last executing test programs:

3m30.085645296s ago: executing program 4 (id=1215):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
symlink(0x0, &(0x7f0000000000)='./file0\x00')
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m28.687673987s ago: executing program 4 (id=1219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301}, 0x18}, 0x1, 0xf00}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000100))
bind$802154_dgram(r7, &(0x7f00000000c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x3})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080)

3m27.037897854s ago: executing program 4 (id=1220):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f13, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

3m26.625848595s ago: executing program 4 (id=1222):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

3m25.174258228s ago: executing program 4 (id=1230):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0)

3m24.711975906s ago: executing program 4 (id=1235):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010111}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

3m23.312191216s ago: executing program 32 (id=1235):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010111}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

2m34.511187243s ago: executing program 5 (id=1368):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

2m33.634647531s ago: executing program 5 (id=1371):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf)
move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2m32.542099099s ago: executing program 5 (id=1372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001039, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
r4 = io_uring_setup(0xab0, &(0x7f0000000080)={0x0, 0xffffeff7, 0x800, 0x7, 0x2})
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2m31.295074628s ago: executing program 5 (id=1374):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0)

2m30.848271953s ago: executing program 5 (id=1375):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2m29.226054224s ago: executing program 5 (id=1381):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x280000000, 0xab, 0xffff, 0x3, 0x1, 0x4, 0x1000, 0x7f, r2, r3, 0xc8, 0x1a4d06c0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

2m28.262509442s ago: executing program 33 (id=1381):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d44783fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd06000000c26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024632e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a62600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51abc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c944130000303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc837de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755469621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x280000000, 0xab, 0xffff, 0x3, 0x1, 0x4, 0x1000, 0x7f, r2, r3, 0xc8, 0x1a4d06c0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

7.970093899s ago: executing program 2 (id=1751):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000180))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x2000c0c4)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0)

7.240810811s ago: executing program 0 (id=1753):
r0 = socket(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x181d, @remote, 0x8001}, 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x6})

6.965124447s ago: executing program 0 (id=1754):
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
read$alg(r2, &(0x7f0000004000)=""/4096, 0x1000)

6.641763226s ago: executing program 0 (id=1755):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30241, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup2(r5, r1)
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)

6.613089732s ago: executing program 2 (id=1756):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
unshare(0x4000400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x5, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0x45, 0x0, 0x10000, 0xffffffff, 0xe661, 0x6, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x1, 0x4, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0x6cca, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x104e1, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x0, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x1000005, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x3ff, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x6, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0x10b, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb5, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x6, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1c, 0xd7, 0x200, 0x200, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.552056541s ago: executing program 3 (id=1758):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

6.433839154s ago: executing program 3 (id=1759):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a0001002dbd7000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20044000)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = syz_open_dev$dri(0x0, 0x7, 0x220042)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x3, 0x0, r9})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000440)={0x5})
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

6.330455834s ago: executing program 2 (id=1760):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
getdents(r2, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0xb4b, 0x9, 0xb, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24)
sendfile(r5, r4, 0x0, 0x4)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x6)
recvmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/173, 0xad}], 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

5.185868251s ago: executing program 6 (id=1765):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}})
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x7fffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x20000000})
syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040), 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000e9e4e5b80000000000000a14000000000a03000000000000000000070000004c000000090a010400000000000000000700000008e20940000000000900020073797a3000a6a94c4b65704308797a3000000000080005400000002f0800034000000106080008400000000114000000100001798c0000000000000000000084000a89083c61db3a7a5d385f0154c0a7834288b60477cfe14dcae77fd016b08f372488093b4d3f168b450b6be8ada9cd28de23c01cecf438fa165612e6ec"], 0x88}, 0x1, 0x0, 0x0, 0x4840}, 0x20058800)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)='jo', 0x2}], 0x2}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)}, 0x44011)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)

5.109613687s ago: executing program 0 (id=1766):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000180))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x2000c0c4)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0)

3.727852429s ago: executing program 1 (id=1767):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xa70, 0x80, 0x4, 0x224}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4)
syz_io_uring_setup(0x3665, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x1be}, &(0x7f0000001340)=<r5=>0x0, &(0x7f0000000a80))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x9, 0x0, @fd=r1, 0x5, 0x0, 0x400, 0x0, 0x1})
io_uring_enter(r2, 0x47fb, 0x0, 0x0, 0x0, 0x0)

3.444595311s ago: executing program 3 (id=1768):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
unshare(0x22020600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x4)

3.113725319s ago: executing program 3 (id=1769):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
poll(&(0x7f0000000440), 0x0, 0x8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000019, 0x20010, r0, 0x29cf7000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)

2.506493389s ago: executing program 1 (id=1770):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
unshare(0x4000400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x5, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0x45, 0x0, 0x10000, 0xffffffff, 0xe661, 0x6, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x1, 0x4, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0x6cca, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x104e1, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x0, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x1000005, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x3ff, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x6, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0x10b, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb5, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x6, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1c, 0xd7, 0x200, 0x200, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.006366054s ago: executing program 0 (id=1771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x1, 0x70bd2d, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0)

1.901979499s ago: executing program 1 (id=1772):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty, 0x200}, 0x1c)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

1.47778106s ago: executing program 0 (id=1773):
mount$fuse(0x0, 0x0, 0x0, 0x10004, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x648a00, 0x0)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000380))
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x63a, 0xfffffffffffffffc, 0x0, 0x0, 0x802000000000000, 0x200}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f00000001c0)={{0xbe, @multicast2, 0x4e20, 0x0, 'lblc\x00', 0x0, 0x7fff, 0x56}, {@private=0xa010100, 0x4e23, 0x2, 0x3, 0x81, 0x3}}, 0x44)

1.255075102s ago: executing program 6 (id=1774):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x6})

1.1290675s ago: executing program 2 (id=1775):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f00000000c0), 0x18)

988.198435ms ago: executing program 6 (id=1776):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
read(r0, 0x0, 0x0)

910.592879ms ago: executing program 2 (id=1777):
r0 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}})
io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0)

729.981381ms ago: executing program 3 (id=1778):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000000, 0x2, 0xfffffffffffffffe, 0x100000000004004, 0x2, 0x4, 0xefffffffffffffff, 0xd, 0x0, 0x1fffffe, 0x0, 0x1c, 0x0, 0xfffffffffffffbff, 0x5, 0x1], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

677.559931ms ago: executing program 6 (id=1779):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

677.147815ms ago: executing program 1 (id=1780):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2})
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x140}, 0x1)

502.474995ms ago: executing program 2 (id=1781):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unshare(0x64060400)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, 0x0, 0x4)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

333.545343ms ago: executing program 6 (id=1782):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
unshare(0x4000400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x5, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0x45, 0x0, 0x10000, 0xffffffff, 0xe661, 0x6, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x1, 0x4, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0x6cca, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x104e1, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x0, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x1000005, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x3ff, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x6, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0x10b, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb5, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x6, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1c, 0xd7, 0x200, 0x200, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

241.641207ms ago: executing program 1 (id=1783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x1, 0x70bd2d, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0)

215.008722ms ago: executing program 3 (id=1784):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}})
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x7fffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x20000000})
syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040), 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000e9e4e5b80000000000000a14000000000a03000000000000000000070000004c000000090a010400000000000000000700000008e20940000000000900020073797a3000a6a94c4b65704308797a3000000000080005400000002f0800034000000106080008400000000114000000100001798c0000000000000000000084000a89083c61db3a7a5d385f0154c0a7834288b60477cfe14dcae77fd016b08f372488093b4d3f168b450b6be8ada9cd28de23c01cecf438fa165612e6ec"], 0x88}, 0x1, 0x0, 0x0, 0x4840}, 0x20058800)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)='jo', 0x2}], 0x2}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)}, 0x44011)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)

107.371863ms ago: executing program 6 (id=1785):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

0s ago: executing program 1 (id=1786):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

