last executing test programs:

10.988058842s ago: executing program 0 (id=2742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xa0ef)
close(0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'})

10.853858008s ago: executing program 0 (id=2744):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)

10.57188964s ago: executing program 0 (id=2749):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

10.468849657s ago: executing program 0 (id=2752):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0x2e, 0x30, 0x61]}}, 0x0, 0x2a}, 0x28)

10.246153676s ago: executing program 0 (id=2755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0)

9.8978829s ago: executing program 0 (id=2762):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @remote, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
socket$inet6(0xa, 0x2, 0x3a)

2.08366727s ago: executing program 3 (id=2814):
socket(0x2, 0x2, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x92020007)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

2.046048436s ago: executing program 1 (id=2815):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

1.960094433s ago: executing program 4 (id=2816):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
unlinkat(r0, &(0x7f0000002000)='./bus\x00', 0x200)

1.862542907s ago: executing program 2 (id=2817):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000280)="0f23b00fb2900200f20f2a4b720f01c866b8110000000f23c00f21f8663503000d000f23f8baa00066ed0f20c06635000004000f22c00f2120670fc77105baf80c66b8ee2ad98866efbafc0ced", 0x4d}], 0x1, 0x80, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup(r0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x7, 0x7, 0x1, 0x4, 0x2, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x73, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x7, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x12, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xa, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x5, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)

1.810413298s ago: executing program 1 (id=2818):
unshare(0x8040400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000fe5000/0x3000)=nil})

1.776490241s ago: executing program 4 (id=2819):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setresgid(0x0, r1, r1)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

1.65601924s ago: executing program 3 (id=2820):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6e, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x672}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.468744636s ago: executing program 4 (id=2821):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r1)
recvmmsg$unix(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020)
write$FUSE_DIRENT(r3, &(0x7f0000000180)=ANY=[], 0x100)

1.37977521s ago: executing program 1 (id=2822):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.274936956s ago: executing program 2 (id=2823):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x8c0bd000)

1.060316563s ago: executing program 3 (id=2824):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x404, &(0x7f0000000140)={[{@xino_auto, 0x0}], [], 0x2c})

950.282517ms ago: executing program 1 (id=2825):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0f7887d7000f21ddba612ced6766c7442400695e00006766c7442402a5c9f6dd6766c744240600000000670f011424f20f78d200c3c54c090f20d90fc79e4a6bda302e260fc43d00", 0x48}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

899.693281ms ago: executing program 2 (id=2826):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0)

812.527996ms ago: executing program 3 (id=2827):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

644.005322ms ago: executing program 2 (id=2828):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
unlinkat(r0, &(0x7f0000002000)='./bus\x00', 0x200)

572.061299ms ago: executing program 3 (id=2829):
socket(0x2, 0x2, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x92020007)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

571.912325ms ago: executing program 4 (id=2830):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setresgid(0x0, r1, r1)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

422.175114ms ago: executing program 1 (id=2831):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffd, 0x0, 0x0, 0x0, 0x90000000, 0x1, 0x4}})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x101, 0x4, 0x10001, 0xffff1c0b, r2}, 0x10)

408.232299ms ago: executing program 2 (id=2832):
unshare(0x400)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setresgid(0xee00, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r5, 0x0, 0x1800, 0x8)

293.037488ms ago: executing program 4 (id=2833):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '[}\x00'})

180.34964ms ago: executing program 1 (id=2834):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x10}, 0x18)

179.555995ms ago: executing program 3 (id=2835):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xe, 0x0, 0x0, 0xb, 0x19, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x7, 0x2000000000001]}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/fscaps', 0x40000, 0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3)

140.218022ms ago: executing program 2 (id=2836):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000206d901080000000000000000050000001b605c2061acdeb90d6ddb357516798caade2b4be2ee824c5be190ce3c256da011d9f1591d716944baaa66df76e631fc437dfa4d35f447adccdafec6e52a1b"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x6, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 4 (id=2837):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0)

kernel console output (not intermixed with test programs):

Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  571.857741][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  571.867915][    T9] usb 4-1: USB disconnect, device number 21
[  572.040026][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  572.790539][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  572.990053][    T9] quatech2 4-1:0.51: device disconnected
[  573.930936][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  574.089481][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  574.108666][T10200] sctp: failed to load transform for md5: -2
[  574.259201][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  574.734041][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.984384][    T9] usb 1-1: config 0 descriptor??
[  575.128200][    T9] cp210x 1-1:0.0: cp210x converter detected
[  576.075854][    T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  576.096364][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.650064][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.734403][T10234] xt_CT: No such helper "netbios-ns"
[  576.806310][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[  579.038514][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  579.047839][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  579.375566][   T10] usb 1-1: USB disconnect, device number 17
[  579.430855][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  579.529898][   T10] cp210x 1-1:0.0: device disconnected
[  579.639585][T10263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'.
[  588.014198][T10318] xt_CT: No such helper "netbios-ns"
[  590.033829][ T5824] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  590.584452][ T5824] usb 3-1: Using ep0 maxpacket: 16
[  590.604646][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.629191][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  590.649514][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.686115][ T5824] usb 3-1: config 0 descriptor??
[  590.717438][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43
[  590.993123][T10361] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  591.239872][ T5190] bcm5974 3-1:0.0: could not read from device
[  591.271875][T10366] kernel profiling enabled (shift: 17)
[  592.132027][ T7505] Bluetooth: hci5: Frame reassembly failed (-84)
[  592.159629][ T5190] bcm5974 3-1:0.0: could not read from device
[  592.309058][ T5190] bcm5974 3-1:0.0: could not read from device
[  592.360655][T10368] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  592.496722][ T5824] usb 3-1: USB disconnect, device number 17
[  592.578083][ T5190] bcm5974 3-1:0.0: could not read from device
[  593.149799][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  593.239739][ T5922] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  594.221443][ T5922] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  594.231657][ T5922] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  594.249689][ T5922] usb 3-1: config 0 has no interface number 0
[  594.269185][ T5922] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  594.284944][ T5922] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  594.441790][ T5922] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  594.454284][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.449174][ T5922] usb 3-1: config 0 descriptor??
[  596.896147][ T5922] usb 3-1: USB disconnect, device number 18
[  597.079787][ T5824] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  597.510578][T10401] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1208'.
[  597.575311][ T5824] usb 4-1: config 0 has an invalid interface number: 194 but max is 0
[  597.956334][ T5824] usb 4-1: config 0 has no interface number 0
[  598.003816][ T5824] usb 4-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30
[  598.064018][ T5824] usb 4-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  598.199387][ T5824] usb 4-1: config 0 interface 194 has no altsetting 0
[  598.240201][ T5824] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  598.273781][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.309407][ T5824] usb 4-1: Product: syz
[  598.313768][ T5824] usb 4-1: Manufacturer: syz
[  598.334045][ T5824] usb 4-1: SerialNumber: syz
[  598.350904][ T5824] usb 4-1: config 0 descriptor??
[  598.848989][ T5824] peak_usb 4-1:0.194: probe with driver peak_usb failed with error 194
[  598.879255][ T5824] usb 4-1: USB disconnect, device number 22
[  602.859442][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  603.071061][ T5922] usb 2-1: Using ep0 maxpacket: 16
[  603.289475][ T5922] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  603.429689][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.467924][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  603.488115][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  603.789934][ T5922] usb 2-1: SerialNumber: syz
[  603.837238][ T5922] hub 2-1:1.0: bad descriptor, ignoring hub
[  603.851108][ T5922] hub 2-1:1.0: probe with driver hub failed with error -5
[  604.580319][ T5922] usb 2-1: USB disconnect, device number 12
[  604.929450][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  605.859478][ T5922] usb 2-1: Using ep0 maxpacket: 16
[  606.031521][ T5922] usb 2-1: device descriptor read/all, error -71
[  606.405193][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1226'.
[  606.439249][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'.
[  607.044080][T10482] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  608.479554][T10497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1229'.
[  608.498516][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'.
[  612.118784][T10533] loop2: detected capacity change from 0 to 7
[  612.173517][T10533] Dev loop2: unable to read RDB block 7
[  612.209562][T10533]  loop2: AHDI p2 p3
[  612.214721][T10533] loop2: partition table partially beyond EOD, truncated
[  612.234432][T10533] loop2: p3 start 335544320 is beyond EOD, truncated
[  614.464504][T10552] FAULT_INJECTION: forcing a failure.
[  614.464504][T10552] name failslab, interval 1, probability 0, space 0, times 0
[  614.489088][T10552] CPU: 0 UID: 0 PID: 10552 Comm: syz.3.1245 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  614.489125][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  614.489139][T10552] Call Trace:
[  614.489149][T10552]  <TASK>
[  614.489157][T10552]  dump_stack_lvl+0x189/0x250
[  614.489187][T10552]  ? __pfx____ratelimit+0x10/0x10
[  614.489210][T10552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.489234][T10552]  ? __pfx__printk+0x10/0x10
[  614.489265][T10552]  ? __pfx___might_resched+0x10/0x10
[  614.489284][T10552]  ? fs_reclaim_acquire+0x7d/0x100
[  614.489315][T10552]  should_fail_ex+0x414/0x560
[  614.489342][T10552]  should_failslab+0xa8/0x100
[  614.489367][T10552]  __kmalloc_cache_noprof+0x70/0x3d0
[  614.489388][T10552]  ? alloc_pipe_info+0xe9/0x4d0
[  614.489415][T10552]  alloc_pipe_info+0xe9/0x4d0
[  614.489452][T10552]  splice_direct_to_actor+0xa5d/0xcc0
[  614.489476][T10552]  ? __lock_acquire+0xab9/0xd20
[  614.489506][T10552]  ? __lock_acquire+0xab9/0xd20
[  614.489520][T10552]  ? __pfx_direct_splice_actor+0x10/0x10
[  614.489536][T10552]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  614.489560][T10552]  do_splice_direct+0x181/0x270
[  614.489578][T10552]  ? __pfx_do_splice_direct+0x10/0x10
[  614.489595][T10552]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  614.489614][T10552]  ? bpf_lsm_file_permission+0x9/0x20
[  614.489632][T10552]  ? security_file_permission+0x75/0x290
[  614.489651][T10552]  ? rw_verify_area+0x258/0x650
[  614.489678][T10552]  do_sendfile+0x4da/0x7e0
[  614.489696][T10552]  ? __pfx_vfs_write+0x10/0x10
[  614.489715][T10552]  ? __pfx_do_sendfile+0x10/0x10
[  614.489734][T10552]  ? __fget_files+0x3a0/0x420
[  614.489759][T10552]  __se_sys_sendfile64+0x13e/0x190
[  614.489780][T10552]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  614.489796][T10552]  ? rcu_is_watching+0x15/0xb0
[  614.489817][T10552]  ? do_syscall_64+0xbe/0x3b0
[  614.489837][T10552]  do_syscall_64+0xfa/0x3b0
[  614.489853][T10552]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.489869][T10552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.489885][T10552]  ? clear_bhb_loop+0x60/0xb0
[  614.489904][T10552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.489919][T10552] RIP: 0033:0x7f007078ebe9
[  614.489933][T10552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.489947][T10552] RSP: 002b:00007f0071537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  614.489963][T10552] RAX: ffffffffffffffda RBX: 00007f00709b6180 RCX: 00007f007078ebe9
[  614.489976][T10552] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  614.489991][T10552] RBP: 00007f0071537090 R08: 0000000000000000 R09: 0000000000000000
[  614.490004][T10552] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[  614.490017][T10552] R13: 00007f00709b6218 R14: 00007f00709b6180 R15: 00007fff900f2dc8
[  614.490051][T10552]  </TASK>
[  615.487106][T10560] netlink: 'syz.1.1249': attribute type 5 has an invalid length.
[  617.698166][T10575] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1253'.
[  618.782310][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1258'.
[  618.791938][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'.
[  627.992525][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'.
[  628.815627][ T5824] kernel write not supported for file /snd/seq (pid: 5824 comm: kworker/1:3)
[  628.923008][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'.
[  630.209997][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  630.216412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  630.447151][    T9] IPVS: starting estimator thread 0...
[  630.550476][T10660] IPVS: using max 37 ests per chain, 88800 per kthread
[  633.149485][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  633.344389][    T9] usb 3-1: Using ep0 maxpacket: 32
[  633.374427][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  633.406266][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  633.443207][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  633.496099][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  634.224299][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  634.238098][    T9] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  634.358589][ T5922] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  634.389777][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.397871][    T9] usb 3-1: Product: syz
[  634.603183][    T9] usb 3-1: Manufacturer: syz
[  634.700548][    T9] usb 3-1: SerialNumber: syz
[  634.823128][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.907236][    T9] usb 3-1: config 0 descriptor??
[  634.935469][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0
[  634.946821][T10700] xt_CT: No such helper "netbios-ns"
[  634.966530][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48
[  634.988860][ T5922] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  634.998905][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.019715][ T5922] usb 5-1: Product: syz
[  635.023969][ T5922] usb 5-1: Manufacturer: syz
[  635.028612][ T5922] usb 5-1: SerialNumber: syz
[  635.061630][ T5922] usb 5-1: config 0 descriptor??
[  636.040391][T10706] overlayfs: conflicting lowerdir path
[  636.343368][ T5922] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  636.390706][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  636.431130][ T5922] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  636.470340][ T5922] usb 5-1: media controller created
[  636.554334][ T5824] usb 3-1: USB disconnect, device number 19
[  636.595288][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  637.255082][T10717] netlink: 'syz.2.1292': attribute type 1 has an invalid length.
[  637.345760][T10717] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.438226][ T5922] DVB: Unable to find symbol tda10046_attach()
[  637.446979][ T5922] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  637.460443][ T5922] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  637.487870][ T5922] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  637.631166][ T5922] usb 5-1: USB disconnect, device number 17
[  637.839443][ T5942] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  637.854267][T10723] bond0: (slave gretap1): making interface the new active one
[  637.885310][T10723] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  638.074007][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short
[  638.127256][ T5942] usb 1-1: config 6 has an invalid interface number: 88 but max is 0
[  638.917755][ T5942] usb 1-1: config 6 has no interface number 0
[  639.251005][ T5942] usb 1-1: config 6 interface 88 has no altsetting 0
[  639.483632][ T5942] usb 1-1: New USB device found, idVendor=12d1, idProduct=0081, bcdDevice=af.d5
[  639.677534][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.900013][ T5942] usb 1-1: Product: syz
[  639.907081][ T5942] usb 1-1: Manufacturer: syz
[  639.959396][ T5942] usb 1-1: SerialNumber: syz
[  641.005675][ T5942] usb-storage 1-1:6.88: USB Mass Storage device detected
[  641.307048][T10764] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1302'.
[  642.174537][    T9] usb 1-1: USB disconnect, device number 18
[  643.386000][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  644.704926][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  644.892473][ T5908] usb 3-1: Using ep0 maxpacket: 16
[  644.911351][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  645.245025][ T5908] usb 3-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  645.262675][ T5908] usb 3-1: config 1 interface 0 has no altsetting 0
[  645.278874][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  645.288778][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  645.300695][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'.
[  645.314226][ T5908] usb 3-1: SerialNumber: syz
[  645.614670][T10798] macsec1: entered allmulticast mode
[  645.629949][T10798] macvlan1: entered allmulticast mode
[  645.630895][ T5908] usb 3-1: bad CDC descriptors
[  645.643733][T10798] veth1_vlan: entered allmulticast mode
[  645.730575][T10798] macvlan1: left allmulticast mode
[  645.735863][T10798] veth1_vlan: left allmulticast mode
[  645.835102][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.850302][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  645.874976][T10779] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  645.909660][ T5922] usb 3-1: USB disconnect, device number 20
[  646.130105][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  646.269562][    T9] usb 2-1: device descriptor read/64, error -71
[  646.776369][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  646.909474][    T9] usb 2-1: device descriptor read/64, error -71
[  647.902841][    T9] usb usb2-port1: attempt power cycle
[  647.950577][ T5851] Bluetooth: hci0: command tx timeout
[  648.496494][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'.
[  648.561247][T10829] team0: entered promiscuous mode
[  648.587010][T10829] team_slave_0: entered promiscuous mode
[  648.619803][T10829] team_slave_1: entered promiscuous mode
[  648.641546][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  648.652521][T10829] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  648.690175][    T9] usb 2-1: device descriptor read/8, error -71
[  648.713898][T10829] team0: left promiscuous mode
[  648.751623][T10829] team_slave_0: left promiscuous mode
[  648.808632][T10829] team_slave_1: left promiscuous mode
[  649.044314][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  649.396228][T10837] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1324'.
[  649.509420][    T9] usb 2-1: device not accepting address 18, error -71
[  650.303522][    T9] usb usb2-port1: unable to enumerate USB device
[  650.732807][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  650.742087][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  651.041363][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'.
[  651.132300][T10846] syz_tun: entered promiscuous mode
[  651.143817][T10846] syz_tun: left promiscuous mode
[  651.170913][T10849] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1329'.
[  651.621072][T10857] /dev/sg0: Can't lookup blockdev
[  652.085658][T10862] netlink: 'syz.4.1334': attribute type 1 has an invalid length.
[  652.093575][T10862] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1334'.
[  652.093696][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'.
[  652.156380][ T5851] Bluetooth: hci3: unexpected event for opcode 0x200a
[  653.583294][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'.
[  653.622621][T10876] FAULT_INJECTION: forcing a failure.
[  653.622621][T10876] name failslab, interval 1, probability 0, space 0, times 0
[  653.663329][T10876] CPU: 0 UID: 0 PID: 10876 Comm: syz.2.1339 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  653.663357][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  653.663368][T10876] Call Trace:
[  653.663375][T10876]  <TASK>
[  653.663383][T10876]  dump_stack_lvl+0x189/0x250
[  653.663409][T10876]  ? __pfx____ratelimit+0x10/0x10
[  653.663428][T10876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  653.663447][T10876]  ? __pfx__printk+0x10/0x10
[  653.663474][T10876]  ? __pfx___might_resched+0x10/0x10
[  653.663493][T10876]  ? fs_reclaim_acquire+0x7d/0x100
[  653.663519][T10876]  should_fail_ex+0x414/0x560
[  653.663542][T10876]  should_failslab+0xa8/0x100
[  653.663563][T10876]  __kmalloc_cache_noprof+0x70/0x3d0
[  653.663580][T10876]  ? route4_change+0x3a5/0x20d0
[  653.663605][T10876]  route4_change+0x3a5/0x20d0
[  653.663635][T10876]  ? __pfx_route4_change+0x10/0x10
[  653.663674][T10876]  tc_new_tfilter+0xdca/0x15b0
[  653.663715][T10876]  ? __pfx_tc_new_tfilter+0x10/0x10
[  653.663729][T10876]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  653.663777][T10876]  ? __pfx_tc_new_tfilter+0x10/0x10
[  653.663792][T10876]  rtnetlink_rcv_msg+0x7cc/0xb70
[  653.663819][T10876]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  653.663849][T10876]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  653.663870][T10876]  ? ref_tracker_free+0x63a/0x7d0
[  653.663887][T10876]  ? __copy_skb_header+0xa7/0x550
[  653.663905][T10876]  ? __pfx_ref_tracker_free+0x10/0x10
[  653.663924][T10876]  ? __skb_clone+0x63/0x7a0
[  653.663947][T10876]  netlink_rcv_skb+0x205/0x470
