last executing test programs: 2m54.524279985s ago: executing program 3 (id=1386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x125400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) setgroups(0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24939ed44aec57f2e2ad218a7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x250}, {r5, 0x4050}], 0x2, 0xffffffb3) 2m52.737838925s ago: executing program 3 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m51.021354162s ago: executing program 3 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x5) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000180)=0x7fffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1ac1026, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 2m50.175947617s ago: executing program 3 (id=1398): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 2m45.744361261s ago: executing program 3 (id=1400): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000100000850000005000000095000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m45.51975031s ago: executing program 3 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0xfe33) syz_usb_connect(0x1, 0x2d5, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xb9, 0xc, 0x1b, 0xff, 0x5050, 0x100, 0x55f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c3, 0x2, 0xde, 0x1, 0x0, 0xbd, [{{0x9, 0x4, 0xd4, 0xf, 0x6, 0x5c, 0x84, 0x7d, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "51f648b1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1d, 0xda34, 0x3, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0xd4176c6b5ac5e362}, [@mdlm={0x15, 0x24, 0x12, 0x1ff}, @mdlm_detail={0x1d, 0x24, 0x13, 0x7f, "b64baf0847f3453f42fabafc90c51a828ce50da8e11b72fac2"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x81, 0x11, 0x9e, [@generic={0x10, 0x3, "5b7912c2e2f72d9f883078f3644e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xa}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x1, 0x12}}, {{0x9, 0x5, 0x4, 0x10, 0x210, 0x4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x7f}, @generic={0x42, 0x22, "a5006f3a36247154730f32cf58f42d3849434eb06b92c0ba6e2c455138218133510c3a17bb4848ffc6e15184661f7d2477ad9ec5fcbb44476f2b717256aed4eb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x50, 0x6, 0xb, 0x28}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x8, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x3, 0x2a, 0xf, 0xb1, 0xd1, 0x81, 0x3, [@hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xb40}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xc, 0x8d}, @as_header={0x7, 0x24, 0x1, 0x8, 0xc, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9a, 0x1, 0x4, 0xe}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0xdd, 0xa, 0x3, [@generic={0xb8, 0x22, "46872a7a59828bed87e08d894fa33b4b9bf270dfe590e62c8e3d4e78f2bb3c38efd8c98dfa59d2ee8fdf29b119ddf2b64bfb90ae4d487a5edf8226eac8d83ba013296641ec34d34703df713df800f4d6887457c06a8aa8081e549d69fa93bff3f0a8c9e18dc120a58386e8d657b0b72ab344a0e0464f89680140f12e42e446388b5f5f229d8718527189f139065da30b0856fbbbe86ce788c676f9b5bf065b473259a5e401e91b2d7506e0f28524699a80b3bfdf94ea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffd}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xb5b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0xa, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x6, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x8c, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}, @generic={0x20, 0x8, "b5489aa0478f653d1e25cc19d6d22e58f4f194b4185577f62020c82204f5"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x30, 0x3, 0x3, 0xa9}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x7f, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xf2, 0xfa, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xd, 0xd, 0x7}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x6b, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x1, 0xd, 0x7f}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x81, 0x7, [@generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xc, 0x10, 0x2}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x9, 0x2, 0x10, 0xff}, 0xbf, &(0x7f0000000300)={0x5, 0xf, 0xbf, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf4, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xa, 0x185a}, @generic={0x81, 0x10, 0xa, "822844a97b86c1cc38b8985821068f7587d82a6ef7aabb397f6e8b5d6928159cae2f8fb3af2a03d4debc415f5e62e9cef67262cc6137d26526a6c6ffc7202fd216c8bdedfe0c47936473af881af2bee992e4985fef81ac670367ecb703581cff8e6e95271e1c72cb043556728d23667be694e4d4d90bbb2e189aa14786ee"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "2cf9e7437de662d3faa7ccbbf8b01fef"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "75c8fd3bec8a78605e3dddc1c580ffc7"}]}, 0x2, [{0xb, &(0x7f0000000140)=@string={0xb, 0x3, "92a205e7f6c349bfa2"}}, {0x2, &(0x7f0000000400)=@string={0x2}}]}) 2m30.176521574s ago: executing program 32 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0xfe33) syz_usb_connect(0x1, 0x2d5, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xb9, 0xc, 0x1b, 0xff, 0x5050, 0x100, 0x55f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c3, 0x2, 0xde, 0x1, 0x0, 0xbd, [{{0x9, 0x4, 0xd4, 0xf, 0x6, 0x5c, 0x84, 0x7d, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "51f648b1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1d, 0xda34, 0x3, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0xd4176c6b5ac5e362}, [@mdlm={0x15, 0x24, 0x12, 0x1ff}, @mdlm_detail={0x1d, 0x24, 0x13, 0x7f, "b64baf0847f3453f42fabafc90c51a828ce50da8e11b72fac2"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x81, 0x11, 0x9e, [@generic={0x10, 0x3, "5b7912c2e2f72d9f883078f3644e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xa}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x1, 0x12}}, {{0x9, 0x5, 0x4, 0x10, 0x210, 0x4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x7f}, @generic={0x42, 0x22, "a5006f3a36247154730f32cf58f42d3849434eb06b92c0ba6e2c455138218133510c3a17bb4848ffc6e15184661f7d2477ad9ec5fcbb44476f2b717256aed4eb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x50, 0x6, 0xb, 0x28}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x8, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x3, 0x2a, 0xf, 0xb1, 0xd1, 0x81, 0x3, [@hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xb40}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xc, 0x8d}, @as_header={0x7, 0x24, 0x1, 0x8, 0xc, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9a, 0x1, 0x4, 0xe}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0xdd, 0xa, 0x3, [@generic={0xb8, 0x22, "46872a7a59828bed87e08d894fa33b4b9bf270dfe590e62c8e3d4e78f2bb3c38efd8c98dfa59d2ee8fdf29b119ddf2b64bfb90ae4d487a5edf8226eac8d83ba013296641ec34d34703df713df800f4d6887457c06a8aa8081e549d69fa93bff3f0a8c9e18dc120a58386e8d657b0b72ab344a0e0464f89680140f12e42e446388b5f5f229d8718527189f139065da30b0856fbbbe86ce788c676f9b5bf065b473259a5e401e91b2d7506e0f28524699a80b3bfdf94ea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffd}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xb5b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0xa, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x6, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x8c, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}, @generic={0x20, 0x8, "b5489aa0478f653d1e25cc19d6d22e58f4f194b4185577f62020c82204f5"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x30, 0x3, 0x3, 0xa9}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x7f, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xf2, 0xfa, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xd, 0xd, 0x7}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x6b, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x1, 0xd, 0x7f}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x81, 0x7, [@generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xc, 0x10, 0x2}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x9, 0x2, 0x10, 0xff}, 0xbf, &(0x7f0000000300)={0x5, 0xf, 0xbf, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf4, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xa, 0x185a}, @generic={0x81, 0x10, 0xa, "822844a97b86c1cc38b8985821068f7587d82a6ef7aabb397f6e8b5d6928159cae2f8fb3af2a03d4debc415f5e62e9cef67262cc6137d26526a6c6ffc7202fd216c8bdedfe0c47936473af881af2bee992e4985fef81ac670367ecb703581cff8e6e95271e1c72cb043556728d23667be694e4d4d90bbb2e189aa14786ee"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "2cf9e7437de662d3faa7ccbbf8b01fef"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "75c8fd3bec8a78605e3dddc1c580ffc7"}]}, 0x2, [{0xb, &(0x7f0000000140)=@string={0xb, 0x3, "92a205e7f6c349bfa2"}}, {0x2, &(0x7f0000000400)=@string={0x2}}]}) 16.292163034s ago: executing program 4 (id=1611): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 16.290778346s ago: executing program 0 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r1, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4a", 0x35}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3", 0xb0}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c62dc", 0x95}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 15.912658723s ago: executing program 0 (id=1613): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x4091, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@verity_off}, {@uuid_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)) sendmmsg$inet6(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)="5fb95398ddfdf6e682fc507343b23689872fd13164c38f8b7bce338c6715c882447f9f0189d18fe7741b0546fecf11296a7c65688b9140e70e69f8d0bc11fcae715843a26c8ffa9448a3aca04e431f8920be7fe0ec5ba4d6991bf2978b0b9b356a6b896e7882002cf152229ecfad8038fd839ef3ab1d0185347295474f748d1b42510709ae680a0663e62a55efdd91ee18cefe0dff7802701277a54213b871597bba3448d73d0ab7", 0xa8}, {&(0x7f00000001c0)="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", 0x45d}], 0x2}}], 0x2, 0x4001c00) 14.207114686s ago: executing program 0 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 12.200356292s ago: executing program 0 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0xff}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 11.069657386s ago: executing program 4 (id=1621): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x4, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4a", 0x35}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3", 0xb0}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c62dc", 0x95}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 10.360223648s ago: executing program 4 (id=1624): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) syz_io_uring_setup(0x9ee, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x37}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) 10.029219016s ago: executing program 2 (id=1625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) ioperm(0x7, 0x81, 0x2) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r4, 0x5452, 0x0) 9.560543917s ago: executing program 1 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 9.111865127s ago: executing program 1 (id=1627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.925621717s ago: executing program 4 (id=1628): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000e8a200000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x40}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8.597066674s ago: executing program 2 (id=1629): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x40001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 7.635325172s ago: executing program 4 (id=1630): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.457288969s ago: executing program 0 (id=1631): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700"], 0xb8}}, 0x20050800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x11) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000e4feffdd600000000000000000000000ff02000000000000000000000000000100004e2200649078020020000300000003000000ce75713e1f83ac361c8b3ce671d0f6040eeeb5f3d601800000000000006f30e9f78c045a5d3e3dd45207daba0bf8fb0546332511a8e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d0000"], 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$AUDIT_GET(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a300000000008000340000000011400"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000175c0)=@deltfilter={0x554, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xfff3}, {0x7, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x3}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4f8, 0x2, [@TCA_BASIC_POLICE={0x46c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffff8f, 0x1, 0x9, 0x2, 0x1a0, {0x6, 0x1, 0x9a4, 0xd, 0x2, 0x800}, {0xe, 0x1, 0x8000, 0xa6, 0x3, 0x2}, 0x49, 0xff, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdb6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x7, 0x0, 0x6, 0x3ff, 0x6, 0x5, 0xf, 0x5, 0x3, 0x0, 0x9, 0x2, 0x2, 0x200, 0x0, 0x4, 0x6, 0x6, 0x6, 0x7, 0x7fff, 0x5, 0x4, 0x2, 0x0, 0x7fffffff, 0x2, 0x5, 0x6, 0x37, 0x9, 0x80, 0xe3, 0x1, 0x4, 0x6, 0x6, 0x2, 0x200, 0x8, 0x8d, 0x7, 0x9, 0x8, 0x0, 0x2, 0xff, 0x3, 0x0, 0x8, 0x9d26, 0x19, 0xf, 0x3, 0x0, 0xf, 0x7fffffff, 0x6, 0x5, 0x7, 0xffffffff, 0x1, 0x7, 0x5, 0xc, 0xff, 0x5, 0x4, 0x20000, 0x1245, 0x3, 0x7e9, 0x9, 0xb6, 0x2, 0x1, 0xfdc, 0x7, 0xe, 0x2, 0xd, 0x794, 0x55, 0x9, 0x2, 0x1f9d80f7, 0x8000, 0x9, 0x4, 0xa4, 0x2, 0x72cf, 0x3a, 0xfffffffe, 0xaa44, 0x0, 0x2, 0x8, 0x7, 0xffffcb99, 0x8, 0x84, 0x0, 0x5, 0x8, 0xfffffffe, 0x0, 0x8, 0x4, 0x6, 0x6, 0x9, 0x1874, 0xffffffff, 0x3ff, 0x5, 0x1000, 0x2, 0x1fa0, 0x4, 0x3, 0x1, 0xe1f2, 0x1, 0x9, 0x1, 0xc955, 0x1, 0x1, 0x1ff, 0x1, 0x7, 0x2, 0x9, 0x7bca, 0x7f, 0x2, 0xfff, 0x5fc, 0x5, 0x8, 0xcc9, 0x7fff, 0x200, 0x81, 0x8, 0x4, 0x2, 0x100, 0x55b, 0x6, 0xfffffffe, 0x9, 0x0, 0x80000001, 0x7, 0xffffff81, 0x0, 0x1, 0x9, 0x1, 0x9, 0x1, 0xad9, 0x1, 0x100, 0x3, 0x8, 0x2, 0x3, 0xc, 0x7, 0xb, 0xf, 0x1, 0xfffffff9, 0x2, 0x6, 0x1436, 0x0, 0xb9, 0x0, 0xe, 0x7c, 0x3, 0xffff, 0x3, 0x6, 0x0, 0x1, 0x4, 0xfffffff7, 0x2, 0x6a8f, 0xff, 0x9e37, 0x9, 0xfffffffc, 0x0, 0xde6, 0x8, 0x9, 0x81, 0xff, 0x2, 0x100, 0x7fffffff, 0x6, 0x1, 0x7fffffff, 0x200, 0x8, 0x5, 0x3, 0x7fffffff, 0x8, 0x6, 0x2, 0xa8f, 0x7fff, 0x2, 0x8001, 0x665, 0x1, 0x1, 0x8, 0x3, 0x7, 0xe90, 0x0, 0xffffffff, 0x8001, 0x866, 0x7, 0x7, 0x7, 0x800, 0x5, 0x9, 0x5, 0x8, 0x10, 0x50d, 0xa6e, 0x2, 0x306, 0x80, 0x0, 0x9, 0x0, 0x8, 0x6, 0xfffffffc, 0xb, 0xd]}]}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xd9aecf52a8fbc3c6, 0x76, 0xffffffff, 0x5, {0x18, 0x1, 0x2, 0x3ff, 0x0, 0x952f}, {0x3, 0x1, 0x4000, 0xd9}, 0x3ff, 0xfffff3c2, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000010280)=ANY=[@ANYBLOB="440000001800010036bd7000fbdbdf251d0104001500020004000000000200001f4f97165a29c414040000001500040002000060000000d68c4050bcec6df6cbbcc8cfd900d93beb66d08f8c5d06000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x4008000) 7.424897537s ago: executing program 2 (id=1632): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x2082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x40050) socket$unix(0x1, 0x1, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0xffffbdfe) r6 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d) close_range(r0, 0xffffffffffffffff, 0x0) 5.336257793s ago: executing program 2 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r1, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4a", 0x35}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3", 0xb0}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c62dc", 0x95}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 5.093332279s ago: executing program 0 (id=1634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x2, 0x3, 0x2, 0x2}, {0x1, 0x1, 0x5, 0x7}, {0x9, 0x9, 0xf8, 0x4}]}) r1 = socket$kcm(0x10, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) write$cgroup_subtree(r1, 0x0, 0xfe33) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x18, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x1, 0x6, 0x9, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe904}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.012803881s ago: executing program 2 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.965543648s