[ T5909] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  473.853228][T11441] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[  474.121228][ T5909] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  474.242676][ T5909] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  474.291039][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  474.350499][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.405763][T11451] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  474.459994][T11437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  474.700624][ T1208] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  474.720948][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  474.859918][ T1208] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  474.879670][ T1208] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  474.913464][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.932460][ T1208] usb 1-1: Product: syz
[  474.936671][ T1208] usb 1-1: Manufacturer: syz
[  474.952187][ T1208] usb 1-1: SerialNumber: syz
[  474.988612][ T1208] usb 1-1: config 0 descriptor??
[  474.998834][ T5939] usb 3-1: USB disconnect, device number 34
[  475.159829][T11460] 9p: Bad value for 'wfdno'
[  475.717420][T11458] loop4: detected capacity change from 0 to 32768
[  475.785258][T11458] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  475.892360][T11478] loop2: detected capacity change from 0 to 2048
[  475.904629][T11458] XFS (loop4): Ending clean mount
[  475.946419][T11478] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  475.964108][T11478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  475.966093][T11458] XFS (loop4): Quotacheck needed: Please wait.
[  476.088485][T11458] XFS (loop4): Quotacheck: Done.
[  476.218340][ T5878] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  476.252539][ T5823] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  476.458670][ T5878] usb 4-1: Using ep0 maxpacket: 8
[  476.519349][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  476.568311][ T5878] usb 4-1: config 0 has no interfaces?
[  476.573848][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  476.618125][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.651127][ T5878] usb 4-1: config 0 descriptor??
[  476.881706][ T5939] usb 4-1: USB disconnect, device number 27
[  477.017496][T11491] netlink: 'syz.1.1140': attribute type 1 has an invalid length.
[  477.463006][   T43] usb 1-1: USB disconnect, device number 27
[  477.573952][T11483] loop2: detected capacity change from 0 to 32768
[  477.643626][T11483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1138 (11483)
[  477.660648][T11497] loop0: detected capacity change from 0 to 512
[  477.686931][T11497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  477.801000][T11483] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  477.837481][T11483] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  477.904363][T11503] fuse: Bad value for 'fd'
[  477.931966][T11497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  477.979099][T11497] System zones: 1-2, 4-12, 8-8
[  478.409810][T11497] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1144: iget: bad i_size value: 38620345925642
[  478.468197][T11497] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1144: couldn't read orphan inode 15 (err -117)
[  478.494830][T11497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.613855][T11483] BTRFS info (device loop2): enabling ssd optimizations
[  478.656750][T11483] BTRFS info (device loop2): turning on async discard
[  478.698176][T11483] BTRFS info (device loop2): enabling free space tree
[  478.734239][T11483] BTRFS info (device loop2): use zstd compression, level 3
[  478.882100][T11529] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1144: bg 0: block 5: invalid block bitmap
[  478.899402][T11527] loop3: detected capacity change from 0 to 2048
[  478.979074][T11529] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 440 with error 28
[  478.997547][T11529] EXT4-fs (loop0): This should not happen!! Data will be lost
[  478.997547][T11529] 
[  479.056967][T11527] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  479.087628][T11529] EXT4-fs (loop0): Total free blocks count 0
[  479.160322][T11527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.169565][T11529] EXT4-fs (loop0): Free/Dirty block details
[  479.175487][T11529] EXT4-fs (loop0): free_blocks=0
[  479.349226][T11529] EXT4-fs (loop0): dirty_blocks=440
[  479.579111][T11529] EXT4-fs (loop0): Block reservation details
[  479.715817][T11529] EXT4-fs (loop0): i_reserved_data_blocks=440
[  479.943169][ T5835] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  479.992845][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.509203][ T1208] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  480.719563][ T1208] usb 4-1: Using ep0 maxpacket: 16
[  480.771830][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  480.804543][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  480.828151][ T5939] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  481.620993][ T1208] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  481.630874][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.788547][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  481.798352][ T1208] usb 4-1: Product: syz
[  481.802541][ T1208] usb 4-1: Manufacturer: syz
[  481.807143][ T1208] usb 4-1: SerialNumber: syz
[  481.812126][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.848209][ T5939] usb 3-1: Product: syz
[  481.874046][ T5939] usb 3-1: Manufacturer: syz
[  481.880863][ T1208] usb 4-1: config 0 descriptor??
[  481.903817][ T5939] usb 3-1: SerialNumber: syz
[  481.922739][ T1208] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  481.943885][ T5939] usb 3-1: config 0 descriptor??
[  481.958235][ T1208] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  482.209751][ T5939] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  482.543599][ T1208] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  482.550761][ T1208] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  483.163833][ T1208] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  483.172485][ T1208] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  483.180440][ T1208] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  483.195955][ T5939] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  483.232338][T11576] loop0: detected capacity change from 0 to 2048
[  483.243959][ T5939] usb 3-1: USB disconnect, device number 35
[  483.324594][T11576] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  483.400968][T11576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  483.731756][ T1208] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  483.738498][ T1208] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  483.774850][ T1208] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  483.825856][ T1208] usb 4-1: USB disconnect, device number 28
[  484.289138][T11587] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  484.348102][ T1208] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  484.915442][ T1208] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  484.938162][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.947726][ T1208] usb 3-1: Product: syz
[  484.955874][ T1208] usb 3-1: Manufacturer: syz
[  485.022058][ T1208] usb 3-1: SerialNumber: syz
[  485.078857][ T1208] usb 3-1: config 0 descriptor??
[  485.256088][T11581] loop0: detected capacity change from 0 to 32768
[  485.307969][ T1208] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  485.393531][T11581] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  485.394442][T11596] loop4: detected capacity change from 0 to 4096
[  485.499775][T11581] XFS (loop0): Ending clean mount
[  485.520502][T11581] XFS (loop0): Quotacheck needed: Please wait.
[  485.554830][T11581] XFS (loop0): Quotacheck: Done.
[  485.602697][T11596] ntfs3(loop4): ino=b, mi_enum_attr
[  485.624913][T11596] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  485.696216][ T5821] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  485.710602][T11596] ntfs3(loop4): Failed to load $Extend (-22).
[  485.716819][T11596] ntfs3(loop4): Failed to initialize $Extend.
[  486.219794][T11594] loop3: detected capacity change from 0 to 32768
[  486.272598][T11594] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1170 (11594)
[  486.323596][T11594] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  486.335786][T11594] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  486.347830][ T1208] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  486.392469][ T1208] usb 3-1: USB disconnect, device number 36
[  486.787238][T11594] BTRFS info (device loop3): enabling ssd optimizations
[  486.798291][T11594] BTRFS info (device loop3): turning on async discard
[  486.858902][T11594] BTRFS info (device loop3): enabling free space tree
[  486.905494][T11594] BTRFS info (device loop3): use zstd compression, level 3
[  487.096054][ T5826] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  487.467164][T11640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1177'.
[  487.512026][T11640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1177'.
[  487.587981][T11642] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  488.927304][T11638] loop2: detected capacity change from 0 to 32768
[  488.971303][T11638] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1178 (11638)
[  489.027374][T11638] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  489.068388][T11638] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  489.390111][T11638] BTRFS info (device loop2): enabling ssd optimizations
[  489.432016][T11638] BTRFS info (device loop2): turning on async discard
[  489.440538][T11638] BTRFS info (device loop2): enabling free space tree
[  489.447474][T11638] BTRFS info (device loop2): use zstd compression, level 3
[  489.697455][ T5835] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  489.776038][T11658] loop1: detected capacity change from 0 to 32768
[  489.811957][T11658] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1183 (11658)
[  489.885960][T11658] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  489.917488][T11658] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  490.302469][T11660] loop4: detected capacity change from 0 to 32768
[  490.352907][T11658] BTRFS info (device loop1): enabling ssd optimizations
[  490.365259][T11698] loop0: detected capacity change from 0 to 512
[  490.390748][T11698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  490.420403][T11660] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  490.437383][T11658] BTRFS info (device loop1): turning on async discard
[  490.445568][T11658] BTRFS info (device loop1): enabling free space tree
[  490.462225][T11658] BTRFS info (device loop1): use zstd compression, level 3
[  490.495203][T11698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  490.537116][T11660] XFS (loop4): Ending clean mount
[  490.551357][T11698] System zones: 1-2, 4-12, 8-8
[  490.551505][T11660] XFS (loop4): Quotacheck needed: Please wait.
[  490.600375][T11698] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1187: iget: bad i_size value: 38620345925642
[  490.649111][T11698] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1187: couldn't read orphan inode 15 (err -117)
[  490.662082][T11660] XFS (loop4): Quotacheck: Done.
[  490.721628][T11698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.779655][T11711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1188'.
[  490.839539][ T5823] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  490.848938][ T5833] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  490.946391][T11713] loop2: detected capacity change from 0 to 512
[  491.019602][T11713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.071842][T11720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1192'.
[  491.101047][T11721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1187: bg 0: block 5: invalid block bitmap
[  491.102009][T11713] ext4 filesystem being mounted at /249/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.148540][   T30] audit: type=1800 audit(1762562906.243:18): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1190" name="file1" dev="loop2" ino=15 res=0 errno=0
[  491.236485][T11721] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28
[  491.318384][T11721] EXT4-fs (loop0): This should not happen!! Data will be lost
[  491.318384][T11721] 
[  491.398188][T11721] EXT4-fs (loop0): Total free blocks count 0
[  491.417210][T11721] EXT4-fs (loop0): Free/Dirty block details
[  491.466337][T11721] EXT4-fs (loop0): free_blocks=0
[  491.471451][T11721] EXT4-fs (loop0): dirty_blocks=244
[  491.484896][T11721] EXT4-fs (loop0): Block reservation details
[  491.491843][T11721] EXT4-fs (loop0): i_reserved_data_blocks=244
[  491.559201][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.698737][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.728495][   T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  491.919875][   T43] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  491.960878][   T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  491.973131][T11736] loop0: detected capacity change from 0 to 512
[  492.000674][   T43] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  492.025106][ T1208] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  492.088172][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  492.099052][T11736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  492.113712][T11736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  492.128331][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.139215][T11736] System zones: 1-2, 4-12, 8-8
[  492.176435][T11736] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1196: iget: bad i_size value: 38620345925642
[  492.206396][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  492.229784][   T43] usb 5-1: invalid MIDI out EP 0
[  492.238761][T11736] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1196: couldn't read orphan inode 15 (err -117)
[  492.258815][ T1208] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  492.299389][ T1208] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  492.305802][T11736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.325110][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.345783][ T1208] usb 3-1: Product: syz
[  492.358301][ T1208] usb 3-1: Manufacturer: syz
[  492.509779][T11741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1196: bg 0: block 5: invalid block bitmap
[  492.542024][T11741] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28
[  492.556037][ T1208] usb 3-1: SerialNumber: syz
[  492.587299][T11741] EXT4-fs (loop0): This should not happen!! Data will be lost
[  492.587299][T11741] 
[  492.603298][ T1208] usb 3-1: config 0 descriptor??
[  492.623667][T11741] EXT4-fs (loop0): Total free blocks count 0
[  492.643668][T11741] EXT4-fs (loop0): Free/Dirty block details
[  492.670493][T11741] EXT4-fs (loop0): free_blocks=0
[  492.676106][T11741] EXT4-fs (loop0): dirty_blocks=560
[  492.681705][T11741] EXT4-fs (loop0): Block reservation details
[  492.690159][T11741] EXT4-fs (loop0): i_reserved_data_blocks=560
[  493.130238][ T1208] usb 3-1: USB disconnect, device number 37
[  493.251097][   T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  493.312343][   T43] usb 5-1: USB disconnect, device number 28
[  493.416167][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.781394][ T5939] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  493.961755][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'.
[  494.016654][ T5939] usb 4-1: config 0 has an invalid interface number: 139 but max is 0
[  494.111508][ T5939] usb 4-1: config 0 has no interface number 0
[  494.197528][ T5939] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  494.399595][T11761] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1203'.