[  653.663972][T10876]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  653.663996][T10876]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  653.664032][T10876]  ? netlink_deliver_tap+0x2e/0x1b0
[  653.664055][T10876]  ? netlink_deliver_tap+0x2e/0x1b0
[  653.664085][T10876]  netlink_unicast+0x75c/0x8e0
[  653.664117][T10876]  netlink_sendmsg+0x805/0xb30
[  653.664151][T10876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.664182][T10876]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  653.664200][T10876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.664225][T10876]  __sock_sendmsg+0x21c/0x270
[  653.664249][T10876]  ____sys_sendmsg+0x505/0x830
[  653.664281][T10876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  653.664316][T10876]  ? import_iovec+0x74/0xa0
[  653.664343][T10876]  ___sys_sendmsg+0x21f/0x2a0
[  653.664376][T10876]  ? __pfx____sys_sendmsg+0x10/0x10
[  653.664435][T10876]  ? __fget_files+0x2a/0x420
[  653.664453][T10876]  ? __fget_files+0x3a0/0x420
[  653.664482][T10876]  __x64_sys_sendmsg+0x19b/0x260
[  653.664511][T10876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  653.664547][T10876]  ? __pfx_ksys_write+0x10/0x10
[  653.664561][T10876]  ? rcu_is_watching+0x15/0xb0
[  653.664584][T10876]  ? do_syscall_64+0xbe/0x3b0
[  653.664607][T10876]  do_syscall_64+0xfa/0x3b0
[  653.664625][T10876]  ? lockdep_hardirqs_on+0x9c/0x150
[  653.664643][T10876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.664660][T10876]  ? clear_bhb_loop+0x60/0xb0
[  653.664681][T10876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.664698][T10876] RIP: 0033:0x7fe54df8ebe9
[  653.664713][T10876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  653.664729][T10876] RSP: 002b:00007fe54ee8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.664747][T10876] RAX: ffffffffffffffda RBX: 00007fe54e1b5fa0 RCX: 00007fe54df8ebe9
[  653.664759][T10876] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003
[  653.664771][T10876] RBP: 00007fe54ee8d090 R08: 0000000000000000 R09: 0000000000000000
[  653.664782][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.664792][T10876] R13: 00007fe54e1b6038 R14: 00007fe54e1b5fa0 R15: 00007ffde95f2d28
[  653.664820][T10876]  </TASK>
[  654.352858][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  654.454675][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  654.463933][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  654.624831][   T10] usb 5-1: Using ep0 maxpacket: 8
[  654.811295][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.822564][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  654.894792][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[  654.904482][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.936264][   T10] usb 5-1: Product: syz
[  654.936570][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'.
[  654.958607][   T10] usb 5-1: Manufacturer: syz
[  654.969373][   T10] usb 5-1: SerialNumber: syz
[  654.987670][   T10] usb 5-1: config 0 descriptor??
[  655.411647][T10898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.422569][T10898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.883004][ T5922] usb 5-1: USB disconnect, device number 18
[  658.370496][T10908] loop2: detected capacity change from 0 to 7
[  658.401319][T10908] Dev loop2: unable to read RDB block 7
[  658.421701][T10908]  loop2: AHDI p2 p3
[  658.589597][T10908] loop2: partition table partially beyond EOD, truncated
[  658.608991][T10908] loop2: p3 start 335544320 is beyond EOD, truncated
[  659.925644][T10920] loop2: detected capacity change from 0 to 7
[  659.942354][T10920] Dev loop2: unable to read RDB block 7
[  659.997247][T10920]  loop2: AHDI p2 p3
[  660.006687][T10920] loop2: partition table partially beyond EOD, truncated
[  660.206533][T10920] loop2: p3 start 335544320 is beyond EOD, truncated
[  660.518668][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  661.379487][   T10] usb 1-1: Using ep0 maxpacket: 32
[  661.397461][   T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  661.406343][   T10] usb 1-1: config 0 has no interface number 0
[  661.417031][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  661.428992][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.599429][   T10] usb 1-1: Product: syz
[  661.623336][   T10] usb 1-1: Manufacturer: syz
[  661.645834][   T10] usb 1-1: SerialNumber: syz
[  661.682480][   T10] usb 1-1: config 0 descriptor??
[  661.702671][   T10] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  661.736830][   T10] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  661.986071][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.027974][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.247910][   T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  662.775983][   T10] usbhid 1-1:0.35: couldn't find an input interrupt endpoint
[  662.849804][   T10] usb 1-1: USB disconnect, device number 19
[  663.062727][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'.
[  663.078884][T10952] syz_tun: entered promiscuous mode
[  663.239746][    T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  663.270229][T10952] syz_tun: left promiscuous mode
[  663.662861][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  663.739756][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  663.774833][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  663.796754][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.829369][    T9] usb 5-1: Product: syz
[  663.846832][    T9] usb 5-1: Manufacturer: syz
[  663.866155][    T9] usb 5-1: SerialNumber: syz
[  664.104413][    T9] usb 5-1: 0:2 : does not exist
[  664.116246][    T9] usb 5-1: unit 6 not found!
[  664.194345][    T9] usb 5-1: USB disconnect, device number 19
[  664.219767][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  664.820075][ T5922] usb 1-1: Using ep0 maxpacket: 16
[  664.823426][T10311] udevd[10311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  664.851827][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  664.924527][ T5922] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  664.972498][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.194112][ T5922] usb 1-1: config 0 descriptor??
[  665.493762][T10967] netlink: 'syz.2.1367': attribute type 1 has an invalid length.
[  665.501639][T10967] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1367'.
[  666.316805][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  666.360653][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1364'.
[  667.167848][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.177011][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.332866][ T5922] usbhid 1-1:0.0: can't add hid device: -71
[  667.338985][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  667.354919][ T5922] usb 1-1: USB disconnect, device number 20
[  667.908930][    T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  668.072788][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  668.095446][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  668.135398][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  668.149774][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  668.158899][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.171390][    T9] usb 3-1: Product: syz
[  668.175627][    T9] usb 3-1: Manufacturer: syz
[  668.182576][    T9] usb 3-1: SerialNumber: syz
[  668.241244][    T9] usb 3-1: config 0 descriptor??
[  668.249803][T10974] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  668.257193][T10974] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  668.320465][    T9] usb 3-1: ucan: probing device on interface #0
[  668.679123][T10995] SET target dimension over the limit!
[  669.662732][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.684281][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  670.222480][    T9] ucan 3-1:0.0: probe with driver ucan failed with error -71
[  670.326170][    T9] usb 3-1: USB disconnect, device number 21
[  670.871314][T11014] netlink: 'syz.3.1380': attribute type 1 has an invalid length.
[  670.879098][T11014] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1380'.
[  675.310004][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  675.610420][    T9] usb 1-1: Using ep0 maxpacket: 16
[  675.870366][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.063395][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  676.104337][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.150156][    T9] usb 1-1: config 0 descriptor??
[  676.183809][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49
[  676.445794][T11057] i2c i2c-0: Invalid block write size 34
[  676.464855][ T5190] bcm5974 1-1:0.0: could not read from device
[  676.465209][ T9938] usb 1-1: USB disconnect, device number 21
[  676.560043][T11045] bcm5974 1-1:0.0: could not read from device
[  676.769028][T11060] netlink: 'syz.3.1394': attribute type 1 has an invalid length.
[  676.776869][T11060] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1394'.
[  676.919604][T10345] bcm5974 1-1:0.0: could not read from device
[  677.031462][T11070] sg_write: data in/out 830110031/299 bytes for SCSI command 0xd1-- guessing data in;
[  677.031462][T11070]    program syz.1.1386 not setting count and/or reply_len properly
[  681.841047][T11110] SET target dimension over the limit!
[  683.419528][ T7799] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  683.587434][ T7799] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  683.752842][ T7799] usb 3-1: config 0 has no interface number 0
[  683.762895][ T7799] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  683.794418][ T7799] usb 3-1: config 0 interface 200 has no altsetting 0
[  683.808351][ T7799] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  683.839446][ T7799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.848879][ T7799] usb 3-1: Product: syz
[  683.859339][ T7799] usb 3-1: Manufacturer: syz
[  683.869105][ T7799] usb 3-1: SerialNumber: syz
[  683.900066][ T7799] usb 3-1: config 0 descriptor??
[  685.864468][ T7799] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input50
[  686.073710][ T7799] usb 3-1: USB disconnect, device number 22
[  686.335056][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1413'.
[  686.960116][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'.
[  687.387482][T11156] Cannot find add_set index 0 as target
[  687.669174][T11148] syz_tun: entered promiscuous mode
[  687.797929][T11148] syz_tun: left promiscuous mode
[  688.513317][T11175] netlink: 'syz.4.1421': attribute type 4 has an invalid length.
[  688.617878][T11175] netlink: 'syz.4.1421': attribute type 4 has an invalid length.
[  689.192446][T11175] syz.4.1421 (11175) used greatest stack depth: 19488 bytes left
[  691.312191][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.319687][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.730443][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  691.903612][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  691.935422][T11181] batman_adv: batadv0: Interface deactivated: dummy0
[  692.968491][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.844570][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.152122][T11181] veth1_vlan: left allmulticast mode
[  694.172313][T11181] macvlan0: left promiscuous mode
[  694.250903][T11181] macvlan0: left allmulticast mode
[  694.581658][T11181] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.609468][T11181] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.618444][T11181] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.677055][T11181] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.719510][ T5824] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  694.752878][T11181] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  694.810462][T11181] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  694.899740][ T5824] usb 4-1: Using ep0 maxpacket: 16
[  694.966219][ T5824] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  694.983999][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.998302][ T5824] usb 4-1: Product: syz
[  695.008354][ T5824] usb 4-1: Manufacturer: syz
[  695.051134][ T5824] usb 4-1: SerialNumber: syz
[  695.065328][T11202] macsec1: entered allmulticast mode
[  695.089515][T11202] macvlan1: entered allmulticast mode
[  695.105109][ T5824] usb 4-1: config 0 descriptor??
[  695.105326][T11202] veth1_vlan: entered allmulticast mode
[  695.163275][ T5824] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  695.183890][T11202] macvlan1: left allmulticast mode
[  695.210942][T11202] veth1_vlan: left allmulticast mode
[  695.470293][ T5824] usb 4-1: USB disconnect, device number 23
[  696.142697][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1440'.
[  696.593326][T11249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.462016][ T7799] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  697.611700][ T7799] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  698.149772][ T7799] usb 5-1: config 0 has no interface number 0
[  698.170422][ T7799] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  698.216564][ T7799] usb 5-1: config 0 interface 200 has no altsetting 0
[  699.013985][ T7799] usb 5-1: string descriptor 0 read error: -71
[  699.032137][ T7799] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  699.059657][ T7799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.133789][ T7799] usb 5-1: config 0 descriptor??
[  699.151338][ T7799] usb 5-1: can't set config #0, error -71
[  699.171199][ T7799] usb 5-1: USB disconnect, device number 20
[  699.716936][T11287] netlink: 'syz.3.1447': attribute type 1 has an invalid length.
[  700.002149][T11287] 8021q: adding VLAN 0 to HW filter on device bond3
[  701.579040][T11212] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  701.711637][T11212] usb 2-1: device descriptor read/64, error -71
[  702.519638][T11212] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  703.598134][T11212] usb 2-1: device descriptor read/64, error -71
[  703.871731][T11212] usb usb2-port1: attempt power cycle
[  704.461710][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'.
[  704.526740][T11328] team0: entered promiscuous mode
[  704.533282][T11328] team_slave_0: entered promiscuous mode
[  704.539633][ T5824] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  704.546045][T11328] team_slave_1: entered promiscuous mode
[  704.583056][T11328] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  704.596639][T11328] team0: left promiscuous mode
[  704.604647][T11328] team_slave_0: left promiscuous mode
[  704.611229][T11328] team_slave_1: left promiscuous mode
[  704.734046][T11338] netlink: 'syz.4.1461': attribute type 1 has an invalid length.
[  704.741960][T11338] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1461'.
[  704.892473][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'.
[  704.928572][T11343] bond0: entered promiscuous mode
[  704.940251][T11343] bond_slave_0: entered promiscuous mode
[  704.971752][ T5824] usb 4-1: config 0 has an invalid interface number: 114 but max is 0
[  704.974670][T11343] bond_slave_1: entered promiscuous mode
[  704.983485][ T5824] usb 4-1: config 0 has no interface number 0
[  704.994919][ T5824] usb 4-1: too many endpoints for config 0 interface 114 altsetting 111: 97, using maximum allowed: 30
[  705.006068][ T5824] usb 4-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  705.019622][ T5824] usb 4-1: config 0 interface 114 has no altsetting 0
[  705.026475][ T5824] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  705.041594][T11343] batadv0: entered promiscuous mode
[  705.055529][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.068884][T11343] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  705.080033][T11343] Cannot create hsr debugfs directory
[  705.087161][ T5824] usb 4-1: config 0 descriptor??
[  705.097370][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'.
[  705.112685][T11343] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  705.143712][T11343] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  705.155509][T11343] hsr1: entered allmulticast mode
[  705.160874][T11343] bond0: entered allmulticast mode
[  705.166519][T11343] bond_slave_0: entered allmulticast mode
[  705.173961][T11343] bond_slave_1: entered allmulticast mode
[  705.184610][T11343] batadv0: entered allmulticast mode
[  705.209010][T11343] 8021q: adding VLAN 0 to HW filter on device hsr1
[  705.540490][T11357] vivid-000: =================  START STATUS  =================
[  705.548500][T11357] vivid-000: Test Pattern: 75% Colorbar
[  705.556253][T11357] vivid-000: Fill Percentage of Frame: 100
[  705.562812][T11357] vivid-000: Horizontal Movement: Move Right
[  705.569086][T11357] vivid-000: Vertical Movement: No Movement
[  705.575526][T11357] vivid-000: OSD Text Mode: All
[  705.580890][T11357] vivid-000: Show Border: false
[  705.586118][T11357] vivid-000: Show Square: false
[  705.591345][T11357] vivid-000: Sensor Flipped Horizontally: false
[  705.597839][T11357] vivid-000: Sensor Flipped Vertically: false
[  705.604330][T11357] vivid-000: Insert SAV Code in Image: false
[  705.610663][T11357] vivid-000: Insert EAV Code in Image: false
[  705.616931][T11357] vivid-000: Insert Video Guard Band: false
[  705.623613][T11357] vivid-000: Reduced Framerate: false
[  705.629448][T11357] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  705.637368][T11357] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  705.645799][T11357] vivid-000: Enable Capture Cropping: true
[  705.652002][T11357] vivid-000: Enable Capture Composing: false
[  705.658340][T11357] vivid-000: Enable Capture Scaler: true
[  705.664530][T11357] vivid-000: Timestamp Source: End of Frame
[  705.869376][T11357] vivid-000: Colorspace: sRGB
[  705.875350][T11357] vivid-000: Transfer Function: Default
[  705.882184][T11357] vivid-000: Y'CbCr Encoding: Default
[  705.888535][T11357] vivid-000: HSV Encoding: Hue 0-179
[  705.895515][T11357] vivid-000: Quantization: Default
[  705.901666][T11357] vivid-000: Apply Alpha To Red Only: false
[  705.909471][T11357] vivid-000: Standard Aspect Ratio: 4x3
[  705.916000][T11357] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  706.743034][T11357] vivid-000: DV Timings: 640x480p59 inactive
[  706.749890][ T5824] usb 4-1: string descriptor 0 read error: -71
[  706.757645][T11357] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  706.775429][T11357] vivid-000: Maximum EDID Blocks: 2
