last executing test programs:

7.66673967s ago: executing program 3 (id=755):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000040)={0x100, 0x6, 0x895})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0x49, &(0x7f0000000400)=ANY=[], 0x0)
signalfd(r2, &(0x7f0000000080), 0x8)

6.952957866s ago: executing program 3 (id=758):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz1\x00', 0x35})
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001140000001100010000000000000000000300000b"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000400)={0x6, {{0xa, 0x4e23, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xff}}, {{0xa, 0x4e21, 0x4, @mcast1, 0x6}}}, 0x104)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xac, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0xac}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xb0\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3wA\xf6`>\x8b')
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a4)
write$cgroup_int(r6, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f0000000000))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000000c0)={0x0, r7, 0xfffffffffffffffd, 0x29a06d72, 0x6})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a4)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc004aeba, &(0x7f0000000600)={0x3, 0x1, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0xa000, 0x4}})
write$cgroup_int(r8, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f0000000000))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r8, 0xc02064cc, &(0x7f00000000c0)={0x0, r9, 0xfffffffffffffffd, 0x29a06d72, 0x6})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000005c0)={&(0x7f0000000100)=[r7, r9], &(0x7f0000000540)=[0x6, 0xe035, 0xffffffffffffff16, 0x8, 0xffffffff80000001, 0x9, 0x2, 0x8, 0x5, 0xffffffff], 0x2})

6.361632245s ago: executing program 3 (id=759):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4)
sendmsg$kcm(r1, 0x0, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_submit(0x0, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000100)={0x0, 0x2f00})
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x0)
r6 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xdbW', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0xa0601e1, 0x1, 0x8, 0x3})
syz_usb_connect(0x4, 0x373, &(0x7f0000000c40)={{0x12, 0x1, 0x250, 0x9c, 0x21, 0x8b, 0xff, 0x1608, 0x20c, 0xf7c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x3, 0x7, 0x1, 0x20, 0x7, "", [{{0x9, 0x4, 0x66, 0x4, 0x8, 0xfa, 0x7f, 0x82, 0xa, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "8f47c9"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb8, 0xff, 0xd, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xc000, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xf2e, 0xff, 0x6, 0xa2, 0x8, 0x7}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x5, 0xcd, 0xd, 0x94}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xc4, 0xff, 0x9, 0x2}, @as_header={0x7, 0x24, 0x1, 0x80, 0x6, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x3, 0x2, 