[  494.409717][ T5939] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  494.422510][ T5939] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  494.570599][ T5939] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  494.589221][ T5939] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  494.600393][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.614120][ T5939] usb 4-1: Product: syz
[  494.623235][ T5939] usb 4-1: Manufacturer: syz
[  494.628645][ T5939] usb 4-1: SerialNumber: syz
[  494.669561][ T5939] usb 4-1: config 0 descriptor??
[  494.679087][T11746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  494.688691][T11746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  494.702336][T11766] loop0: detected capacity change from 0 to 512
[  494.828490][T11766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.882188][T11766] ext4 filesystem being mounted at /240/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.899699][T11768] loop4: detected capacity change from 0 to 4096
[  494.936819][T11768] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  495.558907][ T5939] mct_u232 4-1:0.139: MCT U232 converter detected
[  495.589230][ T5939] usb 4-1: MCT U232 converter now attached to ttyUSB0
[  495.659882][T11768] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  495.677924][ T5939] usb 4-1: USB disconnect, device number 29
[  495.759277][ T5939] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[  495.767978][ T5939] mct_u232 4-1:0.139: device disconnected
[  495.800744][   T30] audit: type=1800 audit(1762562910.913:19): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1205" name="file1" dev="loop0" ino=15 res=0 errno=0
[  495.931067][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.089294][T11785] loop0: detected capacity change from 0 to 512
[  496.107666][T11785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  496.134495][T11783] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  496.151605][T11785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  496.184989][T11785] System zones: 1-2, 4-12, 8-8
[  496.194559][T11783] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  496.360739][T11785] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1210: iget: bad i_size value: 38620345925642
[  496.376298][T11785] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1210: couldn't read orphan inode 15 (err -117)
[  497.020481][T11785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.209249][T11799] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1214'.
[  497.363706][T11803] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1210: bg 0: block 5: invalid block bitmap
[  497.443757][T11803] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 612 with error 28
[  497.502304][T11803] EXT4-fs (loop0): This should not happen!! Data will be lost
[  497.502304][T11803] 
[  497.542813][T11803] EXT4-fs (loop0): Total free blocks count 0
[  497.567779][T11803] EXT4-fs (loop0): Free/Dirty block details
[  497.574078][ T5909] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  497.584995][T11803] EXT4-fs (loop0): free_blocks=0
[  497.590149][T11803] EXT4-fs (loop0): dirty_blocks=624
[  497.595464][T11803] EXT4-fs (loop0): Block reservation details
[  497.601978][T11803] EXT4-fs (loop0): i_reserved_data_blocks=624
[  497.641150][  T991] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 612 with max blocks 12 with error 28
[  497.753416][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'.
[  497.809027][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  497.931105][ T5909] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  498.113209][ T5909] usb 4-1: config 0 has no interface number 0
[  498.209828][T11781] loop1: detected capacity change from 0 to 32768
[  498.237039][T11781] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1209 (11781)
[  498.330280][ T5909] usb 4-1: config 0 interface 12 has no altsetting 0
[  498.339622][ T5909] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  498.362967][T11781] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  498.368307][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.384266][ T5909] usb 4-1: Product: syz
[  498.388528][ T5909] usb 4-1: Manufacturer: syz
[  498.393153][ T5909] usb 4-1: SerialNumber: syz
[  498.409373][ T5909] usb 4-1: config 0 descriptor??
[  498.415622][T11781] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  498.576130][T11816] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  499.657750][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'.
[  500.610716][T11781] BTRFS error (device loop1): open_ctree failed: -4
[  500.847966][T11843] netlink: 'syz.0.1221': attribute type 3 has an invalid length.
[  501.388292][T11845] loop4: detected capacity change from 0 to 512
[  501.423160][T11845] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  501.476310][T11847] loop2: detected capacity change from 0 to 512
[  501.486976][T11845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  501.524240][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.532604][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  501.552309][T11845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  501.572115][T11845] System zones: 1-12
[  501.595100][T11845] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  501.614770][T11847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.625152][T11845] EXT4-fs (loop4): 1 truncate cleaned up
[  501.690036][T11847] ext4 filesystem being mounted at /257/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.703621][T11845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.719291][   T30] audit: type=1800 audit(1762562916.833:20): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1223" name="file1" dev="loop2" ino=15 res=0 errno=0
[  501.781528][ T5909] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  501.794906][   T30] audit: type=1800 audit(1762562916.903:21): pid=11845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1222" name="file1" dev="loop4" ino=15 res=0 errno=0
[  501.820075][ T5909] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  501.827417][ T5909] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  501.838828][ T5909] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  501.860018][ T5909] usb 4-1: USB disconnect, device number 30
[  501.892275][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.910298][T11845] loop4: detected capacity change from 512 to 0
[  501.946861][T11857] EXT4-fs error (device loop4): ext4_get_inode_loc:4974: inode #15: block 8: comm syz.4.1222: unable to read itable block
[  501.947207][    C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  502.015236][T11857] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  502.027084][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'.
[  502.058264][T11857] EXT4-fs (loop4): I/O error while writing superblock
[  502.068588][T11857] EXT4-fs error (device loop4): ext4_get_inode_loc:4974: inode #15: block 8: comm syz.4.1222: unable to read itable block
[  502.109585][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'.
[  502.119052][T11857] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  502.127409][T11857] EXT4-fs (loop4): I/O error while writing superblock
[  502.136745][   T30] audit: type=1800 audit(1762562917.253:22): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1222" name="file1" dev="loop4" ino=15 res=0 errno=0
[  502.175767][ T5823] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /259/file2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  502.197256][ T5823] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  502.205922][ T5823] EXT4-fs (loop4): I/O error while writing superblock
[  502.287227][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.334028][ T5823] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  502.368271][ T5823] EXT4-fs (loop4): I/O error while writing superblock
[  502.722377][T11880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  503.291826][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'.
[  503.854927][ T5959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.877167][ T5959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.002441][ T5959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.015284][ T5959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.186881][ T5959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.282203][ T5959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.349565][ T5939] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  504.577731][ T5939] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  505.104745][T11894] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  505.124151][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.228520][ T5939] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  505.231745][ T5959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.237910][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  505.268806][ T5939] usb 2-1: Product: syz
[  505.305276][ T5939] usb 2-1: Manufacturer: syz
[  505.315306][ T5939] usb 2-1: SerialNumber: syz
[  505.329016][ T5959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.350603][ T5939] usb 2-1: config 0 descriptor??
[  505.402186][ T5939] usb 2-1: selecting invalid altsetting 0
[  505.422389][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  505.434237][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  505.444106][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  505.457002][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  505.468417][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.785403][T11913] loop2: detected capacity change from 0 to 2048
[  506.098222][T11913] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  506.280362][T11913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  506.578569][ T5959] bridge_slave_1: left allmulticast mode
[  507.221432][ T5959] bridge_slave_1: left promiscuous mode
[  507.256612][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.326298][ T5959] bridge_slave_0: left allmulticast mode
[  507.332373][ T5959] bridge_slave_0: left promiscuous mode
[  507.338683][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.518536][   T52] Bluetooth: hci1: command tx timeout
[  507.803144][T11935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  508.187697][ T5909] usb 2-1: USB disconnect, device number 31
[  509.615855][   T52] Bluetooth: hci1: command tx timeout
[  509.972463][   T30] audit: type=1804 audit(1762562925.073:23): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1260" name="/newroot/257/file1" dev="fuse" ino=1 res=1 errno=0
[  510.523107][   T30] audit: type=1800 audit(1762562925.633:24): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="/" dev="fuse" ino=1 res=0 errno=0
[  510.569191][   T30] audit: type=1804 audit(1762562925.683:25): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1264" name="/newroot/226/file1" dev="fuse" ino=1 res=1 errno=0
[  510.631432][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.645628][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  510.676477][ T5959] bond0 (unregistering): (slave team0): Releasing backup interface
[  510.693703][ T5939] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  510.715712][ T5959] bond0 (unregistering): Released all slaves
[  510.787048][T11967] warning: `syz.3.1259' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  510.825149][T11990] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1267'.
[  510.864297][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  510.886518][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.918427][ T5939] usb 3-1: Product: syz
[  510.927824][ T5939] usb 3-1: Manufacturer: syz
[  510.942042][ T5939] usb 3-1: SerialNumber: syz
[  510.960857][ T5939] usb 3-1: config 0 descriptor??
[  511.001502][T11990] team0: Mode "loa" not found
[  511.181320][ T5939] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  511.399408][T11999] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  511.686046][   T52] Bluetooth: hci1: command tx timeout
[  512.242140][T11988] loop0: detected capacity change from 0 to 32768
[  512.256198][T12007] 9p: Bad value for 'wfdno'
[  512.272636][ T5939] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  512.296948][T11988] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1265 (11988)
[  512.320891][ T5939] usb 3-1: USB disconnect, device number 38
[  512.341487][T11988] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  512.428351][T11988] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[  512.739896][T11988] BTRFS info (device loop0): enabling ssd optimizations
[  512.833642][T11988] BTRFS info (device loop0): turning on async discard
[  512.857794][T11988] BTRFS info (device loop0): enabling free space tree
[  513.508130][T11988] BTRFS info (device loop0): use zstd compression, level 3
[  513.572656][ T5959] hsr_slave_0: left promiscuous mode
[  513.629246][ T5959] hsr_slave_1: left promiscuous mode
[  513.636549][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.655281][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.689640][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.718237][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.758450][   T52] Bluetooth: hci1: command tx timeout
[  513.815298][ T5959] veth1_macvtap: left promiscuous mode
[  513.830252][ T5959] veth0_macvtap: left promiscuous mode
[  513.846385][ T5959] veth1_vlan: left promiscuous mode
[  513.853301][ T5959] veth0_vlan: left promiscuous mode
[  514.003736][ T5821] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  514.270862][T12047] loop0: detected capacity change from 0 to 512
[  514.279025][T12047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  514.352310][T12047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  514.367697][T12047] System zones: 1-2, 4-12, 8-8
[  514.377438][T12047] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1275: iget: bad i_size value: 38620345925642
[  514.391060][T12047] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1275: couldn't read orphan inode 15 (err -117)
[  514.405852][T12047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.553759][T12051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1275: bg 0: block 5: invalid block bitmap
[  514.575397][T12051] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1116 with error 28
[  514.588175][T12051] EXT4-fs (loop0): This should not happen!! Data will be lost
[  514.588175][T12051] 
[  514.597836][T12051] EXT4-fs (loop0): Total free blocks count 0
[  514.614729][T12051] EXT4-fs (loop0): Free/Dirty block details
[  514.624864][T12051] EXT4-fs (loop0): free_blocks=0
[  514.634986][T12051] EXT4-fs (loop0): dirty_blocks=1116
[  514.655446][T12051] EXT4-fs (loop0): Block reservation details
[  514.665589][T12051] EXT4-fs (loop0): i_reserved_data_blocks=1116
[  514.794303][ T5959] team0 (unregistering): Port device team_slave_1 removed
[  514.859608][ T5959] team0 (unregistering): Port device team_slave_0 removed
[  515.569267][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.080018][T12065] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  516.109413][T12065] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  517.123559][T12037] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  517.136865][T12037] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  517.228168][   T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  517.239116][T12034] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  517.247936][T12034] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  517.416417][T11905] chnl_net:caif_netlink_parms(): no params data found
[  517.448146][   T43] usb 3-1: Using ep0 maxpacket: 32
[  517.479706][   T43] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  517.646949][   T43] usb 3-1: config 0 has no interface number 0
[  517.668685][   T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  517.927160][   T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  517.994774][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.038158][   T43] usb 3-1: Product: syz
[  518.042393][   T43] usb 3-1: Manufacturer: syz
[  518.047881][   T43] usb 3-1: SerialNumber: syz
[  518.085994][   T43] usb 3-1: config 0 descriptor??
[  518.113900][   T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  518.207440][   T43] smsc95xx v2.0.0