[  706.781223][T11357] vivid-000: Limited RGB Range (16-235): false
[  706.788904][T11357] vivid-000: Rx RGB Quantization Range: Automatic
[  706.795882][T11357] vivid-000: Power Present: 0x00000001
[  706.801998][T11357] tpg source WxH: 320x240 (Y'CbCr)
[  706.807238][T11357] tpg field: 1
[  706.810756][T11357] tpg crop: (0,0)/320x240
[  706.815247][T11357] tpg compose: (0,0)/320x240
[  706.820208][T11357] tpg colorspace: 8
[  706.824206][T11357] tpg transfer function: 0/2
[  706.828900][T11357] tpg Y'CbCr encoding: 0/1
[  706.833535][T11357] tpg quantization: 0/2
[  706.838141][T11357] tpg RGB range: 0/2
[  706.842472][T11357] vivid-000: ==================  END STATUS  ==================
[  707.815783][ T5824] usb 4-1: USB disconnect, device number 24
[  707.820320][T11364] binder: 11359:11364 ioctl 9408 0 returned -22
[  708.502675][T11376] netlink: 'syz.2.1473': attribute type 12 has an invalid length.
[  708.542218][T11376] netlink: 'syz.2.1473': attribute type 29 has an invalid length.
[  708.569805][T11376] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1473'.
[  709.431122][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'.
[  709.441191][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'.
[  709.791799][T11387] loop2: detected capacity change from 0 to 7
[  709.808512][T11387] Dev loop2: unable to read RDB block 7
[  709.816434][T11387]  loop2: AHDI p2 p3
[  709.839712][T11387] loop2: partition table partially beyond EOD, truncated
[  709.892466][T11390] IPVS: length: 94 != 166545938112
[  709.908972][T11387] loop2: p3 start 335544320 is beyond EOD, truncated
[  710.699862][ T5970] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  710.888504][T11412] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  711.039611][ T5970] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[  711.172349][ T5970] usb 2-1: config 0 has no interface number 0
[  711.337486][ T5970] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  712.674444][ T5970] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  713.147176][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.217652][ T5970] usb 2-1: Product: syz
[  713.246376][ T5970] usb 2-1: Manufacturer: syz
[  713.280225][ T5970] usb 2-1: SerialNumber: syz
[  713.410191][ T5970] usb 2-1: config 0 descriptor??
[  713.432100][ T5970] usb 2-1: can't set config #0, error -71
[  713.440030][ T5970] usb 2-1: USB disconnect, device number 22
[  715.437560][T11441] FAULT_INJECTION: forcing a failure.
[  715.437560][T11441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.451307][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.3.1489 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  715.451336][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  715.451350][T11441] Call Trace:
[  715.451359][T11441]  <TASK>
[  715.451368][T11441]  dump_stack_lvl+0x189/0x250
[  715.451400][T11441]  ? __pfx____ratelimit+0x10/0x10
[  715.451425][T11441]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.451451][T11441]  ? __pfx__printk+0x10/0x10
[  715.451480][T11441]  ? __might_fault+0xb0/0x130
[  715.451515][T11441]  should_fail_ex+0x414/0x560
[  715.451545][T11441]  _copy_from_user+0x2d/0xb0
[  715.451578][T11441]  ___sys_recvmsg+0x12e/0x510
[  715.451607][T11441]  ? __pfx____sys_recvmsg+0x10/0x10
[  715.451663][T11441]  ? __might_fault+0xb0/0x130
[  715.451691][T11441]  do_recvmmsg+0x307/0x770
[  715.451722][T11441]  ? __pfx_do_recvmmsg+0x10/0x10
[  715.451757][T11441]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  715.451804][T11441]  __x64_sys_recvmmsg+0x190/0x240
[  715.451830][T11441]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  715.451851][T11441]  ? rcu_is_watching+0x15/0xb0
[  715.451881][T11441]  ? do_syscall_64+0xbe/0x3b0
[  715.451911][T11441]  do_syscall_64+0xfa/0x3b0
[  715.451934][T11441]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.451966][T11441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.451989][T11441]  ? clear_bhb_loop+0x60/0xb0
[  715.452016][T11441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.452038][T11441] RIP: 0033:0x7f007078ebe9
[  715.452058][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  715.452077][T11441] RSP: 002b:00007f0071537038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  715.452101][T11441] RAX: ffffffffffffffda RBX: 00007f00709b6180 RCX: 00007f007078ebe9
[  715.452118][T11441] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000004
[  715.452133][T11441] RBP: 00007f0071537090 R08: 0000000000000000 R09: 0000000000000000
[  715.452147][T11441] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001
[  715.452161][T11441] R13: 00007f00709b6218 R14: 00007f00709b6180 R15: 00007fff900f2dc8
[  715.452196][T11441]  </TASK>
[  715.463760][ T5824] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  716.471919][ T5824] usb 2-1: Using ep0 maxpacket: 32
[  716.480447][ T5824] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  716.488825][ T5824] usb 2-1: config 0 has no interface number 0
[  716.498109][ T5824] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.528938][ T5824] usb 2-1: config 0 interface 85 has no altsetting 0
[  716.706203][ T5824] usb 2-1: string descriptor 0 read error: -71
[  716.723963][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  716.866698][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.883273][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'.
[  716.892766][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'.
[  717.242314][T11212] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  717.910308][ T5824] usb 2-1: config 0 descriptor??
[  717.937153][ T5824] usb 2-1: can't set config #0, error -71
[  717.974421][ T5824] usb 2-1: USB disconnect, device number 23
[  718.074511][T11212] usb 5-1: Using ep0 maxpacket: 16
[  718.131636][T11212] usb 5-1: unable to get BOS descriptor or descriptor too short
[  718.204924][T11212] usb 5-1: unable to read config index 0 descriptor/start: -71
[  718.237624][T11212] usb 5-1: can't read configurations, error -71
[  720.247471][T11478] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1500'.
[  720.586054][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'.
[  721.327198][T11486] tipc: Started in network mode
[  721.559941][T11486] tipc: Node identity 5aa1664c1b68, cluster identity 4711
[  721.929664][T11486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  722.033490][T11499] veth0_macvtap: entered allmulticast mode
[  722.369488][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'.
[  722.378563][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'.
[  722.759942][T11471] tipc: Disabling bearer <eth:syzkaller0>
[  728.181800][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  728.191055][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  729.234458][T11567] SET target dimension over the limit!
[  732.101580][T11596] netlink: 'syz.2.1527': attribute type 1 has an invalid length.
[  732.109727][T11596] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1527'.
[  732.915024][   T30] audit: type=1326 audit(1755333827.233:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11604 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54df8ebe9 code=0x7ffc0000
[  732.961324][   T30] audit: type=1326 audit(1755333827.233:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11604 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54df8ebe9 code=0x7ffc0000
[  733.006280][   T30] audit: type=1326 audit(1755333827.273:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11604 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe54df8ebe9 code=0x7ffc0000
[  733.046311][   T30] audit: type=1326 audit(1755333827.273:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11604 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54df8ebe9 code=0x7ffc0000
[  733.069398][ T5824] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  733.265777][   T30] audit: type=1326 audit(1755333827.273:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11604 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54df8ebe9 code=0x7ffc0000
[  733.287441][    C0] vkms_vblank_simulate: vblank timer overrun
[  733.339435][ T5824] usb 1-1: Invalid ep0 maxpacket: 32
[  733.489457][ T5824] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  733.673206][ T5824] usb 1-1: Invalid ep0 maxpacket: 32
[  733.702081][ T5824] usb usb1-port1: attempt power cycle
[  734.079382][ T5824] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  734.390362][ T5824] usb 1-1: Invalid ep0 maxpacket: 32
[  735.386570][ T5824] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  735.410577][ T5824] usb 1-1: Invalid ep0 maxpacket: 32
[  735.417804][ T5824] usb usb1-port1: unable to enumerate USB device
[  735.566788][T11629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'.
[  735.598554][T11629] syz_tun: entered promiscuous mode
[  735.606793][T11629] syz_tun: left promiscuous mode
[  736.038127][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1537'.
[  739.235881][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'.
[  739.678029][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  740.635528][   T10] usb 2-1: Using ep0 maxpacket: 32
[  741.148701][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  741.208422][   T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  741.429971][T11659] SET target dimension over the limit!
[  741.844299][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  741.872723][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.901484][   T10] usb 2-1: Product: syz
[  741.905739][   T10] usb 2-1: Manufacturer: syz
[  741.969518][   T10] usb 2-1: SerialNumber: syz
[  742.032646][   T10] cdc_ncm 2-1:1.0: skipping garbage
[  742.090367][T11212] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  742.930529][T11212] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  742.959242][   T10] cdc_ncm 2-1:1.0: bind() failure
[  742.969379][T11212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.028710][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  743.056569][T11212] usb 4-1: Product: syz
[  743.059587][T11678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1548'.
[  743.090457][T11212] usb 4-1: Manufacturer: syz
[  743.099676][   T10] cdc_ncm 2-1:1.1: bind() failure
[  743.115081][T11212] usb 4-1: SerialNumber: syz
[  743.173794][   T10] usb 2-1: USB disconnect, device number 24
[  743.179945][T11212] usb 4-1: config 0 descriptor??
[  743.216490][T11212] gspca_main: sunplus-2.14.0 probing 055f:c230
[  743.310563][T11681] netlink: 'syz.0.1551': attribute type 1 has an invalid length.
[  743.459352][T11681] 8021q: adding VLAN 0 to HW filter on device bond1
[  743.506162][T11681] bond1: (slave gretap1): making interface the new active one
[  743.560729][T11681] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  744.904683][T11212] usb 4-1: USB disconnect, device number 25
[  745.180256][T11706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1555'.
[  745.454816][T11712] geneve2: entered promiscuous mode
[  745.587497][T11712] geneve2: entered allmulticast mode
[  746.032670][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'.
[  753.074560][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  753.118136][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  754.239119][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'.
[  756.290881][T11212] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  756.606122][T11212] usb 1-1: Using ep0 maxpacket: 8
[  756.645134][T11212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.664336][T11212] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  756.699566][T11212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.745861][T11212] usb 1-1: config 0 descriptor??
[  756.768038][T11212] usb 1-1: Found UVC 0.00 device <unnamed> (05a9:2630)
[  756.792071][T11790] syz.1.1579: attempt to access beyond end of device
[  756.792071][T11790] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[  756.799222][T11212] usb 1-1: No valid video chain found.
[  756.844761][T11790] syz.1.1579: attempt to access beyond end of device
[  756.844761][T11790] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[  756.873187][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  756.926925][T11790] syz.1.1579: attempt to access beyond end of device
[  756.926925][T11790] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[  756.965684][T11791] syz_tun: entered allmulticast mode
[  756.973379][ T5908] usb 1-1: USB disconnect, device number 26
[  757.171110][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  757.524175][T11790] syz.1.1579: attempt to access beyond end of device
[  757.524175][T11790] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  757.548730][T11800] dvmrp8: entered allmulticast mode
[  757.586403][T11790] syz.1.1579: attempt to access beyond end of device
[  757.586403][T11790] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[  757.617672][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  757.653195][T11790] syz.1.1579: attempt to access beyond end of device
[  757.653195][T11790] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  757.666705][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  757.672810][T11797] xt_CT: No such helper "netbios-ns"
[  757.685369][T11790] syz.1.1579: attempt to access beyond end of device
[  757.685369][T11790] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[  757.710652][T11790] syz.1.1579: attempt to access beyond end of device
[  757.710652][T11790] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  757.726768][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  757.764640][T11790] syz.1.1579: attempt to access beyond end of device
[  757.764640][T11790] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  757.783964][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  757.795883][T11790] syz.1.1579: attempt to access beyond end of device
[  757.795883][T11790] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  757.921709][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  758.095271][T11790] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  758.104916][T11790] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  762.294601][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'.
[  762.303878][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'.
[  762.423673][T11848] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1594'.
[  766.149969][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  766.331562][   T10] usb 3-1: Using ep0 maxpacket: 16
[  766.351546][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  766.382972][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  766.436405][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.505952][   T10] usb 3-1: config 0 descriptor??
[  766.538697][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55
[  766.783997][ T5190] bcm5974 3-1:0.0: could not read from device
[  766.912837][T11878] bcm5974 3-1:0.0: could not read from device
[  767.010098][ T5190] bcm5974 3-1:0.0: could not read from device
[  767.147184][   T10] usb 3-1: USB disconnect, device number 23
[  767.165395][ T5190] bcm5974 3-1:0.0: could not read from device
[  767.901789][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  768.206457][T11898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  771.753750][T11928] bio_check_eod: 2 callbacks suppressed
[  771.753771][T11928] syz.1.1614: attempt to access beyond end of device
[  771.753771][T11928] loop1: rw=0, sector=0, nr_sectors = 2 limit=0
[  771.774565][T11928] befs: (loop1): unable to read superblock
[  774.444082][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'.
[  776.760129][T11955] team_slave_1: entered allmulticast mode
[  777.009702][T11967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1627'.
[  777.728181][T11978] netlink: 'syz.0.1623': attribute type 4 has an invalid length.
[  782.284323][T12014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1640'.
[  782.289515][T12015] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  784.331333][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'.
[  784.340498][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'.
[  787.796557][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'.
[  787.853511][T12056] team0: entered promiscuous mode
[  787.858668][T12056] team_slave_0: entered promiscuous mode
[  788.386504][T12056] team_slave_1: entered promiscuous mode
[  788.411281][T12056] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  788.420498][T12056] team0: left promiscuous mode
[  788.428751][T12056] team_slave_0: left promiscuous mode
[  788.439152][T12056] team_slave_1: left promiscuous mode
[  789.489365][T12067] input: syz1 as /devices/virtual/input/input56
[  790.751210][T12074] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  791.873250][T12074] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  793.156583][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  793.600391][   T10] usb 3-1: Using ep0 maxpacket: 16
[  793.608658][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  793.624746][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  793.643364][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.931047][   T10] usb 3-1: config 0 descriptor??
[  794.131273][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57
[  794.898590][ T5190] bcm5974 3-1:0.0: could not read from device
[  794.926577][T12089] bcm5974 3-1:0.0: could not read from device
[  795.366192][ T5190] bcm5974 3-1:0.0: could not read from device
[  795.382207][   T10] usb 3-1: USB disconnect, device number 24
[  797.879840][T12132] sctp: [Deprecated]: syz.0.1670 (pid 12132) Use of int in maxseg socket option.
[  797.879840][T12132] Use struct sctp_assoc_value instead
[  798.666333][T12140] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  798.674239][T12140] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1672'.
[  801.691976][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'.
[  803.469810][T12166] hsr_slave_0 (unregistering): left promiscuous mode
[  803.529383][T11231] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  803.719521][T11231] usb 2-1: Using ep0 maxpacket: 16
[  803.741343][T11231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  803.807499][T11231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  803.833793][T11231] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  803.853443][T11231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.879330][T11231] usb 2-1: Product: syz