0x8}]}], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x7, 0x6a, 0xfb}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x77, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x208, 0x3, 0x95, 0xf1}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xd, 0x52, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x9, 0x4, 0x1, [@generic={0x87, 0x1, "98eff95231faeca783845da9550ac012771fde87bc8633e7bd458d3e09ce303dc12c83ac365d9a3a2bec7d03c472b67ca89c9729cc07ffd16bbb6ed3dd2139491cbed4a4a18814145ae08b657a0dea63422983a72d032f2a90748d98cd9b5e953aa126faa6dc43eb758fd20df71338192243be715be3151953aa62e75b2520da6d7b4c9bc8"}, @generic={0x61, 0xe, "60470d01015a4c098604c16a3d7ab7058c4501a49d5546cf593a9abcf712243c7de2681130f0ca528ec01d3de58c91311aa0d36e1c53c4961c2472e28c200d4c5dc745ababcaa1af989f122fdb06f55e7bc51c1a57cbc2cdc68e9769863dce"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x9, 0x6, 0x7, [@generic={0x5c, 0x24, "e262c1d55bf5533baef1167ee9b5fecee707c7eea11ff0f7a42aa12a79f4ce988c57d2f710b1b0a73a4b55f3e3e98554f25027fd4d0dcc88eabf869148711dbc36321eba14e2d6413fb2bc6d8cfb91a54ea27ace3dc54e25c3a5"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x75, 0xc3, 0x9, [@generic={0xca, 0xe, "fb05b67652b74f3a9f72f1b62fbb2292d2a6a72efc6da8449ab7f06f2cae8166388156db81d269c3073afee3e4115ca0e57bad50aa735bd7966f862c297c34d8a21cb05c176a48b059d773d9b14b531cb8b1b0a9a6f5e04dbcc743c5d640252f3f1b3b195fab2cc3aa9f03ab67269686e1cb836f290f4dfeb3aaac8cfc5e5b6a994d5a48b4a1e61ddea064aed958049309959e0090b54695ed33201528e79dbe6f410f8f7bb8cc2278698118304b80ed1621a921d64b3c5fb3cfb11c3735d0a7c55f7aaf2419550b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa5, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0xd08811c56910ef15, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0xec, 0x5, 0x0, 0x74, 0x7b, 0x95, 0x6, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x2040, 0x33, "858c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0x17, "caac"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xb, 0xc, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x0, 0x40}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc0, 0x1, 0xff, 0x4, 'l\'', "eb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x3, 0x0, 0x5}]}]}}, {{0x9, 0x4, 0x80, 0x8, 0x6, 0xff, 0xff, 0xff, 0x40, [], [{{0x9, 0x5, 0x8, 0x13, 0x400, 0x1, 0x5, 0x3}}, {{0x9, 0x5, 0x0, 0xcc56ffd5dfa218c, 0x40, 0xf, 0xd4, 0xfc}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x0, 0x1a}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0xf45}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0x8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x401}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x6, 0x3, 0xb, 0x8}, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0x2, [{0xa4, &(0x7f0000001340)=@string={0xa4, 0x3, "87f03e24c05d60cac92eb81fc61888f29e5936f49b3ef5ae61ec643cc457f3c4fe02830224ece6ff54038d1d2b4c8aea0066cb27bff1853a095867b08c6d5be24d4eafcab6cefd7a910a80df5a072ab155b5d959f6ff45d654a75d82a37728d349800744e166ba5a26994deb134ef7c2a16a7e15dc788501f741cbf45aa91619a03ae5783d1637f00e7335d30b2987b357a75a360a60cd4bb9723b701650b4f8478b"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x380a}}]})