[  518.218819][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  518.276842][   T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  518.339334][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  518.399792][   T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  518.435118][   T10] usb 2-1: Product: syz
[  518.440543][   T10] usb 2-1: Manufacturer: syz
[  518.445588][   T10] usb 2-1: SerialNumber: syz
[  518.471202][   T43] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22
[  518.475457][   T10] usb 2-1: config 0 descriptor??
[  518.576842][   T43] usb 3-1: USB disconnect, device number 39
[  518.641732][   T10] usb 2-1: selecting invalid altsetting 0
[  518.673748][T12073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  518.880294][T11905] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.908376][T11905] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.915673][T11905] bridge_slave_0: entered allmulticast mode
[  518.958941][T11905] bridge_slave_0: entered promiscuous mode
[  519.040402][T11905] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.067815][T11905] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.086075][ T5959] IPVS: stop unused estimator thread 0...
[  519.105151][T11905] bridge_slave_1: entered allmulticast mode
[  519.139006][T12099] 9p: Bad value for 'wfdno'
[  519.169954][T11905] bridge_slave_1: entered promiscuous mode
[  519.803579][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.025814][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.101857][T11905] team0: Port device team_slave_0 added
[  520.180085][T11905] team0: Port device team_slave_1 added
[  522.714151][   T43] usb 2-1: USB disconnect, device number 32
[  524.563953][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.571334][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.735882][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.405947][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.418088][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.428259][T12140] 9p: Bad value for 'wfdno'
[  525.985199][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.001084][T12139] netlink: 'syz.0.1296': attribute type 1 has an invalid length.
[  526.009202][T12139] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1296'.
[  526.019434][T12139] NCSI netlink: No device for ifindex 9628930
[  526.262403][T11905] hsr_slave_0: entered promiscuous mode
[  526.290542][T11905] hsr_slave_1: entered promiscuous mode
[  526.310142][T11905] debugfs: 'hsr0' already exists in 'hsr'
[  526.315916][T11905] Cannot create hsr debugfs directory
[  526.598178][ T5948] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  527.422942][T12158] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  527.528562][ T5948] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  527.537730][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.880800][ T5948] usb 3-1: Product: syz
[  527.969641][ T5948] usb 3-1: Manufacturer: syz
[  527.994824][ T5948] usb 3-1: SerialNumber: syz
[  528.056918][ T5948] usb 3-1: config 0 descriptor??
[  528.074686][ T5948] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  528.112144][T11905] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  528.275233][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  528.299239][ T5948] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  528.335109][ T5948] usb 3-1: media controller created
[  528.371855][ T5939] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  528.455733][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'.
[  528.643072][ T5939] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  528.783003][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0
[  528.823237][T11905] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  528.867378][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  528.870068][T11905] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  528.887460][ T5939] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  528.900915][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  528.919001][ T5939] usb 1-1: Product: syz
[  528.925520][ T5939] usb 1-1: Manufacturer: syz
[  528.936110][T11905] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  529.079459][ T5939] usb 1-1: SerialNumber: syz
[  529.105543][ T5948] DVB: Unable to find symbol mt352_attach()
[  529.113827][ T5939] usb 1-1: config 0 descriptor??
[  529.137074][ T5939] usb 1-1: selecting invalid altsetting 0
[  529.284752][T12193] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1307'.
[  529.300557][ T5948] DVB: Unable to find symbol nxt6000_attach()
[  529.323877][ T5948] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  529.341054][T12193] team0: No ports can be present during mode change
[  529.471682][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  529.682162][   T30] audit: type=1804 audit(1762562944.733:26): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1306" name="/newroot/236/file1" dev="fuse" ino=1 res=1 errno=0
[  529.877679][ T5948] dvb-usb: schedule remote query interval to 1000 msecs.
[  529.920379][ T5948] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  529.949073][ T5948] dvb-usb: bulk message failed: -22 (7/0)
[  530.083610][T11905] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.092919][ T5948] dvb-usb: bulk message failed: -22 (7/0)
[  531.325349][ T5948] usb 3-1: USB disconnect, device number 40
[  531.642399][ T5948] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  531.666027][T11123] udevd[11123]: setting owner of /dev/bus/usb/003/040 to uid=0, gid=0 failed: No such file or directory
[  531.759288][   T10] usb 1-1: USB disconnect, device number 28
[  531.795584][   T30] audit: type=1804 audit(1762562946.903:27): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1308" name="/newroot/277/file1" dev="fuse" ino=1 res=1 errno=0
[  531.918354][   T30] audit: type=1800 audit(1762562946.903:28): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1308" name="/" dev="fuse" ino=1 res=0 errno=0
[  531.965360][T11905] 8021q: adding VLAN 0 to HW filter on device team0
[  532.012756][   T30] audit: type=1800 audit(1762562946.953:29): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1306" name="/" dev="fuse" ino=1 res=0 errno=0
[  532.013001][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.040154][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.587015][   T30] audit: type=1804 audit(1762562947.673:30): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1310" name="/newroot/269/file1" dev="fuse" ino=1 res=1 errno=0
[  532.638967][   T30] audit: type=1800 audit(1762562947.673:31): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1310" name="/" dev="fuse" ino=1 res=0 errno=0
[  532.670101][T12216] ªªªªª»: renamed from hsr0 (while UP)
[  533.038367][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.045670][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.298405][ T5902] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  534.461153][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.487100][ T5902] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  534.541179][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'.
[  534.567153][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0
[  534.586892][ T5902] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  534.609694][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  534.635577][ T5902] usb 3-1: Product: syz
[  534.645770][ T5902] usb 3-1: Manufacturer: syz
[  534.658410][ T5902] usb 3-1: SerialNumber: syz
[  534.677845][ T5902] usb 3-1: config 0 descriptor??
[  534.768542][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  534.831609][ T5902] usb 3-1: selecting invalid altsetting 0
[  535.708277][   T10] usb 1-1: Using ep0 maxpacket: 32
[  535.744227][   T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  535.776385][   T10] usb 1-1: config 0 has no interface number 0
[  536.333278][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  536.478493][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.496306][   T10] usb 1-1: Product: syz
[  536.505929][   T10] usb 1-1: Manufacturer: syz
[  536.522853][   T10] usb 1-1: SerialNumber: syz
[  537.133589][   T10] usb 1-1: config 0 descriptor??
[  537.160306][   T10] smsc95xx v2.0.0
[  537.174219][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  537.213447][   T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22
[  537.234273][T11905] veth0_vlan: entered promiscuous mode
[  537.402425][   T10] usb 1-1: USB disconnect, device number 29
[  537.451880][T11905] veth1_vlan: entered promiscuous mode
[  537.491975][T11905] veth0_macvtap: entered promiscuous mode
[  538.128530][ T1208] usb 3-1: USB disconnect, device number 41
[  538.142401][T11905] veth1_macvtap: entered promiscuous mode
[  538.273068][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.355117][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.439111][   T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.480915][   T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.516861][   T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.542274][   T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.465833][T12285] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  540.484387][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.497759][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.648254][T12285] orangefs_mount: mount request failed with -4
[  544.829045][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.836995][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.079228][T12323] loop5: detected capacity change from 0 to 512
[  545.358452][ T5948] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  545.585826][T12323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.598669][T12323] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.712016][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.722494][   T30] audit: type=1800 audit(1762562960.823:32): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1237" name="file2" dev="loop5" ino=16 res=0 errno=0
[  545.753645][ T5948] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  545.773281][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.787926][ T5948] usb 3-1: config 0 descriptor??
[  545.800272][ T5948] pwc: Askey VC010 type 2 USB webcam detected.
[  546.046021][T11905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.341232][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00
[  546.357011][ T5948] pwc: recv_control_msg error -32 req 02 val 2700
[  546.386341][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00
[  546.743378][ T5948] pwc: recv_control_msg error -32 req 04 val 1000
[  546.761358][ T5948] pwc: recv_control_msg error -32 req 04 val 1300
[  546.773882][ T5948] pwc: recv_control_msg error -32 req 04 val 1400
[  546.797221][ T5948] pwc: recv_control_msg error -32 req 02 val 2000
[  546.826667][ T5948] pwc: recv_control_msg error -32 req 02 val 2100
[  546.853255][ T5948] pwc: recv_control_msg error -32 req 04 val 1500
[  546.888678][ T5948] pwc: recv_control_msg error -32 req 02 val 2500
[  547.037057][ T5948] pwc: recv_control_msg error -32 req 02 val 2400
[  547.119628][T12365] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2
[  547.144013][T12365] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€
[  547.278303][ T1208] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  547.287661][ T5948] pwc: recv_control_msg error -71 req 02 val 2900
[  547.308979][ T5948] pwc: recv_control_msg error -71 req 02 val 2800
[  547.320330][ T5948] pwc: recv_control_msg error -71 req 04 val 1100
[  547.334339][ T5948] pwc: recv_control_msg error -71 req 04 val 1200
[  547.362904][ T5948] pwc: Registered as video103.
[  547.386589][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  547.433257][ T5948] usb 3-1: USB disconnect, device number 42
[  547.475020][ T1208] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  547.489986][ T1208] usb 1-1: config 0 interface 0 has no altsetting 0
[  547.537174][ T1208] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  547.560068][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  547.738886][ T1208] usb 1-1: Product: syz
[  547.745890][ T1208] usb 1-1: Manufacturer: syz
[  547.758901][ T1208] usb 1-1: SerialNumber: syz
[  547.774826][ T1208] usb 1-1: config 0 descriptor??
[  547.797575][ T1208] usb 1-1: selecting invalid altsetting 0
[  548.115876][T12362] loop1: detected capacity change from 0 to 32768
[  548.149589][T12362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1347 (12362)
[  548.303711][T12362] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  548.380587][T12362] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  549.244809][T12362] BTRFS info (device loop1): enabling ssd optimizations
[  549.301632][T12362] BTRFS info (device loop1): turning on async discard
[  549.335709][T12420] loop3: detected capacity change from 0 to 512
[  549.346782][T12390] overlayfs: missing 'lowerdir'
[  549.373385][T12362] BTRFS info (device loop1): enabling free space tree
[  549.412682][T12362] BTRFS info (device loop1): use zstd compression, level 3
[  549.472902][T12420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.557855][T12420] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  549.610334][T12400] could not allocate digest TFM handle cryptd(blake2b-160)
[  549.655299][   T30] audit: type=1800 audit(1762562964.763:33): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1355" name="file2" dev="loop3" ino=16 res=0 errno=0
[  549.725858][ T5833] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  550.354851][   T43] usb 1-1: USB disconnect, device number 30
[  550.465508][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.607313][T12440] loop0: detected capacity change from 0 to 2048
[  550.688760][T12440] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  550.781061][T12440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  550.895513][T12456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  551.178706][T12455] overlayfs: missing 'lowerdir'
[  552.188736][T12445] could not allocate digest TFM handle cryptd(blake2b-160)
[  552.679476][T12477] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  552.767188][T12479] 9p: Bad value for 'wfdno'
[  553.668173][ T1208] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  553.828232][ T1208] usb 3-1: Using ep0 maxpacket: 32
[  553.879305][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0
[  553.938736][ T1208] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  553.949942][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.957931][ T1208] usb 3-1: Product: syz
[  553.972576][ T1208] usb 3-1: Manufacturer: syz
[  553.977207][ T1208] usb 3-1: SerialNumber: syz
[  554.705456][ T1208] usb 3-1: config 0 descriptor??
[  555.188298][ T1208] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  555.270276][ T1208] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[  556.162918][T12521] loop5: detected capacity change from 0 to 512
[  556.197414][T12521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  556.243256][T12521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  556.273703][T12521] System zones: 1-12
[  556.297808][T12521] EXT4-fs (loop5): 1 truncate cleaned up
[  556.321473][T12521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.401784][   T30] audit: type=1800 audit(1762562971.513:34): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1374" name="file1" dev="loop5" ino=15 res=0 errno=0
[  556.458949][T12521] loop5: detected capacity change from 512 to 0
[  556.513381][ T1208] usb 3-1: USB disconnect, device number 43
[  557.138914][T11905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.172979][T11905] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  557.196936][T11905] EXT4-fs (loop5): I/O error while writing superblock
[  557.681347][ T5948] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  558.240058][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.300110][ T5948] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[  558.312097][ T5953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.338105][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.468307][T12541] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  558.571357][ T5948] usb 2-1: Product: syz