ago: executing program 2 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x134, r4, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7e9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0xe8, 0x200, 0x7, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, 0x2]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1b3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd4, 0xac, "25c6ae550dc9c41eb4af12e78395c9c236cf5b0375cbcb1c432e8a65f4bd6b8a2d1cb570ec4c2c577ba170d9260a8f4e843069a6a968f2ebc7dca82c4c8ec7ffb44005edddd33cf66faba282ade37ae1766849dc6e708fef3f278a73a567a049bc884a001d88b6465c962b8a7c73609fafb9cd757b34333e32268ccc014ee6da133e71c740dd525824b1735249ce4412f897398a62ba3037aadcabab0b686fced16f26445e25abaf55289b335d50bb29b4d2c01f86ef86713bdb147b06b5dddb9e332f39bcf06965c42be3f27c2375a9"}]}, 0x134}, 0x1, 0x0, 0x0, 0x44000}, 0x5) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00000000180000000000000084000000070000000a0101020000000018000000000000008400000007000000ac1414000000000084afc5476f2ede47d1b5"], 0x48}], 0x1, 0x0) 3.799031109s ago: executing program 1 (id=1637): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1) 3.233821607s ago: executing program 4 (id=1638): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000012000000080009000000000018000180140002006e"], 0x34}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5206, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.475170454s ago: executing program 1 (id=1639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 1.18848669s ago: executing program 1 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x40}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r8, 0x0, 0x0, 0xf00) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x1) userfaultfd(0x801) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 1 (id=1641): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000e8a200000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x40}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=0 [ 491.880563][ T5804] usb 2-1: config 0 descriptor?? [ 492.230265][ T5804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 492.230301][ T5804] dvb-usb: bulk message failed: -22 (3/0) [ 492.251375][ T5804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 492.255387][ T5804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.255438][ T5804] usb 2-1: media controller created [ 492.257910][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.337071][ T5804] dvb-usb: bulk message failed: -22 (6/0) [ 492.337153][ T5804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.360356][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 492.362488][ T5804] dvb-usb: schedule remote query interval to 150 msecs. [ 492.362499][ T5804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.421201][ T9124] dvb-usb: bulk message failed: -22 (2/0) [ 492.422640][ T993] usb 2-1: USB disconnect, device number 19 [ 492.661740][ T993] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.978206][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 493.107282][ T9147] overlayfs: failed to resolve './file1': -2 [ 493.130231][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 493.134283][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.134307][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.134329][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.134349][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.134389][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 493.134408][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.451119][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 493.451149][ T9] usbtmc 5-1:16.0: can't read capabilities [ 493.849464][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.401477][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.535954][ T9163] sch_fq: defrate 4294967295 ignored. [ 494.723054][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.243494][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.701919][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.803602][ T993] usb 5-1: USB disconnect, device number 24 [ 496.865947][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.148470][ T5804] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 499.551288][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.551304][ T5804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 499.551348][ T5804] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 499.551360][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.605119][ T5804] usb 5-1: config 0 descriptor?? [ 499.777304][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.814597][ T5804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 499.814647][ T5804] dvb-usb: bulk message failed: -22 (3/0) [ 500.847572][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.874350][ T5804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 500.886930][ T5804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 500.886965][ T5804] usb 5-1: media controller created [ 500.900713][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.363120][ T5804] dvb-usb: bulk message failed: -22 (6/0) [ 501.363168][ T5804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 501.385411][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 501.421450][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.421491][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.431577][ T5804] dvb-usb: schedule remote query interval to 150 msecs. [ 501.431590][ T5804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 501.456598][ T5804] usb 5-1: USB disconnect, device number 25 [ 501.766808][ T5804] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 502.018782][ T9220] overlayfs: failed to resolve './file1': -2 [ 502.251051][ T5804] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 502.418289][ T5804] usb 5-1: Using ep0 maxpacket: 8 [ 502.421904][ T5804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.421927][ T5804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.421950][ T5804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.421970][ T5804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.422008][ T5804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 502.422028][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.793368][ T5804] usb 5-1: GET_CAPABILITIES returned 0 [ 502.793414][ T5804] usbtmc 5-1:16.0: can't read capabilities [ 504.776971][ T5856] usb 5-1: USB disconnect, device number 26 [ 505.121306][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.883812][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.011429][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.012961][ T9259] sch_fq: defrate 4294967295 ignored. [ 507.197275][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.381923][ T9264] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 507.387401][ T9264] hub 9-0:1.0: USB hub found [ 507.387730][ T9264] hub 9-0:1.0: 1 port detected [ 507.932270][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.097889][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 508.591690][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.139948][ T9285] overlayfs: failed to resolve './file1': -2 [ 510.468247][ T5885] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 510.619773][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 510.624817][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.624832][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.624844][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.624855][ T5885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.624877][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.624888][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.861850][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.992688][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.161387][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.300826][ T9301] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 511.300902][ T9301] ref_ctr increment failed for inode: 0x40f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880394bdc00 [ 511.311088][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.346598][ T37] kauditd_printk_skb: 126 callbacks suppressed [ 511.346641][ T37] audit: type=1804 audit(1761395390.442:1167): pid=9301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.972" name="/newroot/192/file0" dev="tmpfs" ino=1039 res=1 errno=0 [ 511.656713][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.720646][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.735989][ T5885] usb 2-1: GET_CAPABILITIES returned 0 [ 511.736017][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 511.900780][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 512.448654][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.576434][ T9313] sch_fq: defrate 4294967295 ignored. [ 512.722556][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.870473][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.263833][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.413328][ T5878] usb 2-1: USB disconnect, device number 20 [ 514.018351][ T9322] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 514.889189][ T9328] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 516.445594][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.721887][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.264360][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.761979][ T9354] sch_fq: defrate 4294967295 ignored. [ 518.538251][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.758863][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.231094][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.344372][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.452532][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.502227][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.546163][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.914011][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.047611][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.898533][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.655882][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.441100][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.651305][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.734990][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.785321][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.853828][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.004210][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.173095][ T9409] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 525.578310][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.672452][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.758195][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.282643][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.498212][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.576928][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.671442][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.830591][ T9428] tipc: Started in network mode [ 527.830614][ T9428] tipc: Node identity 4, cluster identity 4711 [ 527.830621][ T9428] tipc: Node number set to 4 [ 528.264050][ T37] audit: type=1326 audit(1761395407.412:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.298465][ T37] audit: type=1326 audit(1761395407.412:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.298513][ T37] audit: type=1326 audit(1761395407.452:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.323735][ T37] audit: type=1326 audit(1761395407.472:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.325701][ T37] audit: type=1326 audit(1761395407.472:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.325743][ T37] audit: type=1326 audit(1761395407.472:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.325782][ T37] audit: type=1326 audit(1761395407.472:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.327773][ T37] audit: type=1326 audit(1761395407.472:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.331282][ T37] audit: type=1326 audit(1761395407.482:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.331685][ T37] audit: type=1326 audit(1761395407.482:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9430 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8affefc9 code=0x7ffc0000 [ 528.535566][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.526056][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.680867][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.432109][ T9445] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 531.458345][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.679525][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.768271][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.910971][ T9455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.911059][ T9455] IPv6: NLM_F_CREATE should be set when creating new route [ 531.911077][ T9455] IPv6: NLM_F_CREATE should be set when creating new route [ 531.913346][ T9455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.913487][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 531.913497][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 533.128953][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.457032][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.536678][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.627219][ T9482] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 533.627242][ T9482] ref_ctr increment failed for inode: 0x44f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880348bc500 [ 533.631715][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.170691][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.208322][ T37] kauditd_printk_skb: 123 callbacks suppressed [ 534.208339][ T37] audit: type=1804 audit(1761395412.772:1301): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1027" name="/newroot/204/file0" dev="tmpfs" ino=1103 res=1 errno=0 [ 534.908626][ T37] audit: type=1326 audit(1761395414.052:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 534.908675][ T37] audit: type=1326 audit(1761395414.062:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 534.915360][ T37] audit: type=1326 audit(1761395414.062:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.035604][ T37] audit: type=1326 audit(1761395414.062:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.037900][ T37] audit: type=1326 audit(1761395414.182:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.037944][ T37] audit: type=1326 audit(1761395414.182:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.037990][ T37] audit: type=1326 audit(1761395414.182:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.062673][ T37] audit: type=1326 audit(1761395414.212:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.062717][ T37] audit: type=1326 audit(1761395414.212:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5b1efc9 code=0x7ffc0000 [ 535.246057][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.199036][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.649512][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.816633][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.253105][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.438560][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.238316][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 539.386860][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.477574][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 539.692489][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.115120][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.169221][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.169248][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.169271][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.169292][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.169331][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.169351][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.219432][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.670345][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.722745][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.869949][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.028214][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 