mq_timedreceive(r6, &(0x7f0000000280)=""/211, 0xd3, 0x800000200042e2, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x1, 0x0)

5.939461073s ago: executing program 1 (id=762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x3, &(0x7f00000000c0)=0x8000000000000001)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
io_submit(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

5.38586756s ago: executing program 2 (id=763):
unshare(0x6a040000)
unshare(0x28000800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c001900100001040300"/20, @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c30000000000000000000280012800b000100697036746e6c0000180002801400020000000000000000000000ffff64010101"], 0x5c}}, 0x20000084)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0xc0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=<r4=>0x0)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="601100002400200027bd70007cdbdf2511000000140000000000000000000000aa0c00628008004300", @ANYRES32=0xee00, @ANYBLOB="14009b00fe8000000000000000000000000000aa1c1091800400da8014104680080048000000000085110770f13881f2fb9a9d86641d095586904419325e7a3327a7b348c5945b9cbe6cd6aab79cc1d2c0a7db85021fc40e19ee1c5ab52706482eec911c7f22af46829a4f6e4dcdfc6e1215d5e6ef81b655512ac6bbe69df97ab24ddd960ec48a9b980a4dd6223b94d21434fa96caf20ce7cdfcfceb5c4450cff3083cef9034b41d7997ebd233621499cf37caccb5f2b6b5b10b26f5d96ac43d1cbef4076ce038b9d0b4956269a75eb409cc581f3c3fbf722ab3bbbf842acad561e90e03b093632062589549212292d618fea0d7105d42362fef426fe7ecfc76f17d8fdadb979e338f4ae1893a4b6b15cfd4f11c65aa7d8f60d5f832335ba219f47940e1f60243b3b2e30470c7d69eb18c6ae39c07b85ac1a6230d4cbf342aca1cbea43073cd59dd7081c39f56b0b224c433c500f681628cf781e6a2d902a2bba43814bfcec8df09f84017dbf92147df61043b012bed983e179eae5f2b8d23609f2a828055f8bcd21328588f639b2a3df3fb20d8786fc09da758d4ced50747f68bb0f5ff7078d23fef04eefb127f70e1cb8d8da01184cc915ac70bbc6121f0a90fba360ae3b2e649e80fd15b5f0ea2098c752327bbe4fb1a1392a9f478a21b5004e8a7f6eeeca102ffea9c625e5ec724a1d615ba0aeb209c9379a55b9f6a8e20ba81bb9ca3518cba78f6c90e6f372681768cc1e9fac90593ea6aece386276291199816a92f18cb72346765a347a5621837874d3798303c1bc174ff955486c88665c317c1d901b71dd18e1629f076295b83ec7231328d85db5951d1a096af977f162695982e15fe8f737b1eeb91af136bf55b9bf1a7fb729574daa690d5a0d41865abad5638d9da1e4f1f0ea098ac801efa3cb1e79d5e4d426258428aeedecf52e4a744e66dd30b7f0a7e028c6a97d9089e6736f81e3487ec2d0b5fa32319c79ece5da90cc2c0cb4e2ba93658895e8f03bfe5a1258c9a083773afcab8f958885456690b32eb468094256068cc2f0c743085fe7f71e9fad46efefbd6f9a7ae2eba2cdec6a6efbe0899337e4cd9bdb4045e58854e708e59073dc59eeca279347543406a942dc93282d64880cc568be4dc6c5e71b852e8ef8af625f027e9cd127bc401468bfdcbfc519f7357be21b8e75de084069a281e1c37e70c14fdfd16edec1bd813c74dc8d0c115253bda0ceb01c567530743fb42aca55e646bad524634c908e5363c91f4ebaf2579794b6d67735160834848b50e929b81415c6ccdd4c2779cdd9f6d24b5f73bbec426f7983ba0029385aaa83b67cf600201f020dc8f0c537e40b22604c1fe3d7f2c45e758c56bf929a3095ed