[  558.777665][T12541] orangefs_mount: mount request failed with -4
[  558.808421][ T5948] usb 2-1: Manufacturer: syz
[  558.818415][ T5948] usb 2-1: SerialNumber: syz
[  558.838980][ T5948] usb 2-1: config 0 descriptor??
[  558.869455][ T5953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.909781][ T5948] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware
[  558.939728][ T5948] usb 2-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2
[  559.005685][ T5948] usb 2-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw
[  559.054468][ T5953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.174886][ T5953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.099884][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  560.112841][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  560.122412][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  560.138542][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  560.153867][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  560.605216][T12564] siw: device registration error -23
[  561.249953][ T5953] bridge_slave_1: left allmulticast mode
[  561.255654][ T5953] bridge_slave_1: left promiscuous mode
[  561.297528][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.878803][ T5953] bridge_slave_0: left allmulticast mode
[  561.903718][ T5953] bridge_slave_0: left promiscuous mode
[  561.920999][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.934654][T12548] loop0: detected capacity change from 0 to 32768
[  561.951100][T12548] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1383 (12548)
[  562.033928][T12548] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  562.074530][T12548] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[  562.178582][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  562.178843][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  562.206282][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  562.253381][   T52] Bluetooth: hci1: command tx timeout
[  562.289111][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  562.298807][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  562.549920][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  562.737913][T12548] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  562.821321][T12548] BTRFS error (device loop0): open_ctree failed: -12
[  562.971437][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  562.980186][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  563.820439][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  564.341430][   T52] Bluetooth: hci1: command tx timeout
[  566.558206][   T52] Bluetooth: hci1: command tx timeout
[  566.694453][ T5924] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  566.858115][ T5924] usb 1-1: Using ep0 maxpacket: 16
[  566.866255][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  566.879217][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  566.894421][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  566.905488][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.913880][ T5924] usb 1-1: Product: syz
[  566.918345][ T5924] usb 1-1: Manufacturer: syz
[  566.922946][ T5924] usb 1-1: SerialNumber: syz
[  566.976022][ T5924] usb 1-1: config 0 descriptor??
[  566.992480][ T5924] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  567.003114][ T5924] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  568.067642][ T5924] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  568.097354][ T5924] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  568.108209][ T5953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  568.124997][T12616] loop0: detected capacity change from 0 to 512
[  568.133510][ T5924] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  568.145964][ T5924] em28xx 1-1:0.0: No AC97 audio processor
[  568.157190][ T5953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  568.213124][ T5953] bond0 (unregistering): Released all slaves
[  568.228276][ T5924] usb 1-1: USB disconnect, device number 31
[  568.247627][ T5924] em28xx 1-1:0.0: Disconnecting em28xx
[  568.263880][ T5924] em28xx 1-1:0.0: Freeing device
[  568.264132][T12616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.478081][T12616] ext4 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  568.554294][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  568.564245][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  568.564271][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  568.564284][   T52] Workqueue: hci4 hci_rx_work
[  568.564307][   T52] Call Trace:
[  568.564316][   T52]  <TASK>
[  568.564325][   T52]  dump_stack_lvl+0x189/0x250
[  568.564358][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.564384][   T52]  ? __pfx__printk+0x10/0x10
[  568.564411][   T52]  ? kernfs_path_from_node+0x250/0x290
[  568.564432][   T52]  ? kernfs_path_from_node+0x2f/0x290
[  568.564457][   T52]  sysfs_create_dir_ns+0x259/0x280
[  568.564481][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  568.564504][   T52]  ? do_raw_spin_unlock+0x122/0x240
[  568.564528][   T52]  kobject_add_internal+0x59f/0xb70
[  568.564563][   T52]  kobject_add+0x155/0x220
[  568.564594][   T52]  ? __pfx_kobject_add+0x10/0x10
[  568.564621][   T52]  ? _raw_spin_unlock+0x28/0x50
[  568.564645][   T52]  ? get_device_parent+0x366/0x3a0
[  568.564677][   T52]  device_add+0x408/0xb80
[  568.564706][   T52]  hci_conn_add_sysfs+0xd5/0x210
[  568.564736][   T52]  le_conn_complete_evt+0xf26/0x14d0
[  568.564768][   T52]  ? hci_event_packet+0x4ab/0x1260
[  568.564795][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  568.564818][   T52]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  568.564841][   T52]  ? __asan_memcpy+0x40/0x70
[  568.564871][   T52]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  568.564894][   T52]  ? skb_pull_data+0xfb/0x200
[  568.564925][   T52]  hci_le_conn_complete_evt+0x187/0x480
[  568.564955][   T52]  hci_event_packet+0x78f/0x1260
[  568.564985][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  568.565010][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  568.565039][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.565066][   T52]  ? hci_send_to_monitor+0xe2/0x590
[  568.565092][   T52]  hci_rx_work+0x45d/0xfc0
[  568.565134][   T52]  ? process_one_work+0x868/0x15d0
[  568.565155][   T52]  process_one_work+0x94a/0x15d0
[  568.565175][   T52]  ? __lock_acquire+0xab9/0xd20
[  568.565219][   T52]  ? __pfx_process_one_work+0x10/0x10
[  568.565250][   T52]  ? assign_work+0x3a1/0x410
[  568.565276][   T52]  worker_thread+0x9b0/0xee0
[  568.565331][   T52]  kthread+0x711/0x8a0
[  568.565352][   T52]  ? __pfx_worker_thread+0x10/0x10
[  568.565374][   T52]  ? __pfx_kthread+0x10/0x10
[  568.565391][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  568.565413][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.565434][   T52]  ? __pfx_kthread+0x10/0x10
[  568.565453][   T52]  ret_from_fork+0x599/0xb30
[  568.565477][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  568.565510][   T52]  ? __switch_to_asm+0x39/0x70
[  568.565526][   T52]  ? __switch_to_asm+0x33/0x70
[  568.565542][   T52]  ? __pfx_kthread+0x10/0x10
[  568.565560][   T52]  ret_from_fork_asm+0x1a/0x30
[  568.565598][   T52]  </TASK>
[  568.565627][   T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  568.645849][ T5825] Bluetooth: hci1: command tx timeout
[  568.689802][   T30] audit: type=1800 audit(1762562983.792:35): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1397" name="file1" dev="loop0" ino=15 res=0 errno=0
[  568.694659][   T52] Bluetooth: hci4: failed to register connection device
[  569.005742][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.753624][T12648] loop0: detected capacity change from 0 to 512
[  570.771473][T12648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  570.802528][T12648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  570.817017][T12648] System zones: 1-2, 4-12, 8-8
[  570.823029][T12648] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1404: iget: bad i_size value: 38620345925642
[  570.839165][T12648] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1404: couldn't read orphan inode 15 (err -117)
[  570.852366][T12648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.958210][ T5825] Bluetooth: hci4: command 0x0405 tx timeout
[  571.120656][T12656] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1404: bg 0: block 5: invalid block bitmap
[  571.151523][T12627] loop3: detected capacity change from 0 to 32768
[  571.162620][T12656] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 780 with error 28
[  571.187454][ T5953] hsr_slave_0: left promiscuous mode
[  571.187806][T12627] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1400 (12627)
[  571.230449][ T5953] hsr_slave_1: left promiscuous mode
[  571.236704][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.253214][T12656] EXT4-fs (loop0): This should not happen!! Data will be lost
[  571.253214][T12656] 
[  571.270954][T12627] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  571.290544][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.308229][T12656] EXT4-fs (loop0): Total free blocks count 0
[  571.322759][T12656] EXT4-fs (loop0): Free/Dirty block details
[  571.337743][T12627] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  571.339807][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.397722][T12656] EXT4-fs (loop0): free_blocks=0
[  571.403997][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.452464][T12656] EXT4-fs (loop0): dirty_blocks=780
[  571.485632][T12627] BTRFS info (device loop3): enabling ssd optimizations
[  571.505604][T12627] BTRFS info (device loop3): turning on async discard
[  571.516817][T12656] EXT4-fs (loop0): Block reservation details
[  571.525646][T12627] BTRFS info (device loop3): enabling free space tree
[  571.531361][ T5953] veth1_macvtap: left promiscuous mode
[  571.540769][T12627] BTRFS info (device loop3): use zstd compression, level 3
[  571.563715][T12656] EXT4-fs (loop0): i_reserved_data_blocks=780
[  571.618127][ T5953] veth0_macvtap: left promiscuous mode
[  571.653586][ T5953] veth1_vlan: left promiscuous mode
[  571.674033][ T5953] veth0_vlan: left promiscuous mode
[  571.883809][ T5826] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  571.889929][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.004903][T12682] siw: device registration error -23
[  572.895053][T12691] netlink: 'syz.2.1408': attribute type 3 has an invalid length.
[  575.374409][ T5953] team0 (unregistering): Port device team_slave_1 removed
[  575.427347][ T5953] team0 (unregistering): Port device team_slave_0 removed
[  576.041678][T12556] chnl_net:caif_netlink_parms(): no params data found
[  581.549863][T12556] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.557083][T12556] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.631708][T12556] bridge_slave_0: entered allmulticast mode
[  581.666676][T12556] bridge_slave_0: entered promiscuous mode
[  581.699115][T12556] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.726776][T12556] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.767438][T12556] bridge_slave_1: entered allmulticast mode
[  581.815205][T12556] bridge_slave_1: entered promiscuous mode
[  581.838560][ T5878] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  582.035286][ T5878] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  582.119455][   T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  582.326009][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0
[  582.361259][ T5878] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  582.384374][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.401582][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  582.415195][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.433485][T12739] could not allocate digest TFM handle cryptd(blake2b-160)
[  582.455870][ T5878] usb 1-1: Product: syz
[  582.465787][ T5878] usb 1-1: Manufacturer: syz
[  582.476182][ T5878] usb 1-1: SerialNumber: syz
[  582.505964][   T43] usb 4-1: config index 0 descriptor too short (expected 133, got 72)
[  582.517284][ T5878] usb 1-1: config 0 descriptor??
[  582.534224][   T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  582.552139][T12556] team0: Port device team_slave_0 added
[  582.566162][ T5878] usb 1-1: selecting invalid altsetting 0
[  582.571552][T12556] team0: Port device team_slave_1 added
[  582.588321][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.596929][   T43] usb 4-1: Product: syz
[  582.614499][   T43] usb 4-1: Manufacturer: syz
[  582.625855][   T43] usb 4-1: SerialNumber: syz
[  586.785023][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.888975][   T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  586.913100][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.039279][ T5878] usb 1-1: USB disconnect, device number 32
[  587.428150][ T5902] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  587.437801][   T43] usb 4-1: USB disconnect, device number 31
[  587.500520][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.519634][   T43] usb 4-1: ath9k_htc: USB layer deinitialized
[  587.684141][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.717079][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.804966][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.840659][T12780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  587.928484][ T5909] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  588.134539][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.168324][ T5909] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  588.274011][ T5909] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  588.332182][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8
[  588.351409][ T5909] usb 3-1: Product: syz
[  588.355634][ T5909] usb 3-1: Manufacturer: syz
[  588.382369][ T5909] usb 3-1: SerialNumber: syz
[  588.400004][T12556] hsr_slave_0: entered promiscuous mode
[  588.414583][ T5909] usb 3-1: config 0 descriptor??
[  588.538756][T12556] hsr_slave_1: entered promiscuous mode
[  588.569446][T12556] debugfs: 'hsr0' already exists in 'hsr'
[  588.577244][T12556] Cannot create hsr debugfs directory
[  589.149264][ T1208] usb 3-1: USB disconnect, device number 44
[  590.029526][T12796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  591.232439][T12783] loop1: detected capacity change from 0 to 32768
[  591.265483][T12783] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1425 (12783)
[  591.564572][ T5909] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  591.604494][T12818] 9p: Bad value for 'rfdno'
[  591.658151][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  591.769815][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.895566][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  591.901398][   T10] usb 4-1: config index 0 descriptor too short (expected 133, got 72)
[  591.968825][ T5909] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  592.087119][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.095008][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  592.213700][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.234502][ T5909] usb 1-1: config 0 descriptor??
[  592.238083][   T10] usb 4-1: Product: syz
[  592.255840][   T10] usb 4-1: Manufacturer: syz
[  592.277052][   T10] usb 4-1: SerialNumber: syz
[  592.380991][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  595.595061][ T5902] usb 1-1: USB disconnect, device number 33
[  595.617564][T12833] loop2: detected capacity change from 0 to 2048
[  595.626129][ T5924] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  595.640526][T12556] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  595.688925][T12833] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  595.719637][T12556] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  595.764615][T12833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  595.787682][T12556] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  595.791313][ T5924] usb 4-1: ath9k_htc: USB layer deinitialized