541.028258][ T9] usbtmc 5-1:16.0: can't read capabilities [ 541.330491][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.393198][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.488545][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.601591][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.643533][ T10] usb 5-1: USB disconnect, device number 27 [ 542.121467][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.128428][ T9532] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 542.136555][ T9532] hub 9-0:1.0: USB hub found [ 542.148237][ T9532] hub 9-0:1.0: 1 port detected [ 543.960134][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.330746][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.994889][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.402503][ T9550] loop2: detected capacity change from 0 to 7 [ 545.415172][ T9550] Dev loop2: unable to read RDB block 7 [ 545.415200][ T9550] loop2: unable to read partition table [ 545.415332][ T9550] loop2: partition table beyond EOD, truncated [ 545.415354][ T9550] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.457381][ T5804] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 545.642859][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 545.646699][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.646712][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.649735][ T5804] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.649750][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.649760][ T5804] usb 4-1: Product: syz [ 545.649767][ T5804] usb 4-1: Manufacturer: syz [ 545.649774][ T5804] usb 4-1: SerialNumber: syz [ 545.977011][ T9562] overlayfs: missing 'lowerdir' [ 546.578316][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.904647][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.102951][ T993] usb 4-1: USB disconnect, device number 18 [ 547.981622][ T9574] l2tp_ppp: sess 2/0: no socket in recv [ 549.696128][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.333199][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.528978][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.565009][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.828197][ T5878] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 551.164528][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 551.166622][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.166646][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.166666][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.166685][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.166721][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.166739][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.120645][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.312056][ T5878] usb 3-1: GET_CAPABILITIES returned 0 [ 552.312108][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 552.601157][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.601491][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.601574][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.601651][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.601997][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.602068][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.602138][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.602449][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.602522][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.602591][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.604506][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.605320][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.605393][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.605686][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.605757][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.605825][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.606021][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.726045][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 552.931318][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 553.288220][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 553.291581][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.291603][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.401547][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.423473][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.423499][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.423517][ T5878] usb 2-1: Product: syz [ 553.423529][ T5878] usb 2-1: Manufacturer: syz [ 553.423541][ T5878] usb 2-1: SerialNumber: syz [ 553.478329][ T5936] usb 3-1: USB disconnect, device number 25 [ 553.693277][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.761606][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.263748][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.431449][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.479518][ T993] usb 2-1: USB disconnect, device number 21 [ 555.761139][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.873609][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.949574][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 556.960413][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.238248][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.639559][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.547617][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.002654][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.088511][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 559.240917][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 559.243321][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.243346][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.243367][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.243388][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.243426][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.243446][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.254033][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.650647][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 559.879862][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 559.939443][ T9655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.939483][ T9655] IPv6: NLM_F_CREATE should be set when creating new route [ 559.939516][ T9655] IPv6: NLM_F_CREATE should be set when creating new route [ 559.939900][ T9655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.940164][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 559.940178][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 560.058718][ T9] usb 2-1: USB disconnect, device number 22 [ 560.244665][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.122029][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.236168][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.318544][ T5878] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 561.484772][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.484798][ T5878] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.484847][ T5878] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.484868][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.496514][ T5878] usb 4-1: config 0 descriptor?? [ 561.503112][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 561.503155][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 561.519957][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 561.538736][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 561.538789][ T5878] usb 4-1: media controller created [ 561.541115][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.546107][ T5936] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 561.593937][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 561.594022][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 561.596839][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 561.624853][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 561.624871][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 561.839673][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 561.856519][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.856541][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.857654][ T9653] dvb-usb: bulk message failed: -22 (48/0) [ 561.866884][ T5936] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.866909][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.866926][ T5936] usb 3-1: Product: syz [ 561.866937][ T5936] usb 3-1: Manufacturer: syz [ 561.866950][ T5936] usb 3-1: SerialNumber: syz [ 562.753979][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.829105][ T5804] dvb-usb: bulk message failed: -22 (1/0) [ 562.829144][ T5804] dvb-usb: error while querying for an remote control event. [ 562.848465][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.848526][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.851999][ T5878] usb 4-1: USB disconnect, device number 19 [ 563.008273][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 563.008303][ T44] dvb-usb: error while querying for an remote control event. [ 563.539634][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.630002][ T9684] overlayfs: missing 'lowerdir' [ 564.040930][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 564.151946][ T9] usb 3-1: USB disconnect, device number 26 [ 564.263756][ T9691] Invalid source name [ 564.666256][ T5936] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 564.693415][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.818991][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 564.820895][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.397623][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.492124][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 565.496428][ T5936] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 565.496452][ T5936] usb 5-1: config 0 has no interface number 0 [ 565.499739][ T5936] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 565.499764][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.499781][ T5936] usb 5-1: Product: syz [ 565.499793][ T5936] usb 5-1: Manufacturer: syz [ 565.499805][ T5936] usb 5-1: SerialNumber: syz [ 565.507546][ T5936] usb 5-1: config 0 descriptor?? [ 565.729068][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.058272][ T5878] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 566.316668][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.472620][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.760639][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.187556][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.358253][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 567.364620][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.364635][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.364647][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.364662][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.364684][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.364730][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.883564][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 567.883593][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 568.033456][ T5936] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 568.033516][ T5936] uvcvideo 5-1:0.31: No valid video chain found. [ 568.066565][ T5936] usb 5-1: USB disconnect, device number 28 [ 568.151150][ T5984] usb 2-1: USB disconnect, device number 23 [ 569.593617][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.670459][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.760023][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.761357][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.994568][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.650239][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.490075][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.956785][ T993] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 574.120813][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 574.281761][ T993] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 574.281786][ T993] usb 4-1: config 0 has no interface number 0 [ 574.293323][ T993] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 574.293349][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.293366][ T993] usb 4-1: Product: syz [ 574.293379][ T993] usb 4-1: Manufacturer: syz [ 574.293391][ T993] usb 4-1: SerialNumber: syz [ 574.349312][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 574.362404][ T993] usb 4-1: config 0 descriptor?? [ 574.411699][ T6117] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.412029][ T6117] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.412075][ T6117] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.412094][ T6117] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.412273][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 574.828202][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.101743][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.761800][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.020820][ T993] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 577.020919][ T993] uvcvideo 4-1:0.31: No valid video chain found. [ 577.024320][ T993] usb 4-1: USB disconnect, device number 20 [ 578.372030][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.176571][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.993543][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.169230][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.327820][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 580.548168][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.815236][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.970673][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.086982][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.180412][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.760211][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.341391][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.548316][ T5936] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 585.700121][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 586.117647][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.954772][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 589.976940][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 589.977165][ T5936] usb 1-1: can't read configurations, error -71 [ 590.793662][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.876165][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.001827][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 591.003473][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.476111][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.619791][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.915277][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.251149][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.871096][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.728218][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.083729][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.248247][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.407191][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.721856][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.580487][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.964808][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.558692][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.257485][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.519643][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.578506][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 599.826126][ T10] usb 3-1: device descriptor read/64, error -71 [ 600.069785][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 600.264873][ T10] usb 3-1: device descriptor read/64, error -71 [ 600.378568][ T10] usb usb3-port1: attempt power cycle [ 