5fa5bfee2ecd90861e6adbf2f2e4265f61d486c1c5fcb3e2e5323957c4f774284a2ace328ecf92e3ed4760200e17bfeefeabb39c473edf7e8791790fa48b97ed72bbb5062613f3baefbae5e13198e8f312274a2f04c97fa4bb11b3d02b864924f12c54c9668f27444f8a634e0550568a63e8af18ae0c253854895361c9b170095e9eb98e41818b35d8b4608176240a23d79aad7afded6236d353c6e63a89afdc117ce64ac7f121e60334e93de0069b173130e1edac6ca0ef5f7a94c008f326ed4c230067199790f9ff42ff9b7249a0a21b6c5af6c0f57865c44fe1dfb894fd0a0b13ad3950f96c68e48d31f18ba1b42d651655fd37e1fdbb28ca37848dadba4ce003393b25ad2d6bdf99a845ed4505f96afd5794d02fb79a00e66ccb96cdf2a03556b8bcf74a1562c0c22767a24935db057ad2ceea6ef8598d5ae7ea06717731c2371a767d0d2911b0141b55e57f1c64098f6097b0b9798c50c8bb11df8bab41ccc2bac169f1650f3a43a70946cc4977d95925a71f6d0bea4516dd7baded47751a013f9f086b7bbfa33764f63fa61beef54f185cb6365f2711190a5609cb1b0319781e89d4eca799ca2ab80aece3cc7c7f39aa4ac2c4c68aa450fbbf250b8bb99629e0443caedb3dc07726d4e461a3039d014cf79c8579ac78751107ebdbfc3283eeeadbc810d559d49301af60e509d99707350f8d1eaa2b2900d3a7320fd168582f6c4c43e2b7222e655ab5e7e166d98b9af590d2ba5403e314afb07a71c056d294a56baaa6ec94e628602a958d904dffb902a50f56c3a91cd0eb6fb24cccec480b7b02ddec7cb14a5282cbf538e1c351a61f1d3acb82a5686fb6a5967b6c7c09c97d9f65514f97e72cbbae0605eb0d16439470be1dd44a4173ab6c00baf48392a79bb466b240f931a546db835ddc3610ddad86cdd7e9f3511c370971d7839eaaaa454e70b9e13ee1f70a3beef2ce3d3a63a71343449152ab8dfad3913608bda8c40300d9ea09060507aef11f7b95efa245429e5051d72fb713e8f096646b0192569f8e8927cb5250e8f6973bf60fc3cd3159e8b92a47b8bdab793c2900b11b567d41fcf0af04bd50023ec3addd1702a94a0d08a8e4d2069cb33553a90eceb30c9c020f2863a45346d2b021fa2b13ebb33d9b7651231ca0d4d80818cf9297ab61ace263ae6bcfa8264ed27711767a2202adf8b2e4dba7a57b71d71079af85c1d69ae134ba6837524f00b5a3ea9c64d769515e5dbf1cfb407e53e8526c08b62053df008bcad380a51c68db4da53685fa0e656676236f0bde44199f5d5d0a9f9e7d3b441a83e6e99a176c721c889e3b9d1e0b4205f7fa3632079d18e9c78a348affe5250104b853dba6429731afdaade216de7b226de5d44e2ce2834cee56f0bff0e1d45af9cc117a672c1a2896a2436050baa355c4e85edc7b6b3f006246f9193bebbb3ec550b411d365a6661fe58d205500c814b1b739a90e5bc153df3996bd3c999e49b77422928dc39829c55c126bc449939e94a2001cc857eaabfde65da7da9e195387267ce143e68778fdc97c2ea296ac7f824896e8a909f61476e2ded2516eea4ca5abfdc61ad627bef1e089015cdc2bb3ff1e6c1a76eeb12015bae3476c1ecd0904abb1e178de8e7de00c46a5d966740fe29e7cad75f7d89d9a7222ddf58978346290105620c6e584963edde1448c487ee6169c5209ce120887e51a45569baaa75737922d6ec33b1eefb2975ade8465e32ed902955f41ae97fc945e3089b282e1d4bedf05f363ce169aba9d018dae68a222d3cf62969e259c002a30ee0aa5f9240fb61730c375971df32074338ce2fefe7366b35fafce49379c28a325f46801920ecacd3ea0ad4cd0df752948f28f27fe9b8ea3d9b676b42e8e305db4b263d81cc66ff460f5ceff16920dba2ad93476c27ddeef2a8ccd12a079aee4c29bf493ad2e86f5f6eae7dda3e19df5882c6e77832177a29a895029d0cdc09385ad5eeb4427a361a2fd2710bb5b39a6a684f7951e2c115c86c980e74e0077a7a852cbda127ba246a2ec586eea141494257bfe3c5d101a459bd807d75f341c00a47c35c102d71d68db62bf61fc94fcbc73a6b4e969c4528800714715a72795d2eb29ef1020c6af8e1f0e3a8f53de829e6ca5e038a640e08d131f92b11b112a591a4cd1b