[  595.851388][T12839] bond0: (slave team0): Releasing backup interface
[  595.889174][   T10] usb 4-1: USB disconnect, device number 32
[  595.920383][T12841] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1438'.
[  595.975781][T12839] bridge_slave_0: left allmulticast mode
[  596.005149][T12839] bridge_slave_0: left promiscuous mode
[  596.019340][T12839] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.056698][T12839] bridge_slave_1: left allmulticast mode
[  596.066431][T12839] bridge_slave_1: left promiscuous mode
[  596.076496][T12839] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.127003][T12839] bond0: (slave bond_slave_0): Releasing backup interface
[  596.159337][T12839] bond0: (slave bond_slave_1): Releasing backup interface
[  596.625952][T12839] team0: Port device team_slave_0 removed
[  596.696469][T12839] team0: Port device team_slave_1 removed
[  596.717352][T12839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.766936][T12839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.800107][T12839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.817013][T12839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.859500][T12839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  596.898371][T12556] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  597.018230][T12841] team0: Mode changed to "loadbalance"
[  597.625762][   T30] audit: type=1804 audit(1762563012.712:36): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1444" name="/newroot/295/file1" dev="fuse" ino=1 res=1 errno=0
[  597.913793][   T30] audit: type=1800 audit(1762563012.722:37): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1444" name="/" dev="fuse" ino=1 res=0 errno=0
[  598.398182][   T30] audit: type=1804 audit(1762563013.492:38): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1443" name="/newroot/305/file1" dev="fuse" ino=1 res=1 errno=0
[  598.474097][T12556] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.495663][   T30] audit: type=1800 audit(1762563013.492:39): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1443" name="/" dev="fuse" ino=1 res=0 errno=0
[  598.559253][T12556] 8021q: adding VLAN 0 to HW filter on device team0
[  598.590264][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.597559][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.648268][ T5902] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  598.676102][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.683388][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.809941][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.838231][ T5902] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  598.872088][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.891617][ T1208] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  599.060687][ T5902] usb 4-1: config 0 descriptor??
[  599.085564][ T1208] usb 1-1: Using ep0 maxpacket: 32
[  599.167640][ T5902] pwc: Askey VC010 type 2 USB webcam detected.
[  599.171226][ T1208] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  599.251154][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.359076][ T1208] usb 1-1: config 0 descriptor??
[  599.409352][ T1208] gspca_main: sunplus-2.14.0 probing 041e:400b
[  599.508169][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00
[  599.516215][ T5902] pwc: recv_control_msg error -32 req 02 val 2700
[  599.526602][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00
[  599.534570][ T5902] pwc: recv_control_msg error -32 req 04 val 1000
[  599.556238][ T5902] pwc: recv_control_msg error -32 req 04 val 1300
[  599.570679][ T5902] pwc: recv_control_msg error -32 req 04 val 1400
[  599.580922][ T5902] pwc: recv_control_msg error -32 req 02 val 2000
[  599.591122][ T5902] pwc: recv_control_msg error -32 req 02 val 2100
[  599.606718][ T5902] pwc: recv_control_msg error -32 req 04 val 1500
[  599.614969][ T5902] pwc: recv_control_msg error -32 req 02 val 2500
[  599.626786][ T5902] pwc: recv_control_msg error -32 req 02 val 2400
[  599.653150][ T5902] pwc: recv_control_msg error -32 req 02 val 2600
[  599.666584][ T5902] pwc: recv_control_msg error -71 req 02 val 2900
[  599.707155][ T5902] pwc: recv_control_msg error -71 req 02 val 2800
[  599.731933][ T5902] pwc: recv_control_msg error -71 req 04 val 1100
[  599.752994][ T5902] pwc: recv_control_msg error -71 req 04 val 1200
[  599.765567][T12899] ubi31: attaching mtd0
[  599.793626][ T5902] pwc: Registered as video103.
[  599.878122][T12899] ubi31: scanning is finished
[  599.883537][T12899] ubi31: empty MTD device detected
[  599.884684][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22
[  600.147552][ T1208] gspca_sunplus: reg_r err -32
[  600.152842][ T1208] sunplus 1-1:0.0: probe with driver sunplus failed with error -32
[  600.190388][ T1208] usb 1-1: USB disconnect, device number 34
[  600.232307][ T5902] usb 4-1: USB disconnect, device number 33
[  600.283874][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.456095][T12899] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  600.755486][T12915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  602.736638][T12556] veth0_vlan: entered promiscuous mode
[  602.886336][T12556] veth1_vlan: entered promiscuous mode
[  604.021937][T12940] sp0: Synchronizing with TNC
[  605.086648][T12556] veth0_macvtap: entered promiscuous mode
[  605.124113][T12556] veth1_macvtap: entered promiscuous mode
[  605.188440][T12950] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  605.229865][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.294996][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  606.048244][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  606.244632][ T5878] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  606.942224][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.998771][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.040559][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  607.071600][ T7007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.097739][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.189067][T12959] fuse: Bad value for 'fd'
[  607.247280][ T7007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.269729][ T5878] usb 1-1: config 0 descriptor??
[  607.294713][ T5878] pwc: Askey VC010 type 2 USB webcam detected.
[  607.622447][ T7007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.637441][ T7007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.709039][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.721166][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.771494][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00
[  607.779267][ T5878] pwc: recv_control_msg error -32 req 02 val 2700
[  607.786507][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00
[  607.794097][ T5878] pwc: recv_control_msg error -32 req 04 val 1000
[  607.808901][ T5878] pwc: recv_control_msg error -32 req 04 val 1300
[  607.816110][ T5878] pwc: recv_control_msg error -32 req 04 val 1400
[  607.826346][ T5878] pwc: recv_control_msg error -32 req 02 val 2000
[  607.835211][ T5878] pwc: recv_control_msg error -32 req 02 val 2100
[  607.846760][ T5878] pwc: recv_control_msg error -32 req 04 val 1500
[  607.855870][ T5878] pwc: recv_control_msg error -32 req 02 val 2500
[  607.863205][ T5878] pwc: recv_control_msg error -32 req 02 val 2400
[  607.879100][ T5878] pwc: recv_control_msg error -32 req 02 val 2600
[  607.886043][ T5878] pwc: recv_control_msg error -71 req 02 val 2900
[  607.917433][ T5878] pwc: recv_control_msg error -71 req 02 val 2800
[  607.944275][ T5878] pwc: recv_control_msg error -71 req 04 val 1100
[  607.969203][ T5878] pwc: recv_control_msg error -71 req 04 val 1200
[  607.993451][ T5878] pwc: Registered as video103.
[  608.031229][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23
[  608.092921][ T5878] usb 1-1: USB disconnect, device number 35
[  608.178657][ T1208] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  608.409768][ T1208] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  608.421599][ T1208] usb 7-1: config 0 interface 0 has no altsetting 0
[  608.433580][ T1208] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  608.453292][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  608.472620][ T1208] usb 7-1: Product: syz
[  608.497587][ T1208] usb 7-1: Manufacturer: syz
[  608.524888][ T1208] usb 7-1: SerialNumber: syz
[  608.571535][ T1208] usb 7-1: config 0 descriptor??
[  609.166658][ T1208] usb 7-1: selecting invalid altsetting 0
[  612.198263][T12998] usb 7-1: USB disconnect, device number 2
[  612.326254][T13010] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  612.344134][   T30] audit: type=1804 audit(1762563027.449:40): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1471" name="/newroot/301/file1" dev="fuse" ino=1 res=1 errno=0
[  612.466860][   T30] audit: type=1800 audit(1762563027.449:41): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1471" name="/" dev="fuse" ino=1 res=0 errno=0
[  612.996781][   T30] audit: type=1804 audit(1762563028.059:42): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1476" name="/newroot/306/file1" dev="fuse" ino=1 res=1 errno=0
[  613.071041][T13023] sp0: Synchronizing with TNC
[  613.595510][   T30] audit: type=1800 audit(1762563028.089:43): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1476" name="/" dev="fuse" ino=1 res=0 errno=0
[  614.428467][   T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  614.569972][T13036] netlink: 'syz.3.1479': attribute type 3 has an invalid length.
[  614.623893][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.009600][   T30] audit: type=1804 audit(1762563030.109:44): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1478" name="/newroot/303/file1" dev="fuse" ino=1 res=1 errno=0
[  615.099807][   T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  615.278854][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.317017][   T30] audit: type=1800 audit(1762563030.109:45): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1478" name="/" dev="fuse" ino=1 res=0 errno=0
[  615.338695][   T43] usb 3-1: config 0 descriptor??
[  615.363264][   T43] pwc: Askey VC010 type 2 USB webcam detected.
[  615.541861][T13045] loop1: detected capacity change from 0 to 2048
[  615.588496][T13045] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  615.620593][T13045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  615.781293][   T43] pwc: recv_control_msg error -32 req 02 val 2b00
[  615.840196][   T43] pwc: recv_control_msg error -32 req 02 val 2700
[  615.878763][   T43] pwc: recv_control_msg error -32 req 02 val 2c00
[  615.894819][   T43] pwc: recv_control_msg error -32 req 04 val 1000
[  615.909160][   T43] pwc: recv_control_msg error -32 req 04 val 1300
[  616.060599][   T43] pwc: recv_control_msg error -32 req 04 val 1400
[  616.077027][   T43] pwc: recv_control_msg error -32 req 02 val 2000
[  616.175820][T13059] siw: device registration error -23
[  616.698446][   T43] pwc: recv_control_msg error -32 req 02 val 2100
[  616.811016][   T43] pwc: recv_control_msg error -32 req 04 val 1500
[  616.880308][   T43] pwc: recv_control_msg error -32 req 02 val 2500
[  616.900460][   T43] pwc: recv_control_msg error -32 req 02 val 2400
[  617.086694][T13062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  617.200239][T13069] netlink: 'syz.1.1486': attribute type 3 has an invalid length.
[  617.598182][   T43] pwc: recv_control_msg error -71 req 02 val 2900
[  617.701983][   T43] pwc: recv_control_msg error -71 req 02 val 2800
[  617.730546][T13062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1484'.
[  617.745582][   T43] pwc: recv_control_msg error -71 req 04 val 1100
[  617.776088][   T43] pwc: recv_control_msg error -71 req 04 val 1200
[  617.814377][T13062] team0: Unable to change to the same mode the team is in
[  617.841403][   T43] pwc: Registered as video103.
[  617.891239][   T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  617.978505][   T43] usb 3-1: USB disconnect, device number 45
[  618.298383][   T30] audit: type=1804 audit(1762563033.369:46): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1488" name="/newroot/3/file1" dev="fuse" ino=1 res=1 errno=0
[  618.633667][   T30] audit: type=1800 audit(1762563033.379:47): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1488" name="/" dev="fuse" ino=1 res=0 errno=0
[  619.287194][ T5948] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  619.390520][ T5948] usb 2-1: USB disconnect, device number 33
[  619.439444][T13091] siw: device registration error -23
[  619.641819][T13093] loop6: detected capacity change from 0 to 2048
[  619.677859][T13093] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  619.735773][ T5948] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  619.757861][T13093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.930154][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.978181][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  620.275529][ T5948] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  620.415815][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8
[  620.440212][ T5948] usb 2-1: Product: syz
[  620.449710][ T5948] usb 2-1: Manufacturer: syz
[  620.466819][ T5948] usb 2-1: SerialNumber: syz
[  620.524135][ T5948] usb 2-1: config 0 descriptor??
[  620.602704][ T5948] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  621.040817][   T30] audit: type=1804 audit(1762563036.149:48): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1495" name="/newroot/306/file1" dev="fuse" ino=1 res=1 errno=0
[  621.113273][ T5878] usb 2-1: USB disconnect, device number 34
[  621.155192][   T30] audit: type=1800 audit(1762563036.189:49): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1495" name="/" dev="fuse" ino=1 res=0 errno=0
[  621.926909][T13129] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1500'.
[  621.975568][T13126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  622.068287][T13129] team0: Unable to change to the same mode the team is in
[  624.295955][T13156] loop6: detected capacity change from 0 to 2048
[  624.315838][T13156] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  624.367868][T13156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  624.405626][   T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  624.452023][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  624.459695][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  624.562688][   T10] usb 1-1: Using ep0 maxpacket: 16
[  624.590300][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  624.622853][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  624.691703][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  624.718745][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  624.740236][   T10] usb 1-1: SerialNumber: syz
[  625.743243][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1509'.
[  626.243812][T13182] Process accounting resumed
[  626.336081][   T43] usb 1-1: USB disconnect, device number 36
[  627.759812][T13204] loop1: detected capacity change from 0 to 2048
[  627.869452][T13213] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  628.268219][T13204] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  628.307184][   T30] audit: type=1804 audit(1762563043.409:50): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1515" name="/newroot/317/file1" dev="fuse" ino=1 res=1 errno=0
[  628.350909][T13204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  628.438962][   T30] audit: type=1800 audit(1762563043.409:51): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1515" name="/" dev="fuse" ino=1 res=0 errno=0
[  630.194651][T13239] ubi31: attaching mtd0
[  630.243884][T13239] ubi31: scanning is finished
[  630.338161][T12762] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  630.537389][T12762] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  630.595726][T12762] usb 4-1: config 0 interface 0 has no altsetting 0
[  630.634961][T12762] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  630.654754][T12762] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  630.706650][T12762] usb 4-1: Product: syz