600.398136][ T5984] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 600.548159][ T5984] usb 5-1: Using ep0 maxpacket: 8 [ 601.739171][ T10] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 602.743064][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.020443][ T9939] overlayfs: failed to resolve './file1': -2 [ 604.735880][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.839208][ T5984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 604.841560][ T5984] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 604.841714][ T5984] usb 5-1: can't read configurations, error -71 [ 605.124419][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.232520][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.343775][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.452317][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.551620][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.753629][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.231607][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.979301][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.980242][ T10] usb 3-1: device descriptor read/8, error -110 [ 608.564835][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 608.598674][ T10] usb 3-1: device descriptor read/8, error -32 [ 608.708477][ T10] usb usb3-port1: unable to enumerate USB device [ 608.875791][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.964266][ T9959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.964291][ T9959] IPv6: NLM_F_CREATE should be set when creating new route [ 608.964308][ T9959] IPv6: NLM_F_CREATE should be set when creating new route [ 608.964530][ T9959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.964666][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 608.964675][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 609.284701][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.407164][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 609.981666][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.122668][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.269224][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.353652][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.459129][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.663047][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.288251][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.319810][ T9989] overlayfs: failed to resolve './file1': -2 [ 612.418960][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.482698][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.848774][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.498969][T10005] vivid-001: kernel_thread() failed [ 613.697582][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.213348][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.364786][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 615.978605][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.247003][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.802257][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.303798][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.782093][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.040978][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.814565][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.288701][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.380630][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.705221][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.245467][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.004949][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.178884][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.731777][T10068] vivid-000: kernel_thread() failed [ 622.733931][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.820315][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.045789][ T5885] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 624.228708][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 624.544135][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.544209][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.544289][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.544360][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.544616][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.544683][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.748527][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.753711][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.753776][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.862371][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.866739][T10084] overlayfs: failed to resolve './file1': -2 [ 624.944199][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.983094][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.059415][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.111977][ T5885] usb 3-1: GET_CAPABILITIES returned 0 [ 625.112023][ T5885] usbtmc 3-1:16.0: can't read capabilities [ 625.297852][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.358326][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.618236][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.837906][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1192'. [ 625.838690][T10099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 625.841074][T10099] IPv6: NLM_F_CREATE should be set when creating new route [ 625.850465][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.034486][ T10] usb 3-1: USB disconnect, device number 31 [ 627.380538][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.984764][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.797456][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.885996][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.081090][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.388174][ T5878] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 631.678610][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.756828][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.997813][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 632.471697][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 635.298163][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.490262][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.872502][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.876223][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 635.876244][ T5878] usb 2-1: can't read configurations, error -71 [ 636.008437][ T5885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 636.348128][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 636.350570][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.350594][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.350616][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.350637][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.350682][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.350702][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.579552][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.628402][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 636.628432][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 637.250299][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.838742][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.400613][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1208'. [ 638.401355][T10172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.401395][T10172] IPv6: NLM_F_CREATE should be set when creating new route [ 639.299204][ T5878] usb 1-1: USB disconnect, device number 17 [ 639.451077][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.204533][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 640.368099][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 640.370722][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 640.370736][ T10] usb 4-1: config 0 has no interface number 0 [ 640.373272][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 640.373287][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.373296][ T10] usb 4-1: Product: syz [ 640.373303][ T10] usb 4-1: Manufacturer: syz [ 640.373310][ T10] usb 4-1: SerialNumber: syz [ 640.377124][ T10] usb 4-1: config 0 descriptor?? [ 641.319263][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.607852][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.975726][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.144469][T10198] sch_fq: defrate 4294967295 ignored. [ 642.854295][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.062318][ T10] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 643.062401][ T10] uvcvideo 4-1:0.31: No valid video chain found. [ 643.148149][ T10] usb 4-1: USB disconnect, device number 21 [ 643.603959][ T5878] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 643.738218][ T5878] usb 1-1: device descriptor read/64, error -71 [ 643.825867][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.974742][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 643.979398][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.628304][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.708151][ T5878] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 644.823230][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.908240][ T5878] usb 1-1: device descriptor read/64, error -71 [ 645.019912][ T5878] usb usb1-port1: attempt power cycle [ 645.297984][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.524071][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.671485][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.784686][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.021372][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.182288][ T5878] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 646.248165][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 646.398216][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 646.400532][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.400555][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.400606][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.400621][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.400644][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 646.400655][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.693664][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.977419][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.258829][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.460160][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 647.460259][ T44] usbtmc 4-1:16.0: can't read capabilities [ 647.515082][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.922853][ T5885] usb 4-1: USB disconnect, device number 22 [ 649.784083][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.792835][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 649.908846][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.242533][ T5878] usb 1-1: device descriptor read/8, error -110 [ 651.492170][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.719464][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.814686][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.340181][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.556090][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.630605][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.033761][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.155026][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 653.801724][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.972811][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.382149][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.502823][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 655.068257][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.215166][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.845518][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.878747][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.069780][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.103810][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.185145][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.225843][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 656.793466][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.166514][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.971889][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.349673][ T5936] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 658.510586][ T5936] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 658.510672][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 658.510696][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 658.510720][ T5936] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.510758][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 658.510779][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.517404][T10310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 658.544160][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.626754][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 658.636404][ T5936] usb 1-1: invalid MIDI out EP 0 [ 659.131658][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.257287][ T5936] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 659.562342][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.600197][ T5936] usb 1-1: USB disconnect, device number 22 [ 660.256869][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.561571][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 660.641346][ T1490] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.641459][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 660.641625][ T1490] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.642050][ T1490] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.642087][ T1490] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.175233][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.693066][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.764032][T10338] sch_fq: defrate 4294967295 ignored. [ 661.906836][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.973796][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.349601][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.517612][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.696376][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 663.943711][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.628144][ T44] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 664.780169][ T44] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 664.780217][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 664.780230][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 664.780243][ T44] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.780264][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.780275][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.785791][T10364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.858420][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.859029][ T44] usb 2-1: invalid MIDI out EP 0 [ 665.287865][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.991943][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.289460][ T44] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 666.350000][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.386511][ T44] usb 2-1: USB disconnect, device number 26 [ 666.952538][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.788245][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.424263][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.768937][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 668.929586][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 669.117859][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.106229][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.491044][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 673.492088][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 673.492125][ T44] usb 3-1: can't read configurations, error -71 [ 673.691332][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.393612][T10417] overlayfs: failed to resolve './file1': -2 [ 674.588177][ T9004] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 674.741037][ T9004] usb 5-1: Using ep0 maxpacket: 8 [ 674.906040][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.651620][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.878421][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.928840][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.108399][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.140889][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.278139][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 677.287891][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.290789][ T9004] usb 5-1: unable to get BOS descriptor or descriptor too short [ 677.291828][ T9004] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 677.291859][ T9004] usb 5-1: can't read configurations, error -71 [ 677.454158][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.454246][ T5885] usb 1-1: config 0 has no interfaces? [ 677.454638][ T5885] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 677.454787][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.571815][ T5885] usb 1-1: config 0 descriptor?? [ 677.950455][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.951018][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.132359][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.060688][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.312568][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.576286][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.076280][ T5885] usb 1-1: USB disconnect, device number 23 [ 681.468077][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.708104][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.998188][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 682.527335][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.628123][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 683.146421][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.937816][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.608905][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.610125][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 685.632519][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 685.632553][ T9] usb 5-1: can't read configurations, error -71 [ 685.738420][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.080634][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.081009][ T9004] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 686.082963][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.083089][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.348229][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.609279][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.757061][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.032264][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.326014][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.977129][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.327851][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.496729][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.928095][ T5984] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 691.090656][ T5984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.090681][ T5984] usb 1-1: config 0 has no interfaces? [ 691.090709][ T5984] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 691.090729][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.096455][ T5984] usb 1-1: config 0 descriptor?? [ 691.226337][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.301424][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.301954][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.582882][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.259806][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 692.534750][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.658608][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.782315][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.604501][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.605981][ T9004] usb 1-1: USB disconnect, device number 24 [ 693.830284][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.923840][ T5885] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 696.109238][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.418083][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 696.709818][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.003632][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.119491][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.643662][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 697.820428][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.878681][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 698.233335][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.349712][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 701.426924][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.499142][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.512091][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 701.517306][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 701.517327][ T5885] usb 5-1: chopping to 0 config(s) [ 701.517351][ T5885] usb 5-1: can't read configurations, error -32 [ 701.612279][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.613421][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 701.614451][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 701.614484][ T9] usb 1-1: can't read configurations, error -71 [ 703.178385][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.304073][T10600] sch_fq: defrate 4294967295 ignored. [ 703.970895][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.330639][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.420191][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.640788][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.958124][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 705.119644][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.119666][ T9] usb 3-1: config 0 has no interfaces? [ 705.119682][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 705.119693][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.174867][ T9] usb 3-1: config 0 descriptor?? [ 705.552455][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.552756][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.988222][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.049474][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.386482][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.466716][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.514760][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.748820][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.828077][ T9] usb 3-1: USB disconnect, device number 35 [ 709.248166][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 709.510076][ T5804] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 709.528161][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 710.058137][ T5804] usb 2-1: device descriptor read/64, error -71 [ 710.987523][ T5804] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 711.235104][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.308100][ T5804] usb 2-1: device descriptor read/64, error -71 [ 711.418675][ T5804] usb usb2-port1: attempt power cycle [ 711.848296][ T5804] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 712.331087][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 712.332184][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 712.332217][ T9] usb 3-1: can't read configurations, error -71 [ 715.401433][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.526152][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.238479][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.734326][ T5804] usb 2-1: device descriptor read/8, error -110 [ 717.744616][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.198184][ T5804] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 718.238781][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.351558][ T5804] usb 2-1: device descriptor read/8, error -32 [ 718.469410][ T5804] usb usb2-port1: unable to enumerate USB device [ 718.708602][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.806518][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.937538][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.996182][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.365401][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.467446][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 720.495145][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.540871][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.212419][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'. [ 721.252596][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'. [ 721.253419][ T1124] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.255127][ T1124] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.255167][ T1124] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.255200][ T1124] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.842262][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.114691][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.141369][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.318101][T10699] sch_fq: defrate 4294967295 ignored. [ 722.319878][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.859371][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.013854][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.246670][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.080301][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.739988][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.074436][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 726.276549][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.728119][ T9004] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 726.898099][ T9004] usb 2-1: Using ep0 maxpacket: 8 [ 726.901341][ T9004] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.901357][ T9004] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 726.901369][ T9004] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 726.901381][ T9004] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.901402][ T9004] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.901418][ T9004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.213747][ T9004] usb 2-1: GET_CAPABILITIES returned 0 [ 727.213774][ T9004] usbtmc 2-1:16.0: can't read capabilities [ 727.458920][ T5856] usb 2-1: USB disconnect, device number 31 [ 727.811470][ T5878] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 728.158137][ T5878] usb 5-1: device descriptor read/64, error -71 [ 728.408694][ T5878] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 728.720397][ T5878] usb 5-1: device descriptor read/64, error -71 [ 728.828563][ T5878] usb usb5-port1: attempt power cycle [ 728.991526][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.211014][ T5878] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 729.350641][ T5878] usb 5-1: device descriptor read/8, error -71 [ 729.591171][ T5878] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 729.636888][ T5878] usb 5-1: device descriptor read/8, error -71 [ 729.738403][ T5878] usb usb5-port1: unable to enumerate USB device [ 729.851371][T10749] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 731.361119][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.028434][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.189611][T10781] sch_fq: defrate 4294967295 ignored. [ 733.898942][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.368191][ T9004] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 734.542192][ T9004] usb 4-1: Using ep0 maxpacket: 8 [ 734.546692][ T9004] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 734.546717][ T9004] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 734.546739][ T9004] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 734.546761][ T9004] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.546800][ T9004] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 734.546821][ T9004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.823335][ T9004] usb 4-1: GET_CAPABILITIES returned 0 [ 734.823362][ T9004] usbtmc 4-1:16.0: can't read capabilities [ 735.169103][ T9] usb 4-1: USB disconnect, device number 23 [ 736.061979][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.232978][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.826360][T10800] vivid-001: kernel_thread() failed [ 736.960552][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.188052][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.258105][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.452980][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.101508][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 738.101679][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 738.102630][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 738.103124][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 739.086768][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.567750][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.716588][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 740.358384][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.348068][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.427077][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.548289][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.598998][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.963780][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.178655][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.375952][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.412588][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.528282][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.593586][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.802657][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.042164][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.328009][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.370916][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.637372][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.782271][T10854] Bluetooth: MGMT ver 1.23 [ 744.224167][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.320494][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.121748][ T5804] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 746.278857][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.344199][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.425340][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 750.281577][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 750.282673][ T5804] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 750.282706][ T5804] usb 1-1: can't read configurations, error -71 [ 750.428755][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.438978][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.439034][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.563882][T10890] loop2: detected capacity change from 0 to 7 [ 750.565706][T10890] Dev loop2: unable to read RDB block 7 [ 750.565756][T10890] loop2: unable to read partition table [ 750.565935][T10890] loop2: partition table beyond EOD, truncated [ 750.565955][T10890] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 750.768129][ T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 750.929376][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.098379][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 751.148998][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.149022][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.175237][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.175261][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.175279][ T44] usb 3-1: Product: syz [ 751.175291][ T44] usb 3-1: Manufacturer: syz [ 751.175304][ T44] usb 3-1: SerialNumber: syz [ 751.375416][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.463977][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.643650][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.906706][ T5856] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 752.256886][ T5804] usb 3-1: USB disconnect, device number 38 [ 752.258131][ T5856] usb 4-1: device descriptor read/64, error -71 [ 752.588253][ T5856] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 752.728129][ T5856] usb 4-1: device descriptor read/64, error -71 [ 752.976721][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.118538][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.128600][ T5856] usb usb4-port1: attempt power cycle [ 753.481906][ T5856] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 753.500568][ T5856] usb 4-1: device descriptor read/8, error -71 [ 753.665643][T10919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 753.666515][T10919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 753.667329][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 753.667360][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 753.787567][ T5856] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 754.898429][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.388230][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.841491][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.963286][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 758.491327][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.877406][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.203020][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.303874][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.525726][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.560929][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.052111][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.100716][ T5856] usb 4-1: device descriptor read/8, error -110 [ 760.269380][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.270233][ T5856] usb usb4-port1: unable to enumerate USB device [ 760.410510][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.573137][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.815098][T10951] sch_fq: defrate 4294967295 ignored. [ 760.817228][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.267528][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.397737][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.637547][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.433746][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.612244][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.770921][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.003692][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.415701][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.498425][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.599355][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.906091][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.267926][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.594929][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.883091][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.913463][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.172005][T10978] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 767.177521][T10978] hub 9-0:1.0: USB hub found [ 767.178258][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.178714][T10978] hub 9-0:1.0: 1 port detected [ 767.267017][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.750857][T10987] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 767.962146][ T5961] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 768.118162][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 768.123976][ T5961] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.124001][ T5961] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.124024][ T5961] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.124045][ T5961] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.124083][ T5961] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.124104][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.525020][ T5961] usb 2-1: GET_CAPABILITIES returned 0 [ 768.525066][ T5961] usbtmc 2-1:16.0: can't read capabilities [ 768.777534][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.777619][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.777689][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.798886][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.800203][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.800278][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.800345][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.829082][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.829166][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.829567][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.829636][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.829703][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.830085][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.830159][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.830225][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.830515][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.923759][ T5984] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 769.050603][ T5961] usb 2-1: USB disconnect, device number 32 [ 769.078088][ T5984] usb 1-1: Using ep0 maxpacket: 8 [ 773.830255][ T5984] usb 1-1: unable to get BOS descriptor or descriptor too short [ 773.835302][ T5984] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 773.835343][ T5984] usb 1-1: can't read configurations, error -71 [ 774.263919][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 774.293169][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 774.306002][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 774.324031][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 774.324806][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 774.375027][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.689783][T11002] libceph: resolve 'c0' (ret=-3): failed [ 774.784375][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.378122][ T9004] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 775.538170][ T9004] usb 5-1: Using ep0 maxpacket: 8 [ 775.540665][ T9004] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.542830][ T9004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 775.542855][ T9004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 775.542876][ T9004] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.542916][ T9004] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 775.542933][ T9004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.728064][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.854957][ T9004] usb 5-1: GET_CAPABILITIES returned 0 [ 775.855000][ T9004] usbtmc 5-1:16.0: can't read capabilities [ 776.376954][ T5119] Bluetooth: hci1: command tx timeout [ 776.771150][ T9004] usb 5-1: USB disconnect, device number 41 [ 777.091993][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.204933][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.204968][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.814750][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.822021][T11023] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 777.830313][T11023] hub 9-0:1.0: USB hub found [ 777.835608][T11023] hub 9-0:1.0: 1 port detected [ 777.853999][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.854025][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.932072][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.188374][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.306171][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.438634][ T5119] Bluetooth: hci1: command tx timeout [ 778.658002][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.782183][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.007405][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.088192][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.308004][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.405973][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.606289][T11044] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 779.672091][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.672121][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.935533][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.077853][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.253255][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.691656][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.734605][ T5119] Bluetooth: hci1: command tx timeout [ 780.767460][ T37] kauditd_printk_skb: 121 callbacks suppressed [ 780.767531][ T37] audit: type=1804 audit(1761395659.392:1432): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1439" name="/newroot/304/file0" dev="tmpfs" ino=1645 res=1 errno=0 [ 781.126261][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.325423][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.617308][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.265802][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.661455][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.771107][ T5119] Bluetooth: hci1: command tx timeout [ 782.944868][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.944902][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.037875][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.078752][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.326771][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.508918][T11074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.509096][T11074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.509228][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 783.509238][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 784.077013][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 784.372383][T11080] : entered promiscuous mode [ 784.401465][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.478731][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.616215][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.714868][T10995] chnl_net:caif_netlink_parms(): no params data found [ 784.958055][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.576500][ T58] bridge_slave_1: left allmulticast mode [ 785.576617][ T58] bridge_slave_1: left promiscuous mode [ 785.653340][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.739018][ T58] bridge_slave_0: left allmulticast mode [ 785.739036][ T58] bridge_slave_0: left promiscuous mode [ 785.739191][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.796822][T11096] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 786.095430][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.266865][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.968665][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.547303][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.359758][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.360894][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.362773][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 788.362808][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 789.648818][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.708558][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.750085][ T58] bond0 (unregistering): Released all slaves [ 789.852742][T11112] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 789.874685][T11119] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 789.885600][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.886170][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.886314][T10995] bridge_slave_0: entered allmulticast mode [ 789.899446][T10995] bridge_slave_0: entered promiscuous mode [ 789.915654][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.915875][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.916047][T10995] bridge_slave_1: entered allmulticast mode [ 789.926424][T10995] bridge_slave_1: entered promiscuous mode [ 790.164387][T11127] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 790.261239][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.590850][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.673351][ T58] tipc: Left network mode [ 790.875693][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.977327][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.055585][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.551906][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.738819][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.958637][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.157191][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.465266][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.994416][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 793.290698][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.506979][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.585650][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.264778][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.397078][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.121291][T10995] team0: Port device team_slave_0 added [ 796.218711][T11174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 796.301523][T10995] team0: Port device team_slave_1 added [ 796.926452][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 796.932622][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.312453][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.588056][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.239471][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.706002][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.063454][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.481541][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.518543][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.657466][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.858936][T11203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.864484][T11203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.865012][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 799.865029][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 800.122500][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.921428][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.159307][T11207] sch_fq: defrate 4294967295 ignored. [ 801.236291][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.236306][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.236331][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.348720][ T5984] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 801.502038][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.502054][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.502086][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.510063][ T5984] usb 1-1: Using ep0 maxpacket: 16 [ 801.513330][ T5984] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.513350][ T5984] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.516691][ T5984] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.516714][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.516731][ T5984] usb 1-1: Product: syz [ 801.516743][ T5984] usb 1-1: Manufacturer: syz [ 801.516756][ T5984] usb 1-1: SerialNumber: syz [ 802.755482][ T5984] usb 1-1: USB disconnect, device number 31 [ 802.981252][ T58] hsr_slave_0: left promiscuous mode [ 803.033771][ T58] hsr_slave_1: left promiscuous mode [ 803.034609][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.034704][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.492376][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.492404][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.581784][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 803.769132][ T58] veth1_macvtap: left promiscuous mode [ 803.769353][ T58] veth0_macvtap: left promiscuous mode [ 803.769573][ T58] veth1_vlan: left promiscuous mode [ 803.769798][ T58] veth0_vlan: left promiscuous mode [ 804.265225][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.143110][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.727719][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 