[  803.883571][T11231] usb 2-1: Manufacturer: syz
[  803.943178][T11231] usb 2-1: SerialNumber: syz
[  804.279606][T11231] usb 2-1: 0:2 : does not exist
[  805.124232][T11231] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  805.256895][T11231] usb 2-1: USB disconnect, device number 25
[  805.512574][T12185] udevd[12185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  806.929896][T12200] netlink: 'syz.0.1688': attribute type 1 has an invalid length.
[  807.255615][T12204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1689'.
[  807.270574][T12200] 8021q: adding VLAN 0 to HW filter on device bond2
[  807.316537][T12204] loop6: detected capacity change from 0 to 7
[  807.406182][T12185] Dev loop6: unable to read RDB block 7
[  807.435028][T12185]  loop6: AHDI p1 p2 p3
[  807.465500][T12185] loop6: partition table partially beyond EOD, truncated
[  807.498309][T12185] loop6: p1 start 926365495 is beyond EOD, truncated
[  807.537152][T12185] loop6: p2 size 116 extends beyond EOD, truncated
[  807.618099][T12204] Dev loop6: unable to read RDB block 7
[  807.665456][T12204]  loop6: AHDI p1 p2 p3
[  807.699402][T12204] loop6: partition table partially beyond EOD, truncated
[  807.739708][T11231] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  807.759767][T12204] loop6: p1 start 926365495 is beyond EOD, truncated
[  807.766521][T12204] loop6: p2 size 116 extends beyond EOD, truncated
[  808.079328][T11231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  808.141452][T11231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  808.156725][T11231] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  808.166975][T11231] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  808.857381][T11231] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  808.937773][T11231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.039337][T11231] usb 2-1: Product: syz
[  809.097527][T11231] usb 2-1: Manufacturer: syz
[  809.120728][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'.
[  809.142326][T11231] usb 2-1: SerialNumber: syz
[  809.186546][T11231] usb 2-1: config 0 descriptor??
[  809.211547][T12221] syz_tun: entered promiscuous mode
[  809.245970][T11231] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  809.270585][T12221] syz_tun: left promiscuous mode
[  809.460711][T11212] usb 2-1: USB disconnect, device number 26
[  811.705905][T12243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.717470][T12243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  814.393762][T12263] netlink: 'syz.1.1704': attribute type 4 has an invalid length.
[  814.514955][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  814.521685][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  814.557438][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'.
[  816.811235][T12263] netlink: 'syz.1.1704': attribute type 4 has an invalid length.
[  818.086500][T11231] IPVS: starting estimator thread 0...
[  818.629730][T12279] IPVS: using max 27 ests per chain, 64800 per kthread
[  819.677239][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  819.911481][   T10] usb 2-1: Using ep0 maxpacket: 32
[  819.923109][   T10] usb 2-1: config 14 has an invalid interface number: 137 but max is 3
[  819.982254][   T10] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  820.023187][   T10] usb 2-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  820.054345][   T10] usb 2-1: config 14 has no interface number 1
[  820.074686][   T10] usb 2-1: config 14 interface 0 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0
[  820.105246][   T10] usb 2-1: config 14 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  820.153835][   T10] usb 2-1: config 14 interface 137 has no altsetting 0
[  820.195575][   T10] usb 2-1: config 14 interface 0 has no altsetting 0
[  820.230605][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  820.253671][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.288573][   T10] usb 2-1: Product: syz
[  820.298858][   T10] usb 2-1: Manufacturer: syz
[  820.319465][   T10] usb 2-1: SerialNumber: syz
[  821.548447][T12306] program syz.4.1715 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  822.103582][   T10] ati_remote2 2-1:14.0: ati_remote2_probe(): need 2 interfaces, found 2
[  822.166900][   T10] usb 2-1: USB disconnect, device number 27
[  822.215570][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'.
[  824.232053][T12329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1720'.
[  825.682854][T12336] xt_CT: No such helper "netbios-ns"
[  825.700751][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  825.709889][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  827.634309][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1728'.
[  830.402848][T12387] loop2: detected capacity change from 0 to 7
[  830.421356][T12387] Dev loop2: unable to read RDB block 7
[  830.427041][T12387]  loop2: AHDI p2 p3
[  831.219131][T12387] loop2: partition table partially beyond EOD, truncated
[  831.260647][T12387] loop2: p3 start 335544320 is beyond EOD, truncated
[  833.164071][T12411] syz_tun: entered promiscuous mode
[  833.205342][T12411] syz_tun: left promiscuous mode
[  834.610187][T12429] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1746'.
[  845.280543][T12509] ip6gre1: entered promiscuous mode
[  847.716763][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'.
[  847.727065][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'.
[  847.762516][T12522] team0: entered promiscuous mode
[  847.793525][T12522] team_slave_0: entered promiscuous mode
[  847.808618][T12522] team_slave_1: entered promiscuous mode
[  847.817780][T12522] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  847.826968][T12522] team0: left promiscuous mode
[  847.831951][T12522] team_slave_0: left promiscuous mode
[  847.837858][T12522] team_slave_1: left promiscuous mode
[  847.937897][T12518] bond0: entered promiscuous mode
[  847.968097][T12518] bond_slave_0: entered promiscuous mode
[  848.001940][T12518] bond_slave_1: entered promiscuous mode
[  848.019006][T12518] batadv0: entered promiscuous mode
[  848.035979][T12526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1767'.
[  848.060135][T12518] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  849.158927][T12518] Cannot create hsr debugfs directory
[  849.175912][T12518] hsr1: entered allmulticast mode
[  849.309900][T12518] bond0: entered allmulticast mode
[  849.333380][T12518] bond_slave_0: entered allmulticast mode
[  849.450703][T12518] bond_slave_1: entered allmulticast mode
[  849.642337][T12518] batadv0: entered allmulticast mode
[  849.648240][T12518] 8021q: adding VLAN 0 to HW filter on device hsr1
[  850.024620][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'.
[  850.129338][   T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  852.130956][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  852.131629][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  852.132839][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  852.132865][   T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  852.132887][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  852.135217][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  852.135249][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.135280][   T10] usb 5-1: Product: syz
[  852.135298][   T10] usb 5-1: Manufacturer: syz
[  852.135316][   T10] usb 5-1: SerialNumber: syz
[  852.407655][T12543] tty tty2: ldisc open failed (-12), clearing slot 1
[  854.256388][   T60] Bluetooth: (null): Invalid header checksum
[  854.398442][   T60] Bluetooth: (null): Invalid header checksum
[  854.758798][   T60] Bluetooth: (null): Invalid header checksum
[  854.769579][   T60] Bluetooth: (null): Invalid header checksum
[  854.775751][   T60] Bluetooth: (null): Invalid header checksum
[  855.029522][   T60] Bluetooth: (null): Invalid header checksum
[  855.035789][   T60] Bluetooth: (null): Invalid header checksum
[  855.044408][T12560] macvtap1: entered allmulticast mode
[  855.049969][T12560] veth0_macvtap: entered allmulticast mode
[  855.249969][ T5957] Bluetooth: (null): Invalid header checksum
[  855.256168][ T5957] Bluetooth: (null): Invalid header checksum
[  855.265879][   T36] Bluetooth: (null): Invalid header checksum
[  855.343783][   T36] Bluetooth: (null): Invalid header checksum
[  855.385006][   T36] Bluetooth: (null): Invalid header checksum
[  856.146081][   T10] usb 5-1: 0:2 : does not exist
[  856.235273][   T10] usb 5-1: USB disconnect, device number 23
[  856.680201][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  856.856833][T12582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  856.933656][T12582] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1783'.
[  857.175604][   T10] usb 5-1: device descriptor read/64, error -71
[  857.810077][T12584] netlink: 'syz.0.1786': attribute type 2 has an invalid length.
[  857.864617][T12587] netlink: 'syz.2.1785': attribute type 1 has an invalid length.
[  857.930144][T12590] netlink: 'syz.3.1782': attribute type 4 has an invalid length.
[  857.958551][T12584] 8021q: adding VLAN 0 to HW filter on device bond3
[  857.977654][T12584] bond3: entered promiscuous mode
[  858.001070][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  858.060681][T12584] bond3: entered allmulticast mode
[  858.076599][T12584] bond0: (slave bond3): Enslaving as an active interface with an up link
[  858.229704][   T10] usb 5-1: device descriptor read/64, error -71
[  858.351930][T12596] netlink: 'syz.3.1782': attribute type 4 has an invalid length.
[  858.470579][   T10] usb usb5-port1: attempt power cycle
[  858.852969][T12587] 8021q: adding VLAN 0 to HW filter on device bond1
[  859.090293][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  860.474353][   T10] usb 5-1: device not accepting address 26, error -71
[  861.087651][T12620] xt_CT: You must specify a L4 protocol and not use inversions on it
[  862.177173][T12631] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1795'.
[  864.505932][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'.
[  864.562159][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'.
[  864.707992][T12641] vxcan3: entered promiscuous mode
[  866.559437][T11231] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  867.988107][T11231] usb 2-1: device descriptor read/all, error -71
[  868.514959][T12676] netlink: 'syz.0.1805': attribute type 4 has an invalid length.
[  869.865545][T12676] netlink: 'syz.0.1805': attribute type 4 has an invalid length.
[  870.408836][T12676] syz.0.1805 (12676) used greatest stack depth: 19392 bytes left
[  871.648555][ T7505] Bluetooth: hci5: Frame reassembly failed (-84)
[  873.709530][ T5844] Bluetooth: hci5: command 0x1003 tx timeout
[  873.717917][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  873.993411][T12718] input: syz1 as /devices/virtual/input/input61
[  874.749409][T12724] loop2: detected capacity change from 0 to 7
[  874.834557][T12724] Dev loop2: unable to read RDB block 7
[  874.869473][T12724]  loop2: AHDI p2 p3
[  874.874365][T12724] loop2: partition table partially beyond EOD, truncated
[  874.920952][T12724] loop2: p3 start 335544320 is beyond EOD, truncated
[  875.068854][T12726] tipc: Started in network mode
[  875.073892][T12726] tipc: Node identity 7, cluster identity 4711
[  875.109526][T12726] tipc: Node number set to 7
[  875.990998][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  875.997474][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  879.028888][T12758] 8021q: adding VLAN 0 to HW filter on device bond0
[  879.668041][T12758] bond0: (slave rose0): Enslaving as an active interface with an up link
[  880.109328][   T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  880.965740][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.979280][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  881.001314][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  881.036703][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  881.239012][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  881.256299][T12782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1834'.
[  881.321576][   T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  881.422886][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  881.469985][T12787] netlink: 'syz.1.1835': attribute type 1 has an invalid length.
[  881.479504][   T10] usb 4-1: Product: syz
[  881.483770][   T10] usb 4-1: Manufacturer: syz
[  881.488480][   T10] usb 4-1: SerialNumber: syz
[  881.531050][   T10] usb 4-1: config 0 descriptor??
[  881.797012][   T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[  881.844652][   T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  881.906641][T12787] 8021q: adding VLAN 0 to HW filter on device bond1
[  881.945959][   T10] usb 4-1: USB disconnect, device number 26
[  882.253208][T12796] fuse: Bad value for 'fd'
[  882.672153][T12789] bond1: (slave gretap2): making interface the new active one
[  882.746358][T12789] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  884.893461][T12822] syz.0.1843: attempt to access beyond end of device
[  884.893461][T12822] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  884.906739][T12822] syz.0.1843: attempt to access beyond end of device
[  884.906739][T12822] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  884.919868][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  884.929683][T12822] syz.0.1843: attempt to access beyond end of device
[  884.929683][T12822] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  884.942657][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  884.952868][T12822] syz.0.1843: attempt to access beyond end of device
[  884.952868][T12822] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  884.965894][T12822] syz.0.1843: attempt to access beyond end of device
[  884.965894][T12822] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  884.978828][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  884.988551][T12822] syz.0.1843: attempt to access beyond end of device
[  884.988551][T12822] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  885.001629][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  885.011638][T12822] syz.0.1843: attempt to access beyond end of device
[  885.011638][T12822] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  885.024730][T12822] syz.0.1843: attempt to access beyond end of device
[  885.024730][T12822] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  885.037761][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  885.047421][T12822] syz.0.1843: attempt to access beyond end of device
[  885.047421][T12822] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  885.060483][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  885.070414][T12822] syz.0.1843: attempt to access beyond end of device
[  885.070414][T12822] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  885.083496][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  885.093158][T12822] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  885.102722][T12822] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  885.726246][   T10] IPVS: starting estimator thread 0...
[  886.209738][T12841] IPVS: using max 24 ests per chain, 57600 per kthread
[  886.540887][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'.
[  889.195821][T12865] evm: overlay not supported
[  890.200791][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'.
[  891.290449][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1857'.
[  892.433526][T12905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1856'.
[  894.487730][T12930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1865'.
[  894.548446][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'.
[  897.195046][T12948] sctp: [Deprecated]: syz.0.1868 (pid 12948) Use of int in maxseg socket option.
[  897.195046][T12948] Use struct sctp_assoc_value instead
[  898.049601][T12953] sctp: [Deprecated]: syz.3.1869 (pid 12953) Use of int in max_burst socket option deprecated.
[  898.049601][T12953] Use struct sctp_assoc_value instead
[  898.370037][T12970] netlink: 'syz.0.1872': attribute type 1 has an invalid length.
[  898.377851][T12970] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1872'.
[  900.311247][T12984] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  900.430045][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'.
[  901.335350][T12995] syz_tun: entered promiscuous mode
[  901.356115][T12995] syz_tun: left promiscuous mode
[  902.404803][T13004] netlink: 'syz.4.1884': attribute type 1 has an invalid length.
[  903.220970][T13004] 8021q: adding VLAN 0 to HW filter on device bond4
[  904.667505][T13032] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1887'.
[  906.509801][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'.
[  906.527789][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'.
[  907.845329][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  907.854802][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  908.773997][ T5970] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  908.940610][ T5970] usb 5-1: Using ep0 maxpacket: 8
[  910.883536][ T5970] usb 5-1: unable to get BOS descriptor or descriptor too short
[  911.740991][ T5970] usb 5-1: unable to read config index 0 descriptor/start: -71
[  911.748841][ T5970] usb 5-1: can't read configurations, error -71
[  912.874772][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  913.319948][   T10] usb 2-1: Using ep0 maxpacket: 32
[  913.337421][   T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  913.369281][   T10] usb 2-1: config 0 has no interface number 0
[  913.398208][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  913.422123][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.582492][   T10] usb 2-1: Product: syz
[  913.586756][   T10] usb 2-1: Manufacturer: syz
[  913.591868][   T10] usb 2-1: SerialNumber: syz
[  914.544114][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'.
[  914.553507][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'.
[  914.651359][   T10] usb 2-1: config 0 descriptor??
[  914.676790][   T10] smsc95xx v2.0.0
[  914.807481][T13135] sctp: [Deprecated]: syz.2.1913 (pid 13135) Use of int in maxseg socket option.
[  914.807481][T13135] Use struct sctp_assoc_value instead