[  630.728414][T12762] usb 4-1: Manufacturer: syz
[  630.734117][T13247] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  630.758786][T12762] usb 4-1: SerialNumber: syz
[  630.785773][T12762] usb 4-1: config 0 descriptor??
[  631.228728][T12762] usb 4-1: selecting invalid altsetting 0
[  632.057901][T13241] loop1: detected capacity change from 0 to 32768
[  632.138114][T13239] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  632.152959][T13241] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1523 (13241)
[  632.171388][T13239] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  632.195862][T13241] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  632.266607][T13239] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  632.274517][T13241] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  632.322260][T13239] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  632.354517][T13239] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  632.385094][T13239] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  632.393601][T13239] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1025141908
[  632.405136][T13239] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  632.471173][T13254] ubi31: background thread "ubi_bgt31d" started, PID 13254
[  632.776429][T13241] BTRFS info (device loop1): enabling ssd optimizations
[  632.828106][T13241] BTRFS info (device loop1): turning on async discard
[  632.835018][T13241] BTRFS info (device loop1): enabling free space tree
[  632.842731][T13241] BTRFS info (device loop1): use zstd compression, level 3
[  633.125729][ T1208] usb 4-1: USB disconnect, device number 34
[  633.519003][ T5833] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  633.752663][T13281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  639.548291][   T30] audit: type=1804 audit(1762563054.656:52): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1540" name="/newroot/289/file1" dev="fuse" ino=1 res=1 errno=0
[  639.595455][T13311] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  639.794274][T13323] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  639.848525][T13323] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  641.109446][T13340] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  642.390986][T13354] loop3: detected capacity change from 0 to 512
[  642.414150][T13354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  642.490901][T13354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  642.570611][T13354] System zones: 1-2, 4-12, 8-8
[  642.649137][T13354] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1552: iget: bad i_size value: 38620345925642
[  642.718685][T13354] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1552: couldn't read orphan inode 15 (err -117)
[  642.761075][T13354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.072377][T13369] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1552: bg 0: block 5: invalid block bitmap
[  643.114467][T13369] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 416 with error 28
[  643.333824][T13369] EXT4-fs (loop3): This should not happen!! Data will be lost
[  643.333824][T13369] 
[  643.633299][T13369] EXT4-fs (loop3): Total free blocks count 0
[  643.658600][T13369] EXT4-fs (loop3): Free/Dirty block details
[  643.664616][T13369] EXT4-fs (loop3): free_blocks=0
[  643.672223][T13369] EXT4-fs (loop3): dirty_blocks=428
[  643.677555][T13369] EXT4-fs (loop3): Block reservation details
[  643.691989][T13369] EXT4-fs (loop3): i_reserved_data_blocks=428
[  643.775009][  T991] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 416 with max blocks 12 with error 28
[  644.433079][T13375] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  644.949703][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'.
[  652.035582][T13423] loop2: detected capacity change from 0 to 512
[  652.317119][T13423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.347753][T13423] ext4 filesystem being mounted at /329/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  653.196852][   T30] audit: type=1800 audit(1762563068.306:53): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="file1" dev="loop2" ino=15 res=0 errno=0
[  653.318895][   T30] audit: type=1800 audit(1762563068.436:54): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="file2" dev="loop2" ino=16 res=0 errno=0
[  653.510213][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.782146][T13411] loop0: detected capacity change from 0 to 32768
[  653.839642][T13411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1569 (13411)
[  653.921972][T13443] capability: warning: `syz.2.1577' uses deprecated v2 capabilities in a way that may be insecure
[  655.515962][T13463] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe
[  655.538114][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  655.708049][   T10] usb 3-1: Using ep0 maxpacket: 32
[  655.731817][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.748041][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.767345][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  655.803006][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  655.833790][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.998513][   T10] usb 3-1: config 0 descriptor??
[  656.612308][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input25
[  656.821963][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input26
[  657.009834][   T10] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  657.168538][   T10] usb 3-1: USB disconnect, device number 46
[  657.333403][T13478] fido_id[13478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  657.469697][   T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  657.766107][   T43] usb 2-1: config 0 has no interfaces?
[  657.978572][   T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  658.117413][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.157239][   T43] usb 2-1: Product: syz
[  658.163162][   T43] usb 2-1: Manufacturer: syz
[  658.177864][   T43] usb 2-1: SerialNumber: syz
[  658.214036][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'.
[  658.219513][   T43] usb 2-1: config 0 descriptor??
[  658.689408][T13496] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  659.004526][T13496] bond1 (unregistering): Released all slaves
[  660.714368][ T5948] usb 2-1: USB disconnect, device number 35
[  661.433485][ T5948] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  661.493991][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  661.600235][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  661.672106][ T5948] usb 4-1: Using ep0 maxpacket: 32
[  661.690040][ T5948] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  661.704945][ T5948] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  661.859450][ T5948] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  661.935820][ T5948] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  662.053205][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0
[  662.157328][ T5948] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  662.177426][ T5948] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  662.206647][ T5948] usb 4-1: Product: syz
[  662.224074][ T5948] usb 4-1: Manufacturer: syz
[  662.238774][ T5948] usb 4-1: SerialNumber: syz
[  662.254280][ T5948] usb 4-1: config 0 descriptor??
[  662.309049][ T5948] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  662.330402][ T5948] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  662.761616][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.785687][T12746] usb 4-1: USB disconnect, device number 35
[  662.787139][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  662.813448][T12746] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  662.870420][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.928446][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  662.976923][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.045161][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.091891][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.178523][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.407580][T12746] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  663.624537][T12746] usb 4-1: Using ep0 maxpacket: 32
[  663.646660][T12746] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  663.924331][T12746] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  663.976772][T12746] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  664.109435][T12746] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  664.202196][T12746] usb 4-1: config 0 interface 0 has no altsetting 0
[  664.237355][T12746] usb 4-1: string descriptor 0 read error: -71
[  664.257371][T12746] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  664.289844][T13574] syzkaller0: entered promiscuous mode
[  664.315471][T13574] syzkaller0: entered allmulticast mode
[  664.325520][T12746] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  664.350313][T12746] usb 4-1: config 0 descriptor??
[  664.357118][T12746] usb 4-1: can't set config #0, error -71
[  664.372865][T12746] usb 4-1: USB disconnect, device number 36
[  664.397882][ T6298] udevd[6298]: setting mode of /dev/bus/usb/004/036 to 020664 failed: No such file or directory
[  664.486477][ T6298] udevd[6298]: setting owner of /dev/bus/usb/004/036 to uid=0, gid=0 failed: No such file or directory
[  665.058846][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'.
[  665.348912][T13592] vim2m vim2m.0: vidioc_s_fmt queue busy
[  667.769314][T13621] syzkaller0: entered promiscuous mode
[  667.775174][T13621] syzkaller0: entered allmulticast mode
[  668.085645][   T30] audit: type=1326 audit(1762563083.196:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.6.1626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53aff8f6c9 code=0x0
[  668.296774][T13641] tipc: Started in network mode
[  668.302250][T13641] tipc: Node identity 2ee3b23f497e, cluster identity 4711
[  668.310125][T13641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  668.321229][T13641] syzkaller0: entered promiscuous mode
[  668.327176][T13641] syzkaller0: entered allmulticast mode
[  668.349171][ T5939] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  668.406556][T13641] tipc: Resetting bearer <eth:syzkaller0>
[  668.423163][T13639] tipc: Resetting bearer <eth:syzkaller0>
[  668.454116][T13639] tipc: Disabling bearer <eth:syzkaller0>
[  668.545416][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  668.559027][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  668.583645][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  668.615417][ T5939] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  668.633938][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.683225][T13654] loop7: detected capacity change from 0 to 16384
[  668.698793][ T5939] usb 1-1: config 0 descriptor??
[  668.789160][T13654] loop7: detected capacity change from 16384 to 16383
[  669.808448][ T5939] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  670.178623][ T5939] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  670.368416][T13551] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  670.509177][ T5939] usb 4-1: config 0 has no interfaces?
[  670.518185][ T5939] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  670.558140][T13551] usb 2-1: Using ep0 maxpacket: 8
[  670.566398][T13551] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.585598][T13551] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  670.595667][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.616972][ T5939] usb 4-1: Product: syz
[  670.621904][T13551] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  670.644612][ T5939] usb 4-1: Manufacturer: syz
[  670.664406][ T5939] usb 4-1: SerialNumber: syz
[  670.672716][T13551] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  670.687175][ T5939] usb 4-1: config 0 descriptor??
[  670.697828][T13551] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  670.711453][T13551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.752530][T13551] hub 2-1:1.0: bad descriptor, ignoring hub
[  670.763965][T13551] hub 2-1:1.0: probe with driver hub failed with error -5
[  670.773442][T13551] cdc_wdm 2-1:1.0: skipping garbage
[  670.780658][T13551] cdc_wdm 2-1:1.0: skipping garbage
[  670.793180][T13551] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[  670.800702][T13551] cdc_wdm 2-1:1.0: Unknown control protocol
[  671.253175][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.263458][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.520153][ T5878] usb 1-1: USB disconnect, device number 37
[  671.582473][ T5939] usb 2-1: USB disconnect, device number 36
[  672.066692][   T30] audit: type=1326 audit(1762563087.176:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.192426][   T30] audit: type=1326 audit(1762563087.176:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.267112][   T30] audit: type=1326 audit(1762563087.216:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.373693][   T30] audit: type=1326 audit(1762563087.216:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.434281][   T30] audit: type=1326 audit(1762563087.216:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.497571][ T5902] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  672.526235][   T30] audit: type=1326 audit(1762563087.216:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.670937][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.688157][   T30] audit: type=1326 audit(1762563087.216:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.720850][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  672.785478][T13707] IPVS: length: 218 != 24
[  672.794961][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.798348][   T30] audit: type=1326 audit(1762563087.216:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  672.844331][ T5902] usb 2-1: config 0 descriptor??
[  672.952637][   T30] audit: type=1326 audit(1762563087.216:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.129511][   T30] audit: type=1326 audit(1762563087.236:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.188718][   T30] audit: type=1326 audit(1762563087.256:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.190303][T13715] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  673.237511][   T30] audit: type=1326 audit(1762563087.256:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.336666][   T30] audit: type=1326 audit(1762563087.256:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.380064][ T5902] logitech-hidpp-device 0003:046D:C086.0008: item fetching failed at offset 0/3
[  673.432869][ T5902] logitech-hidpp-device 0003:046D:C086.0008: hidpp_probe:parse failed
[  673.459475][ T5902] logitech-hidpp-device 0003:046D:C086.0008: probe with driver logitech-hidpp-device failed with error -22
[  673.549855][   T30] audit: type=1326 audit(1762563087.256:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.597078][ T5902] usb 2-1: USB disconnect, device number 37
[  673.609316][ T5939] usb 4-1: USB disconnect, device number 37
[  673.625333][   T30] audit: type=1326 audit(1762563087.276:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.651919][   T30] audit: type=1326 audit(1762563087.276:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.738160][   T30] audit: type=1326 audit(1762563087.286:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  673.899379][   T30] audit: type=1326 audit(1762563087.286:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  674.089163][T13731] loop6: detected capacity change from 0 to 524288000
[  674.134145][   T30] audit: type=1326 audit(1762563087.286:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f94eeb8f6c9 code=0x7ffc0000
[  674.792868][T13736] support for the xor transformation has been removed.
[  675.785032][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1655'.
[  675.866487][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1655'.
[  676.618823][T13763] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1656'.
[  678.084648][T13788] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  678.230116][T13793] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  678.266161][T13786] loop7: detected capacity change from 16383 to 0