806.180719][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.677624][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.750067][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.127490][ T58] team0 (unregistering): Port device team_slave_1 removed [ 810.388716][ T58] team0 (unregistering): Port device team_slave_0 removed [ 812.959527][ T44] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 813.118118][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 813.119798][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.119819][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.121991][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 813.122015][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.122025][ T44] usb 5-1: Product: syz [ 813.122032][ T44] usb 5-1: Manufacturer: syz [ 813.122038][ T44] usb 5-1: SerialNumber: syz [ 813.735748][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.736468][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.935275][ T44] usb 5-1: USB disconnect, device number 42 [ 813.951175][T11218] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 814.006982][T11221] : entered promiscuous mode [ 814.161308][T11270] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 814.262601][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.194885][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.233691][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.478686][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.560013][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.629404][T11277] sch_fq: defrate 4294967295 ignored. [ 815.694342][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 816.475746][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.705103][T10995] hsr_slave_0: entered promiscuous mode [ 816.705963][T10995] hsr_slave_1: entered promiscuous mode [ 816.707421][T10995] debugfs: 'hsr0' already exists in 'hsr' [ 816.707444][T10995] Cannot create hsr debugfs directory [ 819.108258][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.314887][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.924760][T11299] libceph: resolve 'c0' (ret=-3): failed [ 821.114680][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.234582][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 821.255211][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.446620][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.682021][T11308] : entered promiscuous mode [ 821.753856][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.754029][T11298] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 821.915665][T11299] trusted_key: encrypted_key: master key parameter '' is invalid [ 822.005506][T11313] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 822.042545][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 822.262117][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.096543][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.183227][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.219540][T10995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 823.305412][T10995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 823.432660][T10995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 823.568074][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 823.701870][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.772374][T10995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 824.118362][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.235333][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.621270][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.718000][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 824.720486][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.720507][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.879897][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.879926][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.879944][ T10] usb 1-1: Product: syz [ 824.879957][ T10] usb 1-1: Manufacturer: syz [ 824.879969][ T10] usb 1-1: SerialNumber: syz [ 825.205327][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.055193][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.584570][ T5856] usb 1-1: USB disconnect, device number 32 [ 827.295603][T10995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.359984][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.378364][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.378485][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.413820][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.414906][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.568626][ T5936] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 827.969790][T11368] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 828.028113][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 828.083387][ T5936] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.083414][ T5936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.083437][ T5936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.083458][ T5936] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.083499][ T5936] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 828.083519][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.636437][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 828.651382][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 828.652761][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 828.657789][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 828.669295][ T5936] usb 1-1: GET_CAPABILITIES returned 0 [ 828.669352][ T5936] usbtmc 1-1:16.0: can't read capabilities [ 828.671249][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 828.903941][ T10] usb 1-1: USB disconnect, device number 33 [ 829.131266][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.702094][T11387] vivid-004: kernel_thread() failed [ 829.920225][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.222872][T11395] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 830.715132][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.836917][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 831.267830][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.541863][ T5811] Bluetooth: hci5: command tx timeout [ 832.139085][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.296664][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.439146][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.595865][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.140260][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.227597][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.558196][ T5811] Bluetooth: hci5: command tx timeout [ 833.611169][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.432792][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.433378][ T9004] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 834.599028][ T9004] usb 2-1: Using ep0 maxpacket: 16 [ 834.608431][ T9004] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.608447][ T9004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.634858][ T9004] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.634875][ T9004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.634884][ T9004] usb 2-1: Product: syz [ 834.634891][ T9004] usb 2-1: Manufacturer: syz [ 834.634898][ T9004] usb 2-1: SerialNumber: syz [ 835.638998][ T5811] Bluetooth: hci5: command tx timeout [ 835.918438][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.951019][ T9004] usb 2-1: USB disconnect, device number 33 [ 836.725589][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.846241][T11434] sch_fq: defrate 4294967295 ignored. [ 837.368302][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.721309][ T5811] Bluetooth: hci5: command tx timeout [ 838.040387][ T5984] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 838.590046][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.716800][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.898831][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.924685][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 838.936812][ T5984] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.936836][ T5984] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.936858][ T5984] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.936879][ T5984] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.936917][ T5984] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 838.936937][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.037381][T11456] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 839.197257][ T5984] usb 3-1: GET_CAPABILITIES returned 0 [ 839.197300][ T5984] usbtmc 3-1:16.0: can't read capabilities [ 839.411865][ T9004] usb 3-1: USB disconnect, device number 39 [ 839.579121][T11378] chnl_net:caif_netlink_parms(): no params data found [ 840.261677][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.801107][T11474] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 840.806237][T11474] hub 9-0:1.0: USB hub found [ 840.807147][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.807378][T11474] hub 9-0:1.0: 1 port detected [ 840.900364][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.579155][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.900212][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.261245][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.378441][ T5856] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 842.731072][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.758171][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 842.761319][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.761340][ T5856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.764891][ T5856] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 842.764915][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.764933][ T5856] usb 2-1: Product: syz [ 842.764945][ T5856] usb 2-1: Manufacturer: syz [ 842.764958][ T5856] usb 2-1: SerialNumber: syz [ 842.824346][T11485] overlayfs: failed to resolve './file1': -2 [ 843.498032][ T44] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 843.586745][ T5856] usb 2-1: USB disconnect, device number 34 [ 843.648100][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 843.728421][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.728553][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.728738][T11378] bridge_slave_0: entered allmulticast mode [ 843.731666][T11378] bridge_slave_0: entered promiscuous mode [ 843.779682][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.779875][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.780050][T11378] bridge_slave_1: entered allmulticast mode [ 843.939333][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.975356][T11378] bridge_slave_1: entered promiscuous mode [ 847.685529][ T9004] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 847.749842][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.842664][ T1236] bridge_slave_1: left allmulticast mode [ 847.842690][ T1236] bridge_slave_1: left promiscuous mode [ 847.843025][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.037703][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.095330][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 848.096379][ T44] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 848.096412][ T44] usb 5-1: can't read configurations, error -71 [ 848.161774][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.217889][ T1236] bridge_slave_0: left allmulticast mode [ 848.225787][ T1236] bridge_slave_0: left promiscuous mode [ 848.226020][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.485467][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.194175][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.712083][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.830588][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 851.265430][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.437759][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.122296][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.178540][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.200321][ T1236] bond0 (unregistering): Released all slaves [ 852.239111][T11514] sch_fq: defrate 4294967295 ignored. [ 852.374903][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.406327][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.432721][T11516] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 852.445941][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.698460][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.261133][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.428338][ T5856] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 853.430171][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 853.743263][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.743717][ T5856] usb 5-1: device descriptor read/64, error -32 [ 853.849977][T11544] overlayfs: failed to resolve './file1': -2 [ 854.167289][ T5856] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 854.331869][ T5927] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 854.448721][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 854.453590][ T5856] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.453614][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.453929][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.453952][ T5856] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.453992][ T5856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.454012][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.525564][ T5927] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 854.525659][ T5927] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 854.525680][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.664966][ T5856] usb 5-1: GET_CAPABILITIES returned 0 [ 854.664993][ T5856] usbtmc 5-1:16.0: can't read capabilities [ 854.883427][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.891319][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.902972][ T5804] usb 5-1: USB disconnect, device number 46 [ 855.228460][ T1236] hsr_slave_0: left promiscuous mode [ 855.270799][ T1236] hsr_slave_1: left promiscuous mode [ 855.284016][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.330260][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.496196][ T5927] usb 1-1: string descriptor 0 read error: -71 [ 857.496603][ T5927] hub 1-1:32.0: bad descriptor, ignoring hub [ 857.496622][ T5927] hub 1-1:32.0: probe with driver hub failed with error -5 [ 857.629079][ T5927] usb 1-1: USB disconnect, device number 34 [ 859.015677][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.866819][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.389588][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.438977][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 861.142721][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.808792][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.882185][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.509060][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 863.530826][T11592] overlayfs: failed to resolve './file1': -2 [ 863.806932][ T5811] Bluetooth: hci4: unexpected event 0x08 length: 10 > 4 [ 864.208040][ T5961] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 864.268353][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.368037][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 864.370355][ T5961] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.370381][ T5961] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 864.370405][ T5961] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 864.370437][ T5961] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.370478][ T5961] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.370500][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.476975][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.581185][ T5961] usb 3-1: GET_CAPABILITIES returned 0 [ 864.581212][ T5961] usbtmc 3-1:16.0: can't read capabilities [ 864.796570][ T10] usb 3-1: USB disconnect, device number 41 [ 864.928231][ T5961] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 865.129916][ T5961] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 865.129959][ T5961] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 865.129981][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.241206][T11378] team0: Port device team_slave_0 added [ 865.303658][T11585] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 865.329554][T11378] team0: Port device team_slave_1 added [ 865.614290][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.615275][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.406446][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.740365][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.091392][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.091408][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.091440][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.117224][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.117239][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.117263][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.196085][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.758380][ T5961] usb 2-1: string descriptor 0 read error: -71 [ 868.758776][ T5961] hub 2-1:32.0: bad descriptor, ignoring hub [ 868.758795][ T5961] hub 2-1:32.0: probe with driver hub failed with error -5 [ 868.869124][ T5961] usb 2-1: USB disconnect, device number 35 [ 868.902818][T11513] udevd[11513]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.946008][T11378] hsr_slave_0: entered promiscuous mode [ 868.946736][T11378] hsr_slave_1: entered promiscuous mode [ 868.947299][T11378] debugfs: 'hsr0' already exists in 'hsr' [ 868.947321][T11378] Cannot create hsr debugfs directory [ 869.195002][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.357395][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.323338][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.381706][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.658598][T11638] overlayfs: failed to resolve './file1': -2 [ 871.505503][T11654] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1574'. [ 872.298005][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.598046][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 872.728205][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.708995][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 873.852054][T11670] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 873.888397][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 873.888489][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 873.888569][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 873.888651][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.888878][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 873.888956][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.421681][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 874.421728][ T44] usbtmc 5-1:16.0: can't read capabilities [ 874.528022][ T5961] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 874.643620][ T44] usb 5-1: USB disconnect, device number 47 [ 874.678744][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 874.698071][ T5856] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 878.858656][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.858726][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.899839][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.924431][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 878.924812][ T5961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 878.941020][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 878.941157][ T5961] usb 3-1: can't read configurations, error -71 [ 878.943773][ T5856] usb 2-1: device descriptor read/all, error -61 [ 879.068038][ T5856] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 881.258085][ C0] vkms_vblank_simulate: vblank timer overrun [ 881.266439][ T5856] usb 2-1: device descriptor read/64, error -71 [ 881.377460][ T5856] usb usb2-port1: attempt power cycle [ 881.705290][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.101366][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.687629][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.076303][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.155777][T11378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 884.902822][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.010596][T11748] sch_fq: defrate 4294967295 ignored. [ 885.012451][T11378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 885.268907][T11378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 885.351975][T11378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 885.815004][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.944243][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.326524][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.338275][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.639028][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.663296][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.663436][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.765650][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.219076][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.573987][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.873406][ T5804] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 887.901229][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.060731][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 888.572696][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.361771][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.511381][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 892.512190][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 892.512209][ T5804] usb 3-1: can't read configurations, error -71 [ 893.551239][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.566861][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.567806][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.583605][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.584080][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 893.829561][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.814238][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.266581][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.559132][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.649641][ T5119] Bluetooth: hci1: command tx timeout [ 895.745802][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.730834][ T5119] Bluetooth: hci1: command tx timeout [ 898.144738][T11875] libceph: resolve 'c0' (ret=-3): failed [ 898.402414][T11879] trusted_key: encrypted_key: master key parameter '' is invalid [ 898.620414][T11872] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 899.026119][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.258407][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.718622][T11888] syz.0.1610 (11888) used greatest stack depth: 16696 bytes left [ 899.798100][ T5119] Bluetooth: hci1: command tx timeout [ 899.873956][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.187105][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.784410][T11908] overlayfs: overlapping lowerdir path [ 900.856067][T11909] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 900.856145][T11909] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 900.862238][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.773458][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.880700][ T5119] Bluetooth: hci1: command tx timeout [ 901.964296][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.992703][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.114185][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.591384][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.973593][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.135976][ T5804] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 904.368284][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 904.538978][ T5804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.539007][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.539030][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.539051][ T5804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.539090][ T5804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 904.539110][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.908497][T11930] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 904.910174][ T5804] usb 3-1: GET_CAPABILITIES returned 0 [ 904.910220][ T5804] usbtmc 3-1:16.0: can't read capabilities [ 905.078370][ T5961] usb 3-1: USB disconnect, device number 46 [ 905.204397][T11833] chnl_net:caif_netlink_parms(): no params data found [ 905.295079][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.348208][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.612381][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.764220][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.802447][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.940602][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.577188][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.929952][T11971] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1628'. [ 908.346865][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.799061][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.799243][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.799438][T11833] bridge_slave_0: entered allmulticast mode [ 908.802125][T11833] bridge_slave_0: entered promiscuous mode [ 908.876905][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.877035][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.877230][T11833] bridge_slave_1: entered allmulticast mode [ 908.898107][T11833] bridge_slave_1: entered promiscuous mode [ 909.033761][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.387510][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 910.324720][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.639355][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.840070][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.565775][ T70] bridge_slave_1: left allmulticast mode [ 911.565802][ T70] bridge_slave_1: left promiscuous mode [ 911.565995][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.629924][ T70] bridge_slave_0: left allmulticast mode [ 911.629951][ T70] bridge_slave_0: left promiscuous mode [ 911.630232][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.197093][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.598795][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.796857][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.254253][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.317174][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.048810][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.256330][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.418909][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.641521][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.171357][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.514094][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.563676][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.601157][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.621399][ T70] bond0 (unregistering): Released all slaves [ 917.724826][ T26] ================================================================== [ 917.724840][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 917.724870][ T26] Read of size 8 at addr ffffc9001ce01090 by task irq_work/1/26 [ 917.724885][ T26] [ 917.724910][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 917.724929][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 917.724943][ T26] Call Trace: [ 917.724954][ T26] [ 917.724962][ T26] dump_stack_lvl+0x189/0x250 [ 917.724992][ T26] ? run_irq_workd+0x116/0x190 [ 917.725014][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.725036][ T26] ? __pfx__printk+0x10/0x10 [ 917.725058][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 917.725080][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 917.725104][ T26] print_report+0xca/0x240 [ 917.725124][ T26] ? run_irq_workd+0x116/0x190 [ 917.725144][ T26] kasan_report+0x118/0x150 [ 917.725167][ T26] ? run_irq_workd+0x116/0x190 [ 917.725192][ T26] run_irq_workd+0x116/0x190 [ 917.725213][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 917.725233][ T26] ? schedule+0x91/0x360 [ 917.725253][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.725274][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.725292][ T26] smpboot_thread_fn+0x542/0xa60 [ 917.725312][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.725336][ T26] kthread+0x711/0x8a0 [ 917.725359][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 917.725379][ T26] ? __pfx_kthread+0x10/0x10 [ 917.725398][ T26] ? rt_spin_unlock+0x150/0x200 [ 917.725417][ T26] ? rt_spin_unlock+0x161/0x200 [ 917.725433][ T26] ? __pfx_kthread+0x10/0x10 [ 917.725455][ T26] ret_from_fork+0x4bc/0x870 [ 917.725475][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 917.725497][ T26] ? __switch_to_asm+0x39/0x70 [ 917.725512][ T26] ? __switch_to_asm+0x33/0x70 [ 917.725528][ T26] ? __pfx_kthread+0x10/0x10 [ 917.725549][ T26] ret_from_fork_asm+0x1a/0x30 [ 917.725574][ T26] [ 917.725581][ T26] [ 917.725586][ T26] The buggy address belongs to a vmalloc virtual mapping [ 917.725603][ T26] Memory state around the buggy address: [ 917.725613][ T26] ffffc9001ce00f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.725625][ T26] ffffc9001ce01000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.725636][ T26] >ffffc9001ce01080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.725648][ T26] ^ [ 917.725657][ T26] ffffc9001ce01100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.725668][ T26] ffffc9001ce01180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.725676][ T26] ================================================================== [ 917.725696][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 917.725708][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 917.725727][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 917.725737][ T26] Call Trace: [ 917.725744][ T26] [ 917.725750][ T26] dump_stack_lvl+0x99/0x250 [ 917.725773][ T26] ? __asan_memcpy+0x40/0x70 [ 917.725791][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.725814][ T26] ? __pfx__printk+0x10/0x10 [ 917.725839][ T26] vpanic+0x237/0x6d0 [ 917.725854][ T26] ? __pfx_vpanic+0x10/0x10 [ 917.725876][ T26] panic+0xb9/0xc0 [ 917.725890][ T26] ? __pfx_panic+0x10/0x10 [ 917.725905][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 917.725928][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 917.725952][ T26] ? run_irq_workd+0x116/0x190 [ 917.725973][ T26] check_panic_on_warn+0x89/0xb0 [ 917.725994][ T26] ? run_irq_workd+0x116/0x190 [ 917.726015][ T26] end_report+0x78/0x160 [ 917.726035][ T26] kasan_report+0x129/0x150 [ 917.726057][ T26] ? run_irq_workd+0x116/0x190 [ 917.726082][ T26] run_irq_workd+0x116/0x190 [ 917.726103][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 917.726123][ T26] ? schedule+0x91/0x360 [ 917.726143][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.726163][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.726182][ T26] smpboot_thread_fn+0x542/0xa60 [ 917.726202][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 917.726226][ T26] kthread+0x711/0x8a0 [ 917.726248][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 917.726268][ T26] ? __pfx_kthread+0x10/0x10 [ 917.726288][ T26] ? rt_spin_unlock+0x150/0x200 [ 917.726307][ T26] ? rt_spin_unlock+0x161/0x200 [ 917.726322][ T26] ? __pfx_kthread+0x10/0x10 [ 917.726344][ T26] ret_from_fork+0x4bc/0x870 [ 917.726365][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 917.726387][ T26] ? __switch_to_asm+0x39/0x70 [ 917.726403][ T26] ? __switch_to_asm+0x33/0x70 [ 917.726419][ T26] ? __pfx_kthread+0x10/0x10 [ 917.726449][ T26] ret_from_fork_asm+0x1a/0x30 [ 917.726474][ T26] [ 917.726727][ T26] Kernel Offset: disabled