[  915.301285][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  915.393346][   T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  915.436177][   T10] usb 2-1: USB disconnect, device number 30
[  916.709732][T13148] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  916.962726][T13148] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  916.962749][T13148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  916.975418][T13148] syz.1.1914 (13148) used greatest stack depth: 16184 bytes left
[  917.450901][T13160] overlayfs: upper fs does not support tmpfile.
[  920.174582][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'.
[  920.183929][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'.
[  922.907258][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1931'.
[  923.169312][ T5824] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  924.813568][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  924.829264][ T5824] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  925.160412][ T5824] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  925.189339][ T5824] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  925.212137][ T5824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  925.233365][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.256882][ T5824] usb 2-1: Product: syz
[  925.384085][T13210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  925.398019][ T5824] usb 2-1: Manufacturer: syz
[  925.448915][ T5824] usb 2-1: SerialNumber: syz
[  926.443173][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'.
[  926.578406][ T5824] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  926.609270][T13235] team0: entered promiscuous mode
[  926.614398][T13235] team_slave_0: entered promiscuous mode
[  926.656978][ T5824] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82
[  926.664735][T13235] team_slave_1: entered promiscuous mode
[  926.694152][T13235] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  926.737473][T13235] team0: left promiscuous mode
[  926.997105][T13235] team_slave_0: left promiscuous mode
[  927.674173][T13235] team_slave_1: left promiscuous mode
[  928.574664][ T5824] usb 2-1: USB disconnect, device number 31
[  929.867213][T13137] udevd[13137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  931.458608][T11212] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  931.479286][T11212] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  931.486768][T11212] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  931.866799][T11212] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  932.228750][T13275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'.
[  933.672391][T13276] fido_id[13276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  933.889367][T13292] bio_check_eod: 2 callbacks suppressed
[  933.889390][T13292] syz.3.1954: attempt to access beyond end of device
[  933.889390][T13292] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  933.919881][T13292] (syz.3.1954,13292,1):ocfs2_get_sector:1714 ERROR: status = -5
[  933.927621][T13292] (syz.3.1954,13292,1):ocfs2_sb_probe:753 ERROR: status = -5
[  933.991457][T13292] (syz.3.1954,13292,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  934.145646][T13292] (syz.3.1954,13292,0):ocfs2_fill_super:1177 ERROR: status = -5
[  935.244979][T13301] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  937.394056][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  937.400752][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  937.419372][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  937.836327][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  937.900351][   T10] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  937.939994][   T10] usb 3-1: string descriptor 0 read error: -22
[  937.954034][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  938.059257][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.271273][   T10] usb 3-1: reset high-speed USB device number 25 using dummy_hcd
[  938.320626][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.346748][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.503703][T13347] netlink: 'syz.4.1968': attribute type 1 has an invalid length.
[  938.512791][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1968'.
[  938.540996][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.604765][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.659509][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.872552][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.955706][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.100546][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.882644][T13367] sctp: [Deprecated]: syz.2.1975 (pid 13367) Use of int in maxseg socket option.
[  942.882644][T13367] Use struct sctp_assoc_value instead
[  943.098561][T13368] netlink: 'syz.4.1978': attribute type 1 has an invalid length.
[  943.106389][T13368] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1978'.
[  944.321158][   T10] usb 3-1: USB disconnect, device number 25
[  946.196750][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  946.206250][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  948.496947][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1988'.
[  948.804219][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'.
[  950.249319][ T5908] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  951.211943][ T5908] usb 2-1: Using ep0 maxpacket: 8
[  951.231104][ T5908] usb 2-1: config 11 has an invalid interface number: 95 but max is 0
[  951.244059][ T5908] usb 2-1: config 11 has no interface number 0
[  951.251891][ T5908] usb 2-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  951.265440][ T5908] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  951.277035][ T5908] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x8F has invalid wMaxPacketSize 0
[  951.287474][ T5908] usb 2-1: config 11 interface 95 has no altsetting 0
[  951.297507][ T5908] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  951.319228][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.327303][ T5908] usb 2-1: Product: syz
[  951.344932][ T5908] usb 2-1: Manufacturer: syz
[  951.352552][ T5908] usb 2-1: SerialNumber: syz
[  951.385044][ T5851] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  952.831763][ T5908] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -90
[  952.883390][ T5908] usb 2-1: USB disconnect, device number 32
[  953.064687][ T5970] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  953.258415][ T5970] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  954.020383][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  954.171583][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  954.209342][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  954.238979][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  954.279337][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  954.297517][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.376064][ T5970] usb 4-1: config 0 descriptor??
[  954.400706][T13440] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  955.152237][ T5970] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  955.326559][ T5970] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  955.373177][T13440] dlm: no local IP address has been set
[  955.658903][T13440] dlm: cannot start dlm midcomms -107
[  955.708566][ T5970] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  955.771604][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.784400][ T5970] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  955.882272][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  958.188113][ T5970] usb 4-1: USB disconnect, device number 27
[  960.511188][T13501] sctp: [Deprecated]: syz.4.2014 (pid 13501) Use of int in maxseg socket option.
[  960.511188][T13501] Use struct sctp_assoc_value instead
[  964.349763][ T5970] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  964.489760][T13532] loop2: detected capacity change from 0 to 7
[  964.539378][ T5970] usb 5-1: Using ep0 maxpacket: 32
[  964.556148][ T5970] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  964.569239][ T5970] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  964.647862][T13532] Dev loop2: unable to read RDB block 7
[  964.664783][ T5970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  964.682830][T13532]  loop2: AHDI p2 p3
[  964.691479][T13532] loop2: partition table partially beyond EOD, truncated
[  964.709899][T13532] loop2: p3 start 335544320 is beyond EOD, truncated
[  964.788372][ T5970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  964.804588][ T5970] usb 5-1: config 1 has no interface number 0
[  964.811041][ T5970] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  964.828469][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.960736][T13535] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2024'.
[  965.414791][ T5970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  965.615798][ T5970] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  965.648168][ T5970] snd_usb_pod 5-1:1.1: invalid control EP
[  965.670921][ T5970] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  965.701615][ T5970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  965.719748][ T5970] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  965.959500][T13530] binder: 13526:13530 ioctl c0306201 200000000080 returned -22
[  968.061278][ T7799] usb 5-1: USB disconnect, device number 30
[  968.129566][T13558] netlink: 'syz.2.2029': attribute type 4 has an invalid length.
[  968.186195][T13559] netlink: 'syz.2.2029': attribute type 4 has an invalid length.
[  976.440845][T13575] xt_CT: No such helper "netbios-ns"
[  978.902066][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'.
[  979.731117][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  979.789227][T13614] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  980.575956][T13614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.518749][T13639] netlink: 'syz.2.2049': attribute type 1 has an invalid length.
[  982.585987][T13639] 8021q: adding VLAN 0 to HW filter on device bond2
[  986.890964][T11212] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  987.233474][T11212] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  987.270663][T11212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.278822][T11212] usb 3-1: Product: syz
[  987.338094][T11212] usb 3-1: Manufacturer: syz
[  987.349515][T11212] usb 3-1: SerialNumber: syz
[  987.378573][T11212] usb 3-1: config 0 descriptor??
[  987.443703][T11212] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  988.898331][T11212] gspca_sunplus: reg_r err -71
[  988.903668][T11212] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  988.923683][T11212] usb 3-1: USB disconnect, device number 26
[  990.059462][ T7799] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  990.174353][T13723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2069'.
[  990.184889][T13723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2069'.
[  990.371790][ T7799] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  990.417631][ T7799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.497454][ T7799] usb 5-1: Product: syz
[  990.694311][ T7799] usb 5-1: Manufacturer: syz
[  990.699105][ T7799] usb 5-1: SerialNumber: syz
[  990.822507][ T7799] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  990.939082][T11231] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  992.083043][T11231] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  992.091080][T11231] ath9k_htc: Failed to initialize the device
[  992.129641][T11231] usb 5-1: ath9k_htc: USB layer deinitialized
[  993.586189][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'.
[  994.139327][T13757] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.232384][T13757] bridge_slave_0: left allmulticast mode
[  994.254536][T13757] bridge_slave_0: left promiscuous mode
[  994.298331][T13757] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.328905][ T5908] usb 5-1: USB disconnect, device number 31
[  994.543979][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'.
[  995.536559][ T5970] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  995.720177][ T5970] usb 3-1: Using ep0 maxpacket: 8
[  995.744151][ T5970] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  995.789235][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.802361][ T5970] usb 3-1: Product: syz
[  995.806613][ T5970] usb 3-1: Manufacturer: syz
[  995.813033][ T5970] usb 3-1: SerialNumber: syz
[  995.833359][ T5970] usb 3-1: config 0 descriptor??
[  996.265869][ T5970] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  996.375143][ T5970] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  996.470299][ T5970] usb 3-1: USB disconnect, device number 27
[  998.860409][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  998.966683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1002.019478][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'.
[ 1002.028437][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'.
[ 1004.749544][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1005.003082][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[ 1005.081198][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1005.248286][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1005.284229][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.296139][ T5908] usb 2-1: Manufacturer: О
[ 1005.301096][ T5908] usb 2-1: SerialNumber: 楀๿밬¹縥䘴퇸裡﫸癶堵幯쏃玡簵偺㦯鿅씣댨෹澻䣬ꄆ뷯̿䌐魁翓㝪钑ﻂ쓡졃궪吢㕂飉듰秈
[ 1006.916242][ T5908] cdc_ncm 2-1:1.0: bind() failure
[ 1006.977549][ T5908] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1006.992114][ T5908] cdc_ncm 2-1:1.1: bind() failure
[ 1007.017271][ T5908] usb 2-1: USB disconnect, device number 33
[ 1007.578933][T13874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1007.584288][T13872] FAULT_INJECTION: forcing a failure.
[ 1007.584288][T13872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1007.665836][T13872] CPU: 1 UID: 0 PID: 13872 Comm: syz.1.2109 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1007.665869][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1007.665883][T13872] Call Trace:
[ 1007.665892][T13872]  <TASK>
[ 1007.665903][T13872]  dump_stack_lvl+0x189/0x250
[ 1007.665934][T13872]  ? __pfx____ratelimit+0x10/0x10
[ 1007.665958][T13872]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1007.665984][T13872]  ? __pfx__printk+0x10/0x10
[ 1007.666012][T13872]  ? __might_fault+0xb0/0x130
[ 1007.666046][T13872]  should_fail_ex+0x414/0x560
[ 1007.666073][T13872]  _copy_from_iter+0x1db/0x16f0
[ 1007.666105][T13872]  ? rcu_is_watching+0x15/0xb0
[ 1007.666130][T13872]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[ 1007.666154][T13872]  ? __pfx__copy_from_iter+0x10/0x10
[ 1007.666184][T13872]  ? __build_skb_around+0x257/0x3e0
[ 1007.666219][T13872]  ? netlink_sendmsg+0x642/0xb30
[ 1007.666285][T13872]  ? skb_put+0x11b/0x210
[ 1007.666319][T13872]  netlink_sendmsg+0x6b2/0xb30
[ 1007.666360][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1007.666405][T13872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1007.666427][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1007.666464][T13872]  __sock_sendmsg+0x21c/0x270
[ 1007.666494][T13872]  ____sys_sendmsg+0x505/0x830
[ 1007.666534][T13872]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1007.666578][T13872]  ? import_iovec+0x74/0xa0
[ 1007.666612][T13872]  ___sys_sendmsg+0x21f/0x2a0
[ 1007.666648][T13872]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1007.666731][T13872]  ? __fget_files+0x2a/0x420
[ 1007.666755][T13872]  ? __fget_files+0x3a0/0x420
[ 1007.666791][T13872]  __x64_sys_sendmsg+0x19b/0x260
[ 1007.666828][T13872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1007.666877][T13872]  ? __pfx_ksys_write+0x10/0x10
[ 1007.666895][T13872]  ? rcu_is_watching+0x15/0xb0
[ 1007.666924][T13872]  ? do_syscall_64+0xbe/0x3b0
[ 1007.666953][T13872]  do_syscall_64+0xfa/0x3b0
[ 1007.666976][T13872]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1007.667000][T13872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.667022][T13872]  ? clear_bhb_loop+0x60/0xb0
[ 1007.667048][T13872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.667069][T13872] RIP: 0033:0x7f8b4a58ebe9
[ 1007.667088][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1007.667107][T13872] RSP: 002b:00007f8b4b3db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1007.667130][T13872] RAX: ffffffffffffffda RBX: 00007f8b4a7b5fa0 RCX: 00007f8b4a58ebe9
[ 1007.667146][T13872] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1007.667160][T13872] RBP: 00007f8b4b3db090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.667174][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1007.667187][T13872] R13: 00007f8b4a7b6038 R14: 00007f8b4a7b5fa0 R15: 00007ffe39320f28
[ 1007.667221][T13872]  </TASK>
[ 1007.668456][T13869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1008.472367][T13868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1008.486585][T13868] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1008.501029][T13868] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1008.907997][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2112'.
[ 1008.932244][T11212] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1009.165639][T11212] usb 4-1: Using ep0 maxpacket: 32
[ 1009.208919][T11212] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1009.252937][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'.
[ 1009.268251][T11212] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1009.315063][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2113'.
[ 1009.339742][T11212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.385068][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'.
[ 1009.404778][T11212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1009.420442][T11212] usb 4-1: config 1 has no interface number 0
[ 1009.427001][T11212] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1009.433427][T13892] team0: entered promiscuous mode
[ 1009.441275][T13892] team_slave_0: entered promiscuous mode
[ 1009.443402][T11212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.447188][T13892] team_slave_1: entered promiscuous mode
[ 1009.461907][T13892] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1009.471047][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1009.482046][T13892] team0: left promiscuous mode