[  678.294439][    C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2
[  678.621655][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1667'.
[  681.656242][T13836] batman_adv: batadv0: Adding interface: dummy0
[  681.694344][T13836] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.849841][T13836] batman_adv: batadv0: Interface activated: dummy0
[  682.853157][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  685.531539][ T5878] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  685.708234][ T5878] usb 4-1: Using ep0 maxpacket: 16
[  685.731575][ T5878] usb 4-1: config 0 has no interfaces?
[  685.754883][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  685.787353][ T5878] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  685.827774][ T5878] usb 4-1: Manufacturer: syz
[  685.853430][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  685.861108][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  685.910235][ T5878] usb 4-1: config 0 descriptor??
[  686.350156][T13885] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  686.357040][T13885] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  686.443012][T13873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  686.598761][T13885] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  686.631792][T13885] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  686.811604][T13873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  688.124908][T13913] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1693'.
[  688.239082][T13913] batman_adv: batadv0: Interface deactivated: dummy0
[  688.411684][T13164] Bluetooth: hci4: command 0x0405 tx timeout
[  688.639994][T13164] Bluetooth: hci1: command 0x0406 tx timeout
[  688.728204][T13913] batman_adv: batadv0: Removing interface: dummy0
[  689.483065][ T5878] usb 4-1: USB disconnect, device number 38
[  690.478119][T13164] Bluetooth: hci4: command 0x0405 tx timeout
[  691.389313][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'.
[  692.058518][T13984] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  692.388326][ T5939] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  692.431117][T13992] binder: 13985:13992 ioctl c0306201 200000000180 returned -22
[  692.561475][ T5939] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  692.573838][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.586467][ T5939] usb 7-1: config 0 has no interface number 0
[  692.605502][T13164] Bluetooth: hci4: command 0x0405 tx timeout
[  692.676476][ T5939] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  692.687049][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.696377][ T5939] usb 7-1: Product: syz
[  692.701628][ T5939] usb 7-1: Manufacturer: syz
[  692.706621][ T5939] usb 7-1: SerialNumber: syz
[  692.721429][ T5939] usb 7-1: config 0 descriptor??
[  692.800871][ T5939] ims_pcu 7-1:0.41: Missing CDC union descriptor
[  692.807617][ T5939] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22
[  693.199144][T13970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1699'.
[  693.988111][T14012] loop7: detected capacity change from 0 to 16383
[  694.753940][T14025] syzkaller0: entered promiscuous mode
[  694.760181][T14025] syzkaller0: entered allmulticast mode
[  695.793254][ T5878] usb 7-1: USB disconnect, device number 3
[  696.118079][T12998] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  696.278990][T12998] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  696.529373][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.612652][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.668398][ T5939] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  696.693328][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  696.712032][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.731733][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.788185][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  696.806553][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.841156][ T5939] usb 7-1: config 0 has no interfaces?
[  696.847245][ T5939] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  696.864812][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.901810][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.928290][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  696.966270][ T5939] usb 7-1: config 0 descriptor??
[  697.008167][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.031049][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.055729][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.125215][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.163195][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.207706][ T5878] usb 7-1: USB disconnect, device number 4
[  697.238223][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.281332][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.326454][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.382261][T14064] syzkaller0: entered promiscuous mode
[  697.388343][T14064] syzkaller0: entered allmulticast mode
[  697.401679][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.459895][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.488373][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.543481][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.589560][T12998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.612871][T12998] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.648808][T12998] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.691023][T12998] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  697.708102][T12998] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  697.739061][T12998] usb 1-1: Product: syz
[  697.743907][T12998] usb 1-1: Manufacturer: syz
[  697.770339][T12998] usb 1-1: SerialNumber: syz
[  697.807114][T12998] usb 1-1: config 0 descriptor??
[  697.856276][T12998] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  698.238752][T12998] usb 1-1: USB disconnect, device number 38
[  698.264134][T12998] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  698.337726][T14083] tipc: Started in network mode
[  698.344446][T14083] tipc: Node identity 46634028ab56, cluster identity 4711
[  698.389075][T14083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  698.403919][T14083] syzkaller0: entered promiscuous mode
[  698.412211][T14083] syzkaller0: entered allmulticast mode
[  698.435363][T14083] tipc: Resetting bearer <eth:syzkaller0>
[  698.445513][T14080] tipc: Resetting bearer <eth:syzkaller0>
[  698.489618][T14080] tipc: Disabling bearer <eth:syzkaller0>
[  699.899291][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  699.899305][   T30] audit: type=1800 audit(1762563115.006:122): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1748" name="bus" dev="ramfs" ino=35850 res=0 errno=0
[  699.944589][   T43] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  700.160314][   T43] usb 2-1: config 0 has no interfaces?
[  700.176564][   T43] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  700.198970][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.293265][   T43] usb 2-1: config 0 descriptor??
[  700.522257][T12998] usb 2-1: USB disconnect, device number 38
[  701.169279][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'.
[  701.569306][T14141] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1762'.
[  701.670489][T14138] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  701.677927][T14138] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  703.521693][T13164] Bluetooth: hci4: command 0x0405 tx timeout
[  703.758536][T13164] Bluetooth: hci1: command 0x0406 tx timeout
[  707.358196][T14224] ------------[ cut here ]------------
[  707.366529][T14224] WARNING: arch/x86/kvm/x86.c:13965 at kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0, CPU#1: syz.2.1781/14224
[  707.380334][T14224] Modules linked in:
[  707.385160][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.2.1781 Not tainted syzkaller #0 PREEMPT(full) 
[  707.394863][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  707.405719][T14224] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.414316][T14224] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00
[  707.437615][T14224] RSP: 0018:ffffc90003247460 EFLAGS: 00010283
[  707.445590][T14224] RAX: ffffffff81479ee8 RBX: ffff88807efa5280 RCX: 0000000000080000
[  707.454488][T14224] RDX: ffffc90010135000 RSI: 0000000000001f72 RDI: 0000000000001f73
[  707.463201][T14224] RBP: ffffc900032474e8 R08: ffff88807efa52bf R09: 1ffff1100fdf4a57
[  707.472821][T14224] R10: dffffc0000000000 R11: ffffed100fdf4a58 R12: 1ffff92000648e8c
[  707.482108][T14224] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  707.490682][T14224] FS:  00007f6e105d56c0(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000
[  707.499939][T14224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  707.506747][T14224] CR2: 00007f53b0e9ef98 CR3: 00000000571c6000 CR4: 00000000003526f0
[  707.515922][T14224] Call Trace:
[  707.519453][T14224]  <TASK>
[  707.522751][T14224]  ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10
[  707.530539][T14224]  ? __pfx_handle_ept_violation+0x10/0x10
[  707.537001][T14224]  kvm_check_async_pf_completion+0x102/0x3c0
[  707.545352][T14224]  ? kvm_service_local_tlb_flush_requests+0xed/0x130
[  707.553039][T14224]  vcpu_run+0x26be/0x7760
[  707.557742][T14224]  ? vcpu_run+0x364e/0x7760
[  707.562859][T14224]  ? __pfx_vcpu_run+0x10/0x10
[  707.568604][T14224]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  707.574799][T14224]  ? rcu_is_watching+0x15/0xb0
[  707.580483][T14224]  kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0
[  707.586674][T14224]  ? __mutex_trylock_common+0x153/0x260
[  707.592950][T14224]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  707.599215][T14224]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  707.607194][T14224]  ? rcu_is_watching+0x15/0xb0
[  707.612997][T14224]  ? trace_contention_end+0x39/0x120
[  707.619587][T14224]  ? look_up_lock_class+0x74/0x170
[  707.625506][T14224]  ? register_lock_class+0x51/0x320
[  707.631204][T14224]  ? __lock_acquire+0xab9/0xd20
[  707.637069][T14224]  kvm_vcpu_ioctl+0x99a/0xed0
[  707.642660][T14224]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  707.649709][T14224]  ? __fget_files+0x2a/0x420
[  707.655661][T14224]  ? __fget_files+0x3a0/0x420
[  707.661474][T14224]  ? __fget_files+0x2a/0x420
[  707.666892][T14224]  ? bpf_lsm_file_ioctl+0x9/0x20
[  707.673902][T14224]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  707.680312][T14224]  __se_sys_ioctl+0xfc/0x170
[  707.685223][T14224]  do_syscall_64+0xfa/0xfa0
[  707.690699][T14224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.697227][T14224]  ? clear_bhb_loop+0x60/0xb0
[  707.702171][T14224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.709086][T14224] RIP: 0033:0x7f6e1238f6c9
[  707.714528][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  707.737554][T14224] RSP: 002b:00007f6e105d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.746940][T14224] RAX: ffffffffffffffda RBX: 00007f6e125e6180 RCX: 00007f6e1238f6c9
[  707.755729][T14224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  707.764827][T14224] RBP: 00007f6e12411f91 R08: 0000000000000000 R09: 0000000000000000
[  707.776075][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.785101][T14224] R13: 00007f6e125e6218 R14: 00007f6e125e6180 R15: 00007ffcc384a018
[  707.796088][T14224]  </TASK>
[  707.799348][T14224] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  707.807467][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.2.1781 Not tainted syzkaller #0 PREEMPT(full) 
[  707.817535][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  707.828835][T14224] Call Trace:
[  707.832303][T14224]  <TASK>
[  707.835598][T14224]  dump_stack_lvl+0x99/0x250
[  707.841033][T14224]  ? __asan_memcpy+0x40/0x70
[  707.845902][T14224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  707.851828][T14224]  ? __pfx__printk+0x10/0x10
[  707.857134][T14224]  vpanic+0x237/0x6d0
[  707.861785][T14224]  ? __pfx_vpanic+0x10/0x10
[  707.867778][T14224]  ? is_bpf_text_address+0x292/0x2b0
[  707.873884][T14224]  ? is_bpf_text_address+0x26/0x2b0
[  707.879771][T14224]  panic+0xb9/0xc0
[  707.884076][T14224]  ? __pfx_panic+0x10/0x10
[  707.889344][T14224]  __warn+0x334/0x4c0
[  707.893808][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.901761][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.909898][T14224]  report_bug+0x2be/0x4f0
[  707.914391][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.922142][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.929483][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1ab/0x2f0
[  707.937253][T14224]  handle_bug+0x84/0x160
[  707.942831][T14224]  exc_invalid_op+0x1a/0x50
[  707.948063][T14224]  asm_exc_invalid_op+0x1a/0x20
[  707.953678][T14224] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  707.961783][T14224] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00
[  707.983666][T14224] RSP: 0018:ffffc90003247460 EFLAGS: 00010283
[  707.990384][T14224] RAX: ffffffff81479ee8 RBX: ffff88807efa5280 RCX: 0000000000080000
[  707.999029][T14224] RDX: ffffc90010135000 RSI: 0000000000001f72 RDI: 0000000000001f73
[  708.008297][T14224] RBP: ffffc900032474e8 R08: ffff88807efa52bf R09: 1ffff1100fdf4a57
[  708.018078][T14224] R10: dffffc0000000000 R11: ffffed100fdf4a58 R12: 1ffff92000648e8c
[  708.027381][T14224] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  708.036090][T14224]  ? kvm_arch_can_dequeue_async_page_present+0x1a8/0x2f0
[  708.044601][T14224]  ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10
[  708.053410][T14224]  ? __pfx_handle_ept_violation+0x10/0x10
[  708.059446][T14224]  kvm_check_async_pf_completion+0x102/0x3c0
[  708.066174][T14224]  ? kvm_service_local_tlb_flush_requests+0xed/0x130
[  708.073493][T14224]  vcpu_run+0x26be/0x7760
[  708.078171][T14224]  ? vcpu_run+0x364e/0x7760
[  708.083127][T14224]  ? __pfx_vcpu_run+0x10/0x10
[  708.087929][T14224]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  708.093782][T14224]  ? rcu_is_watching+0x15/0xb0
[  708.098933][T14224]  kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0
[  708.104957][T14224]  ? __mutex_trylock_common+0x153/0x260
[  708.111247][T14224]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  708.117447][T14224]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  708.124338][T14224]  ? rcu_is_watching+0x15/0xb0
[  708.129483][T14224]  ? trace_contention_end+0x39/0x120
[  708.134999][T14224]  ? look_up_lock_class+0x74/0x170
[  708.140319][T14224]  ? register_lock_class+0x51/0x320
[  708.146506][T14224]  ? __lock_acquire+0xab9/0xd20
[  708.151498][T14224]  kvm_vcpu_ioctl+0x99a/0xed0
[  708.156397][T14224]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  708.162331][T14224]  ? __fget_files+0x2a/0x420
[  708.167363][T14224]  ? __fget_files+0x3a0/0x420
[  708.172163][T14224]  ? __fget_files+0x2a/0x420
[  708.176993][T14224]  ? bpf_lsm_file_ioctl+0x9/0x20
[  708.182206][T14224]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  708.187582][T14224]  __se_sys_ioctl+0xfc/0x170
[  708.192374][T14224]  do_syscall_64+0xfa/0xfa0
[  708.197245][T14224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.203495][T14224]  ? clear_bhb_loop+0x60/0xb0
[  708.208620][T14224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.214750][T14224] RIP: 0033:0x7f6e1238f6c9
[  708.219639][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  708.241184][T14224] RSP: 002b:00007f6e105d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  708.250515][T14224] RAX: ffffffffffffffda RBX: 00007f6e125e6180 RCX: 00007f6e1238f6c9
[  708.260332][T14224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  708.269013][T14224] RBP: 00007f6e12411f91 R08: 0000000000000000 R09: 0000000000000000
[  708.277531][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  708.286584][T14224] R13: 00007f6e125e6218 R14: 00007f6e125e6180 R15: 00007ffcc384a018
[  708.296506][T14224]  </TASK>
[  708.300251][T14224] Kernel Offset: disabled
[  708.305039][T14224] Rebooting in 86400 seconds..