110
[  627.752942][T27307]    do_syscall_64+0x3f6/0x4c0
[  627.757684][T27307]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.763723][T27307] 
[  627.766020][T27307] -> (&new->fa_lock){....}-{3:3} {
[  627.771120][T27307]    INITIAL USE at:
[  627.774986][T27307]                    lock_acquire+0x179/0x350
[  627.781034][T27307]                    _raw_write_lock_irq+0x36/0x50
[  627.787517][T27307]                    fasync_remove_entry+0xb2/0x1e0
[  627.794085][T27307]                    fasync_helper+0xaf/0xd0
[  627.800047][T27307]                    snd_fasync_helper+0xdd/0x250
[  627.806442][T27307]                    __fput+0x968/0xb70
[  627.811968][T27307]                    fput_close_sync+0x118/0x210
[  627.818273][T27307]                    __x64_sys_close+0x8b/0x120
[  627.824492][T27307]                    do_syscall_64+0xcd/0x4c0
[  627.830534][T27307]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.837964][T27307]    INITIAL READ USE at:
[  627.842266][T27307]                         lock_acquire+0x179/0x350
[  627.848750][T27307]                         _raw_read_lock_irqsave+0x74/0x90
[  627.855927][T27307]                         kill_fasync+0x138/0x510
[  627.862334][T27307]                         sock_wake_async+0x132/0x160
[  627.869072][T27307]                         unix_release_sock+0xc0d/0x14f0
[  627.876069][T27307]                         unix_release+0x91/0xf0
[  627.882371][T27307]                         __sock_release+0xb0/0x270
[  627.888932][T27307]                         sock_close+0x1c/0x30
[  627.895059][T27307]                         __fput+0x3ff/0xb70
[  627.901024][T27307]                         task_work_run+0x150/0x240
[  627.907589][T27307]                         exit_to_user_mode_loop+0xeb/0x110
[  627.914854][T27307]                         do_syscall_64+0x3f6/0x4c0
[  627.921415][T27307]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.929284][T27307]  }
[  627.932552][T27307]  ... key      at: [<ffffffff9ae8c2a0>] __key.0+0x0/0x40
[  627.939635][T27307]  ... acquired at:
[  627.943410][T27307]    lock_acquire+0x179/0x350
[  627.948068][T27307]    _raw_read_lock_irqsave+0x74/0x90
[  627.953422][T27307]    kill_fasync+0x138/0x510
[  627.957993][T27307]    evdev_pass_values+0x619/0x9b0
[  627.963081][T27307]    evdev_events+0x1bb/0x390
[  627.967736][T27307]    input_pass_values+0x74e/0x880
[  627.972827][T27307]    input_handle_event+0xf00/0x14d0
[  627.978089][T27307]    input_inject_event+0x1e8/0x3b0
[  627.983264][T27307]    evdev_write+0x457/0x750
[  627.987833][T27307]    vfs_write+0x29d/0x11d0
[  627.992310][T27307]    ksys_write+0x1f8/0x250
[  627.996784][T27307]    do_syscall_64+0xcd/0x4c0
[  628.001436][T27307]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.007480][T27307] 
[  628.009777][T27307] 
[  628.009777][T27307] stack backtrace:
[  628.015639][T27307] CPU: 1 UID: 0 PID: 27307 Comm: syz.9.9104 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[  628.015658][T27307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  628.015668][T27307] Call Trace:
[  628.015673][T27307]  <TASK>
[  628.015684][T27307]  dump_stack_lvl+0x116/0x1f0
[  628.015700][T27307]  check_irq_usage+0x7dc/0x920
[  628.015720][T27307]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  628.015740][T27307]  ? check_path.constprop.0+0x24/0x50
[  628.015761][T27307]  ? __lock_acquire+0x12bc/0x1ce0
[  628.015781][T27307]  __lock_acquire+0x12bc/0x1ce0
[  628.015804][T27307]  lock_acquire+0x179/0x350
[  628.015824][T27307]  ? kill_fasync+0x138/0x510
[  628.015846][T27307]  _raw_read_lock_irqsave+0x74/0x90
[  628.015867][T27307]  ? kill_fasync+0x138/0x510
[  628.015884][T27307]  kill_fasync+0x138/0x510
[  628.015903][T27307]  evdev_pass_values+0x619/0x9b0
[  628.015924][T27307]  evdev_events+0x1bb/0x390
[  628.015941][T27307]  input_pass_values+0x74e/0x880
[  628.015960][T27307]  input_handle_event+0xf00/0x14d0
[  628.015978][T27307]  ? _copy_from_user+0x59/0xd0
[  628.015998][T27307]  input_inject_event+0x1e8/0x3b0
[  628.016017][T27307]  evdev_write+0x457/0x750
[  628.016036][T27307]  ? __pfx_evdev_write+0x10/0x10
[  628.016054][T27307]  ? bpf_lsm_file_permission+0x9/0x10
[  628.016072][T27307]  ? security_file_permission+0x71/0x210
[  628.016093][T27307]  ? rw_verify_area+0xcf/0x6c0
[  628.016114][T27307]  ? __pfx_evdev_write+0x10/0x10
[  628.016131][T27307]  vfs_write+0x29d/0x11d0
[  628.016146][T27307]  ? __pfx_vfs_write+0x10/0x10
[  628.016158][T27307]  ? find_held_lock+0x2b/0x80
[  628.016174][T27307]  ? __fget_files+0x204/0x3c0
[  628.016190][T27307]  ? __fget_files+0x20e/0x3c0
[  628.016206][T27307]  ksys_write+0x1f8/0x250
[  628.016219][T27307]  ? __pfx_ksys_write+0x10/0x10
[  628.016235][T27307]  do_syscall_64+0xcd/0x4c0
[  628.016250][T27307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.016265][T27307] RIP: 0033:0x7fa7b7b8ebe9
[  628.016277][T27307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  628.016291][T27307] RSP: 002b:00007fa7b8a4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  628.016305][T27307] RAX: ffffffffffffffda RBX: 00007fa7b7db5fa0 RCX: 00007fa7b7b8ebe9
[  628.016314][T27307] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[  628.016323][T27307] RBP: 00007fa7b7c11e19 R08: 0000000000000000 R09: 0000000000000000
[  628.016332][T27307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.016340][T27307] R13: 00007fa7b7db6038 R14: 00007fa7b7db5fa0 R15: 00007ffd8ad8aec8
[  628.016354][T27307]  </TASK>
[  628.319085][T13000] usb 6-1: USB disconnect, device number 103
[  634.096102][T16953] usb 10-1: [UEAGLE-ATM] firmware is not available