[ 1009.484975][T11212] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1009.486866][T13892] team_slave_0: left promiscuous mode
[ 1009.487132][T13892] team_slave_1: left promiscuous mode
[ 1009.610565][ T5908] usb 3-1: device descriptor read/64, error -71
[ 1009.670150][T11212] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[ 1009.693841][T11212] snd_usb_pod 4-1:1.1: invalid control EP
[ 1009.700409][T11212] snd_usb_pod 4-1:1.1: cannot start listening: -22
[ 1009.707727][T11212] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1009.726175][T11212] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1009.850325][ T5908] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1009.900349][T13879] binder: 13878:13879 ioctl c0306201 200000000080 returned -22
[ 1010.009298][ T5908] usb 3-1: device descriptor read/64, error -71
[ 1010.480424][ T5908] usb usb3-port1: attempt power cycle
[ 1010.692039][T11228] usb 4-1: USB disconnect, device number 28
[ 1011.034580][T13915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2120'.
[ 1012.949315][T11212] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1013.255056][T13938] sctp: [Deprecated]: syz.2.2128 (pid 13938) Use of int in max_burst socket option deprecated.
[ 1013.255056][T13938] Use struct sctp_assoc_value instead
[ 1013.382300][T11212] usb 5-1: Using ep0 maxpacket: 32
[ 1013.612501][T11212] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1013.678689][T11212] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.711748][T11212] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1013.729905][T11212] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1013.738729][T11212] usb 5-1: Product: syz
[ 1013.881721][T11212] usb 5-1: Manufacturer: syz
[ 1013.910958][T11212] hub 5-1:4.0: USB hub found
[ 1014.144197][T11212] hub 5-1:4.0: 2 ports detected
[ 1015.635512][T11212] hub 5-1:4.0: hub_ext_port_status failed (err = -32)
[ 1016.299977][T11212] usb 5-1: USB disconnect, device number 32
[ 1016.820207][T13986] netlink: 'syz.3.2141': attribute type 4 has an invalid length.
[ 1016.871375][T13989] netlink: 'syz.3.2141': attribute type 4 has an invalid length.
[ 1016.889536][ T7799] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1017.145090][ T7799] usb 2-1: config 0 has an invalid interface number: 30 but max is 0
[ 1018.112169][ T7799] usb 2-1: config 0 has no interface number 0
[ 1018.155893][ T7799] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[ 1019.770052][ T7799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.837250][ T7799] usb 2-1: config 0 descriptor??
[ 1019.932493][ T7799] usb 2-1: can't set config #0, error -71
[ 1019.964946][ T7799] usb 2-1: USB disconnect, device number 34
[ 1021.878474][T14012] xt_hashlimit: size too large, truncated to 1048576
[ 1021.962524][T11228] Process accounting resumed
[ 1023.453062][T14023] SET target dimension over the limit!
[ 1024.912469][T14003] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1025.129410][T14003] usb 2-1: Using ep0 maxpacket: 16
[ 1025.131831][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2158'.
[ 1025.628055][T14003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.668070][T14003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1025.709451][T14003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1025.754045][T14003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1025.829850][T14003] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1025.892653][T14003] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1025.919364][T14003] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1025.929601][T14003] usb 2-1: Manufacturer: syz
[ 1025.966126][T14003] usb 2-1: config 0 descriptor??
[ 1026.636112][T14003] rc_core: IR keymap rc-hauppauge not found
[ 1026.666490][T14003] Registered IR keymap rc-empty
[ 1026.683851][   T30] audit: type=1326 audit(1755334121.003:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1026.691325][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1026.769470][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1026.819219][   T30] audit: type=1326 audit(1755334121.003:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1026.828217][T14003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1026.884403][   T30] audit: type=1326 audit(1755334121.043:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1026.941522][   T30] audit: type=1326 audit(1755334121.043:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.084762][T14003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67
[ 1027.102780][   T30] audit: type=1326 audit(1755334121.043:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.124789][   T30] audit: type=1326 audit(1755334121.043:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.155370][   T30] audit: type=1326 audit(1755334121.043:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.178212][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.186316][   T30] audit: type=1326 audit(1755334121.043:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.208736][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.216487][   T30] audit: type=1326 audit(1755334121.043:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.238535][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.254902][   T30] audit: type=1326 audit(1755334121.043:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4a58ebe9 code=0x7ffc0000
[ 1027.297513][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.340403][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.439418][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.479370][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.509766][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.557725][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.609778][T14003] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1027.667219][T14003] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1027.686802][T14003] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1027.727564][T14003] usb 2-1: USB disconnect, device number 35
[ 1028.030744][T14089] pim6reg1: entered promiscuous mode
[ 1028.036154][T14089] pim6reg1: entered allmulticast mode
[ 1031.430933][T14169] support for the xor transformation has been removed.
[ 1032.406323][T14189] ipip0: entered allmulticast mode
[ 1032.710429][T14203] sctp: [Deprecated]: syz.0.2218 (pid 14203) Use of int in maxseg socket option.
[ 1032.710429][T14203] Use struct sctp_assoc_value instead
[ 1032.868621][T14208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2221'.
[ 1033.171062][T14186] block device autoloading is deprecated and will be removed.
[ 1034.113271][T14240] 9pnet_fd: Insufficient options for proto=fd
[ 1035.452893][T14238] team0: No ports can be present during mode change
[ 1036.826407][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2266'.
[ 1037.683211][T14332] veth0: entered promiscuous mode
[ 1037.698519][T14332] veth0: left promiscuous mode
[ 1039.149802][T14360] binfmt_misc: register: failed to install interpreter file ./file0
[ 1041.459805][T14443] netlink: 'syz.1.2313': attribute type 4 has an invalid length.
[ 1041.513012][T14444] netlink: 'syz.1.2313': attribute type 4 has an invalid length.
[ 1042.584118][T14424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1043.421393][T14474] pim6reg1: entered promiscuous mode
[ 1043.426882][T14474] pim6reg1: entered allmulticast mode
[ 1043.588695][T14479] syz.0.2330 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1044.777184][T14515] Illegal XDP return value 70 on prog  (id 659) dev syz_tun, expect packet loss!
[ 1046.403131][T14563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2359'.
[ 1046.504794][T14566] support for the xor transformation has been removed.
[ 1046.972091][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'.
[ 1047.052152][T14579] ipip0: entered promiscuous mode
[ 1047.057586][T14579] ipip0: entered allmulticast mode
[ 1047.066410][T14579] bond5: (slave ipip0): The slave device specified does not support setting the MAC address
[ 1047.082650][T14579] bond5: (slave ipip0): Error -95 calling set_mac_address
[ 1049.638342][T14622] netlink: 'syz.2.2384': attribute type 4 has an invalid length.
[ 1049.722010][T14625] netlink: 'syz.2.2384': attribute type 4 has an invalid length.
[ 1049.765120][T14624] syz_tun: entered promiscuous mode
[ 1049.799021][T14624] syz_tun: entered allmulticast mode
[ 1049.816149][T14624] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1052.404547][T14686] ./file0: Can't lookup blockdev
[ 1053.365781][T11231] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[ 1053.384471][T11231] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[ 1053.411126][T11231] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[ 1053.458809][T11231] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1053.497834][T14731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1053.659988][T14734] fido_id[14734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1054.059358][T11212] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1054.194387][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 1054.194408][   T30] audit: type=1326 audit(1755334148.513:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14756 comm="syz.1.2438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b4a58ebe9 code=0x0
[ 1054.243964][T11212] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[ 1054.284772][T11212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.321121][T11212] usb 4-1: config 0 has no interface number 0
[ 1054.339269][T11212] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1054.352933][T11212] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 155, setting to 64
[ 1054.368245][T11212] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1054.389975][T11212] usb 4-1: config 0 interface 52 has no altsetting 0
[ 1054.406626][T11212] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1054.422992][T11212] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1054.439713][T11212] usb 4-1: Manufacturer: syz
[ 1054.464631][T11212] usb 4-1: config 0 descriptor??
[ 1054.480890][T11212] hub 4-1:0.52: bad descriptor, ignoring hub
[ 1054.495069][T11212] hub 4-1:0.52: probe with driver hub failed with error -5
[ 1054.704998][T11212] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input68
[ 1055.030081][T11231] usb 4-1: USB disconnect, device number 29
[ 1055.303111][T14780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3213269175 (102824613600 ns) > initial count (93960712448 ns). Using initial count to start timer.
[ 1055.350091][T14781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1055.392440][T14780] kvm: Disabled LAPIC found during irq injection
[ 1057.755959][T14828] netlink: 'syz.4.2463': attribute type 25 has an invalid length.
[ 1057.786101][T14828] netlink: 'syz.4.2463': attribute type 8 has an invalid length.
[ 1058.364101][ T5950] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1058.539577][ T5950] usb 3-1: Using ep0 maxpacket: 8
[ 1058.728390][ T5950] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1058.748391][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'.
[ 1058.890526][ T5950] usb 3-1: config 179 has no interface number 0
[ 1058.964781][T14853] netlink: 'syz.3.2473': attribute type 5 has an invalid length.
[ 1058.999988][ T5950] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1059.039414][ T5950] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1059.120055][ T5950] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1059.142280][ T5950] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1059.163734][ T5950] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1059.173296][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.221507][T14842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1059.601550][T14874] netlink: 'syz.0.2475': attribute type 16 has an invalid length.
[ 1059.609719][T14874] netlink: 'syz.0.2475': attribute type 17 has an invalid length.
[ 1060.119530][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1060.119561][T11231] usb 3-1: USB disconnect, device number 31
[ 1060.135221][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1060.276561][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.283000][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.296856][ T5950] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input69
[ 1064.709405][   T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1064.869521][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1064.877345][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1065.029467][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.039419][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1065.048546][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.083582][   T10] usb 3-1: config 0 descriptor??
[ 1065.295550][T15001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1065.551926][   T10] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1065.838820][   T10] usb 3-1: USB disconnect, device number 32
[ 1065.921590][T14003] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1065.994066][T14003] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1067.276895][T15049] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1067.941150][T15072] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1068.764785][T15072] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1068.798949][T15072] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[ 1068.820002][T15072] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[ 1068.839718][T15072] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[ 1068.860903][T15072] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[ 1068.881633][T15072] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[ 1068.911596][T15072] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[ 1068.927464][T15072] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[ 1068.936489][T15072] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[ 1071.269078][T15109] kvm: kvm [15108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[ 1071.294307][T15109] kvm: kvm [15108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[ 1071.326914][T15109] kvm: kvm [15108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800
[ 1072.319649][T11228] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1072.491942][T11228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1072.526632][T11228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1072.547741][T11228] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1072.575996][T11228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.601577][T11228] usb 2-1: config 0 descriptor??
[ 1073.060175][T11228] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 1073.099542][T11228] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1074.380820][T11228] usb 2-1: USB disconnect, device number 36
[ 1075.782495][T15217] kvm: kvm [15216]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x82d
[ 1075.811101][T15217] kvm: kvm [15216]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x863
[ 1075.837690][T15217] kvm: kvm [15216]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8e3
[ 1075.876232][T15217] kvm: kvm [15216]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x923
[ 1086.136085][T15575] veth0_to_bridge: entered promiscuous mode
[ 1086.176217][T15574] veth0_to_bridge: left promiscuous mode
[ 1086.227789][T15581] netlink: 'syz.1.2746': attribute type 4 has an invalid length.
[ 1088.724244][T15658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1088.744028][T15658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1088.759536][T15658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1088.780783][T15658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1088.794731][T15658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1089.351615][T15657] chnl_net:caif_netlink_parms(): no params data found
[ 1089.635531][T15657] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.659508][T15657] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.666912][T15657] bridge_slave_0: entered allmulticast mode
[ 1089.691253][T15657] bridge_slave_0: entered promiscuous mode
[ 1089.703475][T15657] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.731778][T15657] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.744262][T15657] bridge_slave_1: entered allmulticast mode
[ 1089.759478][T15657] bridge_slave_1: entered promiscuous mode
[ 1090.024315][T15657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1090.051897][T15657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1090.096429][T15684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1090.432300][T15657] team0: Port device team_slave_0 added
[ 1090.532347][T15657] team0: Port device team_slave_1 added
[ 1090.697744][T15657] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.715433][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1090.786055][T15657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1090.825471][T15657] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1090.835325][T15658] Bluetooth: hci1: command tx timeout
[ 1090.845130][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1090.873368][T15657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1090.972479][T15657] hsr_slave_0: entered promiscuous mode
[ 1090.980522][T15657] hsr_slave_1: entered promiscuous mode
[ 1090.987074][T15657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1090.996208][T15657] Cannot create hsr debugfs directory
[ 1091.082552][T15709] syzkaller0: entered promiscuous mode
[ 1091.088418][T15709] syzkaller0: entered allmulticast mode
[ 1092.912167][T15658] Bluetooth: hci1: command tx timeout
[ 1094.989602][T15658] Bluetooth: hci1: command tx timeout
[ 1095.526264][T15657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.729891][T15657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.979702][T15809] overlayfs: missing 'lowerdir'
[ 1095.998640][T15657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.454208][T15657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.925133][T15657] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1096.940368][T15843] 
[ 1096.942807][T15843] ======================================================
[ 1096.949859][T15843] WARNING: possible circular locking dependency detected
[ 1096.956977][T15843] 6.16.0-syzkaller #0 Not tainted
[ 1096.962011][T15843] ------------------------------------------------------
[ 1096.969035][T15843] syz.3.2835/15843 is trying to acquire lock:
[ 1096.975115][T15843] ffff88801b2fca20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xb3/0x500
[ 1096.985445][T15843] 
[ 1096.985445][T15843] but task is already holding lock:
[ 1096.992830][T15843] ffff8881437ee278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1d56/0x2410
[ 1097.002623][T15843] 
[ 1097.002623][T15843] which lock already depends on the new lock.
[ 1097.002623][T15843] 
[ 1097.013066][T15843] 
[ 1097.013066][T15843] the existing dependency chain (in reverse order) is:
[ 1097.022094][T15843] 
[ 1097.022094][T15843] -> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}:
[ 1097.030737][T15843]        lock_acquire+0x120/0x360
[ 1097.035781][T15843]        blk_alloc_queue+0x538/0x620
[ 1097.041089][T15843]        __blk_mq_alloc_disk+0x162/0x340
[ 1097.046743][T15843]        loop_add+0x41b/0xad0
[ 1097.051433][T15843]        loop_init+0x173/0x230
[ 1097.056218][T15843]        do_one_initcall+0x233/0x820
[ 1097.061522][T15843]        do_initcall_level+0x137/0x1f0
[ 1097.067002][T15843]        do_initcalls+0x69/0xd0
[ 1097.071877][T15843]        kernel_init_freeable+0x3d9/0x570
[ 1097.077619][T15843]        kernel_init+0x1d/0x1d0
[ 1097.082497][T15843]        ret_from_fork+0x3fc/0x770
[ 1097.087626][T15843]        ret_from_fork_asm+0x1a/0x30
[ 1097.092932][T15843] 
[ 1097.092932][T15843] -> #2 (fs_reclaim){+.+.}-{0:0}:
[ 1097.100168][T15843]        lock_acquire+0x120/0x360
[ 1097.105209][T15843]        fs_reclaim_acquire+0x72/0x100
[ 1097.110687][T15843]        kmem_cache_alloc_noprof+0x44/0x3c0
[ 1097.116594][T15843]        __kernfs_iattrs+0x93/0x280
[ 1097.121810][T15843]        kernfs_iop_setattr+0xea/0x3f0
[ 1097.127285][T15843]        notify_change+0xb36/0xe40
[ 1097.132419][T15843]        do_truncate+0x1a4/0x220
[ 1097.137370][T15843]        path_openat+0x306c/0x3830
[ 1097.142502][T15843]        do_filp_open+0x1fa/0x410
[ 1097.147551][T15843]        do_sys_openat2+0x121/0x1c0
[ 1097.152775][T15843]        __x64_sys_openat+0x138/0x170
[ 1097.158169][T15843]        do_syscall_64+0xfa/0x3b0
[ 1097.163211][T15843]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.169643][T15843] 
[ 1097.169643][T15843] -> #1 (iattr_mutex){+.+.}-{4:4}:
[ 1097.176970][T15843]        lock_acquire+0x120/0x360
[ 1097.182055][T15843]        __mutex_lock+0x182/0xe80
[ 1097.187122][T15843]        __kernfs_iattrs+0x2a/0x280
[ 1097.192343][T15843]        kernfs_iop_setattr+0xea/0x3f0
[ 1097.197820][T15843]        notify_change+0xb36/0xe40
[ 1097.202964][T15843]        do_truncate+0x1a4/0x220
[ 1097.207916][T15843]        path_openat+0x306c/0x3830
[ 1097.213050][T15843]        do_filp_open+0x1fa/0x410
[ 1097.218095][T15843]        do_sys_openat2+0x121/0x1c0
[ 1097.223316][T15843]        __x64_sys_openat+0x138/0x170
[ 1097.228711][T15843]        do_syscall_64+0xfa/0x3b0
[ 1097.233753][T15843]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.240180][T15843] 
[ 1097.240180][T15843] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1097.248743][T15843]        validate_chain+0xb9b/0x2140
[ 1097.254080][T15843]        __lock_acquire+0xab9/0xd20
[ 1097.259299][T15843]        lock_acquire+0x120/0x360
[ 1097.264345][T15843]        down_read+0x46/0x2e0
[ 1097.269048][T15843]        kernfs_iop_getattr+0xb3/0x500
[ 1097.274555][T15843]        vfs_getattr_nosec+0x2e1/0x430
[ 1097.280040][T15843]        loop_assign_backing_file+0x222/0x400
[ 1097.286133][T15843]        lo_ioctl+0x1dc1/0x2410
[ 1097.291035][T15843]        blkdev_ioctl+0x5a8/0x6d0
[ 1097.296080][T15843]        __se_sys_ioctl+0xfc/0x170
[ 1097.301219][T15843]        do_syscall_64+0xfa/0x3b0
[ 1097.306266][T15843]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.312701][T15843] 
[ 1097.312701][T15843] other info that might help us debug this:
[ 1097.312701][T15843] 
[ 1097.322944][T15843] Chain exists of:
[ 1097.322944][T15843]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24
[ 1097.322944][T15843] 
[ 1097.337435][T15843]  Possible unsafe locking scenario:
[ 1097.337435][T15843] 
[ 1097.344991][T15843]        CPU0                    CPU1
[ 1097.350371][T15843]        ----                    ----
[ 1097.355751][T15843]   lock(&q->q_usage_counter(io)#24);
[ 1097.361157][T15843]                                lock(fs_reclaim);
[ 1097.367687][T15843]                                lock(&q->q_usage_counter(io)#24);
[ 1097.375630][T15843]   rlock(&root->kernfs_iattr_rwsem);
[ 1097.381029][T15843] 
[ 1097.381029][T15843]  *** DEADLOCK ***
[ 1097.381029][T15843] 
[ 1097.389214][T15843] 3 locks held by syz.3.2835/15843:
[ 1097.394452][T15843]  #0: ffff888024c9a400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x1247/0x2410
[ 1097.403548][T15843]  #1: ffff8881437ee278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1d56/0x2410
[ 1097.413773][T15843]  #2: ffff8881437ee2b0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: lo_ioctl+0x1d56/0x2410
[ 1097.424257][T15843] 
[ 1097.424257][T15843] stack backtrace:
[ 1097.430165][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.3.2835 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1097.430186][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1097.430197][T15843] Call Trace:
[ 1097.430206][T15843]  <TASK>
[ 1097.430214][T15843]  dump_stack_lvl+0x189/0x250
[ 1097.430239][T15843]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1097.430259][T15843]  ? __pfx__printk+0x10/0x10
[ 1097.430283][T15843]  ? print_lock_name+0xde/0x100
[ 1097.430306][T15843]  print_circular_bug+0x2ee/0x310
[ 1097.430329][T15843]  check_noncircular+0x134/0x160
[ 1097.430353][T15843]  validate_chain+0xb9b/0x2140
[ 1097.430383][T15843]  __lock_acquire+0xab9/0xd20
[ 1097.430403][T15843]  ? kernfs_iop_getattr+0xb3/0x500
[ 1097.430422][T15843]  lock_acquire+0x120/0x360
[ 1097.430437][T15843]  ? kernfs_iop_getattr+0xb3/0x500
[ 1097.430463][T15843]  down_read+0x46/0x2e0
[ 1097.430484][T15843]  ? kernfs_iop_getattr+0xb3/0x500
[ 1097.430505][T15843]  kernfs_iop_getattr+0xb3/0x500
[ 1097.430527][T15843]  vfs_getattr_nosec+0x2e1/0x430
[ 1097.430551][T15843]  loop_assign_backing_file+0x222/0x400
[ 1097.430573][T15843]  ? __pfx_loop_assign_backing_file+0x10/0x10
[ 1097.430591][T15843]  ? schedule+0x91/0x360
[ 1097.430614][T15843]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[ 1097.430641][T15843]  lo_ioctl+0x1dc1/0x2410
[ 1097.430663][T15843]  ? __pfx_lo_ioctl+0x10/0x10
[ 1097.430679][T15843]  ? ima_match_policy+0x10b/0x2150
[ 1097.430704][T15843]  ? ima_match_policy+0x20c3/0x2150
[ 1097.430738][T15843]  ? __lock_acquire+0xab9/0xd20
[ 1097.430756][T15843]  ? __lock_acquire+0xab9/0xd20
[ 1097.430776][T15843]  ? __lock_acquire+0xab9/0xd20
[ 1097.430797][T15843]  ? __lock_acquire+0xab9/0xd20
[ 1097.430821][T15843]  ? is_bpf_text_address+0x26/0x2b0
[ 1097.430841][T15843]  ? is_bpf_text_address+0x292/0x2b0
[ 1097.430857][T15843]  ? is_bpf_text_address+0x26/0x2b0
[ 1097.430874][T15843]  ? kernel_text_address+0xa5/0xe0
[ 1097.430901][T15843]  ? __kernel_text_address+0xd/0x40
[ 1097.430927][T15843]  ? unwind_get_return_address+0x4d/0x90
[ 1097.430947][T15843]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1097.430970][T15843]  ? arch_stack_walk+0xfc/0x150
[ 1097.430995][T15843]  ? stack_trace_save+0x9c/0xe0
[ 1097.431018][T15843]  ? stack_depot_save_flags+0x40/0x900
[ 1097.431040][T15843]  ? kasan_save_track+0x4f/0x80
[ 1097.431066][T15843]  ? kasan_save_track+0x3e/0x80
[ 1097.431092][T15843]  ? kasan_save_free_info+0x46/0x50
[ 1097.431114][T15843]  ? __kasan_slab_free+0x62/0x70
[ 1097.431128][T15843]  ? kfree+0x18e/0x440
[ 1097.431153][T15843]  ? tomoyo_path_number_perm+0x47a/0x5a0
[ 1097.431176][T15843]  ? security_file_ioctl+0xcb/0x2d0
[ 1097.431194][T15843]  ? __se_sys_ioctl+0x47/0x170
[ 1097.431218][T15843]  ? do_syscall_64+0xfa/0x3b0
[ 1097.431238][T15843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.431266][T15843]  ? do_vfs_ioctl+0xf37/0x1990
[ 1097.431292][T15843]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1097.431321][T15843]  ? kasan_quarantine_put+0xdd/0x220
[ 1097.431350][T15843]  ? blkdev_common_ioctl+0xfc3/0x2450
[ 1097.431372][T15843]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1097.431390][T15843]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1097.431407][T15843]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[ 1097.431428][T15843]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1097.431445][T15843]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1097.431463][T15843]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1097.431488][T15843]  ? __lock_acquire+0xab9/0xd20
[ 1097.431505][T15843]  ? __asan_memset+0x22/0x50
[ 1097.431528][T15843]  ? smack_file_ioctl+0x24a/0x340
[ 1097.431545][T15843]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1097.431562][T15843]  ? __pfx_lo_ioctl+0x10/0x10
[ 1097.431579][T15843]  blkdev_ioctl+0x5a8/0x6d0
[ 1097.431600][T15843]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1097.431619][T15843]  ? __fget_files+0x2a/0x420
[ 1097.431640][T15843]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1097.431660][T15843]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1097.431680][T15843]  __se_sys_ioctl+0xfc/0x170
[ 1097.431707][T15843]  do_syscall_64+0xfa/0x3b0
[ 1097.431726][T15843]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1097.431743][T15843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.431760][T15843]  ? clear_bhb_loop+0x60/0xb0
[ 1097.431780][T15843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.431797][T15843] RIP: 0033:0x7f007078ebe9
[ 1097.431814][T15843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1097.431829][T15843] RSP: 002b:00007f0071579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1097.431848][T15843] RAX: ffffffffffffffda RBX: 00007f00709b5fa0 RCX: 00007f007078ebe9
[ 1097.431861][T15843] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003
[ 1097.431872][T15843] RBP: 00007f0070811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1097.431883][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1097.431893][T15843] R13: 00007f00709b6038 R14: 00007f00709b5fa0 R15: 00007fff900f2dc8
[ 1097.431915][T15843]  </TASK>
[ 1097.914947][T15845] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns
[ 1097.968618][T15657] netdevsim netdevsim0 netdevsim1: renamed from eth1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1098.042376][T15658] Bluetooth: hci1: command tx timeout
[ 1098.953869][ T5957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.020103][T15358] syz_tun (unregistering): left allmulticast mode
[ 1099.056318][ T5957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.147620][ T5957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.212133][ T5957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.257524][T15847] bond0: (slave syz_tun): Releasing backup interface
[ 1099.265287][T15847] syz_tun (unregistering): left promiscuous mode
[ 1099.272149][T15847] syz_tun (unregistering): left allmulticast mode
[ 1099.453620][ T5957] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1099.501159][ T5957] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1099.542928][ T5957] bond0 (unregistering): left promiscuous mode
[ 1099.558649][ T5957] bond_slave_0: left promiscuous mode
[ 1099.569352][ T5957] bond_slave_1: left promiscuous mode
[ 1099.574936][ T5957] bridge_slave_1: left promiscuous mode
[ 1099.586780][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.609590][ T5957] bond_slave_0: left allmulticast mode
[ 1099.622860][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1099.650735][ T5957] bond_slave_1: left allmulticast mode
[ 1099.659557][ T5957] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1099.680239][ T5957] bridge_slave_1: left allmulticast mode
[ 1099.686915][ T5957] bond0 (unregistering): Released all slaves
[ 1099.709625][ T5957] bond1 (unregistering): Released all slaves
[ 1099.724414][ T5957] bond2 (unregistering): Released all slaves
[ 1099.878063][ T5957] bond3 (unregistering): Released all slaves
[ 1100.417173][ T5957] batadv0: left promiscuous mode
[ 1100.432153][ T5957] hsr_slave_0: left promiscuous mode
[ 1100.438250][ T5957] hsr_slave_1: left promiscuous mode
[ 1100.446081][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1100.455738][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1100.465122][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1100.475929][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1100.488110][ T5957] veth0_macvtap: left promiscuous mode
[ 1100.494005][ T5957] veth1_vlan: left promiscuous mode
[ 1100.499560][ T5957] veth0_vlan: left promiscuous mode
[ 1100.784065][ T5957] team0 (unregistering): Port device team_slave_1 removed
[ 1100.814206][ T5957] team0 (unregistering): Port device team_slave_0 removed
[ 1101.249929][ T5957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.263733][ T5957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.316797][ T5957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.327555][ T5957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.367376][ T5957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.378789][ T5957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.466410][ T5957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.478284][ T5957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.628119][ T5957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.640019][ T5957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.691943][ T5957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.704037][ T5957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.745347][ T5957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.759449][ T5957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.816691][ T5957] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1101.826335][ T5957] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.157691][ T5957] bridge_slave_1: left allmulticast mode
[ 1102.166827][ T5957] bridge_slave_1: left promiscuous mode
[ 1102.172774][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.184759][ T5957] bridge_slave_0: left allmulticast mode
[ 1102.191149][ T5957] bridge_slave_0: left promiscuous mode
[ 1102.196999][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.207046][ T5957] bridge_slave_1: left allmulticast mode
[ 1102.213224][ T5957] bridge_slave_1: left promiscuous mode
[ 1102.218915][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.227430][ T5957] bridge_slave_0: left allmulticast mode
[ 1102.234371][ T5957] bridge_slave_0: left promiscuous mode
[ 1102.240469][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.249446][ T5957] bridge_slave_1: left allmulticast mode
[ 1102.255151][ T5957] bridge_slave_1: left promiscuous mode
[ 1102.261957][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.270437][ T5957] bridge_slave_0: left allmulticast mode
[ 1102.276102][ T5957] bridge_slave_0: left promiscuous mode
[ 1102.282218][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.373940][ T5957] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1102.465880][ T5957] bond0 (unregistering): left promiscuous mode
[ 1102.472262][ T5957] bond_slave_0: left promiscuous mode
[ 1102.477755][ T5957] bond_slave_1: left promiscuous mode
[ 1102.484376][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1102.493401][ T5957] bond_slave_0: left allmulticast mode
[ 1102.501935][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1102.512302][ T5957] bond_slave_1: left allmulticast mode
[ 1102.518760][ T5957] bond0 (unregistering): Released all slaves
[ 1102.532885][ T5957] bond1 (unregistering): Released all slaves
[ 1102.641072][ T5957] bond2 (unregistering): Released all slaves
[ 1102.745151][ T5957] bond3 (unregistering): Released all slaves
[ 1102.853499][ T5957] bond4 (unregistering): Released all slaves
[ 1102.863452][ T5957] bond5 (unregistering): Released all slaves
[ 1102.899591][ T5957] bond0 (unregistering): (slave gretap1): Releasing active interface
[ 1103.063760][ T5957] bond0 (unregistering): Released all slaves
[ 1103.177930][ T5957] bond1 (unregistering): Released all slaves
[ 1103.283122][ T5957] bond2 (unregistering): Released all slaves
[ 1103.358829][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1103.368973][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1103.380268][ T5957] bond0 (unregistering): Released all slaves
[ 1103.491405][ T5957] tipc: Left network mode
[ 1103.506622][ T5957] tipc: Left network mode
[ 1104.002468][ T5957] batadv0: left promiscuous mode
[ 1104.013455][ T5957] hsr_slave_0: left promiscuous mode
[ 1104.021299][ T5957] hsr_slave_1: left promiscuous mode
[ 1104.027163][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1104.035476][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1104.045727][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1104.053726][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1104.064238][ T5957] batadv0: left promiscuous mode
[ 1104.073385][ T5957] hsr_slave_0: left promiscuous mode
[ 1104.082083][ T5957] hsr_slave_1: left promiscuous mode
[ 1104.088018][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1104.095894][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1104.105716][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1104.115771][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1104.129949][ T5957] hsr_slave_0: left promiscuous mode
[ 1104.136058][ T5957] hsr_slave_1: left promiscuous mode
[ 1104.141984][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1104.151931][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1104.167076][ T5957] veth1_macvtap: left promiscuous mode
[ 1104.175239][ T5957] veth0_macvtap: left promiscuous mode
[ 1104.180950][ T5957] veth1_vlan: left promiscuous mode
[ 1104.186263][ T5957] veth0_vlan: left promiscuous mode
[ 1104.194238][ T5957] veth1_macvtap: left promiscuous mode
[ 1104.200081][ T5957] veth1_vlan: left promiscuous mode
[ 1104.205461][ T5957] veth0_vlan: left promiscuous mode
[ 1104.432239][ T5957] team0 (unregistering): Port device team_slave_1 removed
[ 1104.444843][ T5957] team0 (unregistering): Port device team_slave_0 removed
[ 1104.666118][ T5957] team0 (unregistering): Port device team_slave_1 removed
[ 1104.678050][ T5957] team0 (unregistering): Port device team_slave_0 removed
[ 1104.985284][ T5957] team0 (unregistering): Port device team_slave_1 removed
[ 1105.014069][ T5957] team0 (unregistering): Port device team_slave_0 removed
[ 1105.724057][ T5957] IPVS: stop unused estimator thread 0...
[ 1105.733179][ T5957] IPVS: stop unused estimator thread 0...