8fc891c7de6df08baae3a4bc75ef94cabf12e35f81ecdec5f6ea827bb6418b1e3f3b6d73259a2370fe9024a0aca046f8a7f77d318fa2133ea3b37c0352a2ad6da21cabd090b05c0af4ac0d190ae7f65b99cf5153c6fcc34cf515d9b26f60694634c1321e0b2902333329606df39c36419555458200442ac4bacdd784b3211caa82f07441a305e1179ff2ce02c67cf30fd8ff627b03a0ad7c31ea1b8e171349e4b2c44a902906d40f9e5077c965a3eff3b5c5b028afface26ce5dcf2f6f594663ad1f91de06061ffc6d93fbd2d5d70a7f9c0214327dfca23ef87b78834289273bdfe05863400ef0fc505a36e4bbc519dfef2bf434d0406d6c829c6015083e61e24ab465146bdea05275759ef0b9da695409f03257e77a4e101429344811dea93f40338b05356d2090b4f113f7299e88e9502dcb96c819b50cefc7d607a848c87416f2e56e91c5def4a74e5c4d1b2c893790d058a1fafa92b5caf7501bf9b547889b9431c560fe56342b281c1cea3d8f592d6a2d6819070d96acf6b493cc391d50618102196d0a19f8d2b21f6b14db149b943bdab2dc0b7023ff82f8aa4eecb975db3efea98b5f8f9fe651c5bd3caa5bb50c8fb23d39f5d8ff17393ec4f325ec29c69d350f975d77a864e73d27b23540bf96c59aba869b09bd094a9d342cabc6bfc116382e61506daef3ac15e2eb9202781da1f520d0d91d64dc57d5b069e782bb06aa505e6395c75c0ec4e6a36dc82227b44b58bfd1ec5c1546b635a9387d3779827ac7c00d12716eda63f5fc837c2d3fdc855c0b0d49df7a022d4f41aac7908af6bb25ac86abc2ab4ad7f0bdd2074c52d825fbb6a08af1efa5baf4eef2e84718002198370fea853d986eb3c50a8e7f069a7ff4b2b23ec34c1faea3d35e755bcf949ade53023c780c27d19661331332c447dfb391bb8049bcab4fb5710ec149b7b83f0b6a62381565d00c9c0391444853452d91c5a54fab85b4bf03341ea5f090773faebe663c280c2877a632612966827f0b1f3554c22232753c6cf049cee0c2af0a063ebf68b2a9afd84d64b01fbb9ebe23913bcf0fcc9f980e3a2df63577b43d67311e27a4e8bbb554213b5458da3881b7d2ff5931bb96b9ddf356fcb32ccf4645295ec6f1e8caa842880b8142fcd37b96ad45bcb0516ae952e73785aab70c1f34e99c1afd462fd538120a07c4a77fb6eaf0f5edf4184548aaedf9fb33ea96063e3a679540dd666544abadc85b3d510832797fb15dfb9a67cdb7c5a4b4cebf3a26852920d2ce773e32a6cd72e65facfd6031a76cb84967d4fed83fa9fb8749b72d4e44579a74f10b089cd09e97f8d98811e10565f5eedf5c212896b8d8cce3e876f3f1c3fc84d6add1dbee71aefe1efba4a7c7c574d2d503dd0b736c7e79c80381258d406dbaf4e495a780cc5d6a74fe89bde3492f8cb22ca7829b506a9497dcbccd1d9b5faeb2f05dcc76d752ea8344f0a46a1400a300f4f41914604182a0d5b6c66a5dd1da1f7df604a68c3d72c295e1ffb0f9cfaef2154576b5b74701bde9b4c50f952a5e4416ff34d3ca8723d5ad1555b97537622286abe87bf2897fad290649538bb55027092f4d5bc21d5b9ee15ffe0b53f155231d9aede32affd5c0cbd0f2869223cbd6fe5cc93b41d1f3aa4596319273ff4dd0a58e74509502715667220db7532f63933fc5bbab46f54d606fb3e3eece498a1aabfff68eb9e5aff9fb2048f0f0ea33874d10e6332437df6762dc29a5308748a38551a53a64cd7d92b9d9f7aa043d80faa6993e3e869f43c1a7b613e00d892a65439907b542151522b409f4201b5e945cbfc8aa14df99bdd9c56e82726c46e46372f492ea1cc8e261c2f3ae0ba73d0dcc789b277a3ec7c301acf5ec1b2c7f034f5ce9e74e746c0022cd9b1fbe18ac795eca62a927d572e6bfe07bf0951e62caf653512c2b08413c613cdf347d5e5ef21877a8e63cd4cdc20064fc05a385464b0a04fd854a0fefeda1e30bbdc4fd3cbcfe65a6a56e2626d251577915af36e38db428e5944ee6f9dd13df2f334c90b92e2308b7997b143c8227415718faab6c74ab3d2cbeb7df308c549fa91a792facb0ef5f56adbfeaf736b82b749ffa4eec849a5405d58be7f2f71a8de7054977feff87d52b1e1721c4797af2ea8164624da554f87fd9e8390ee8faeef5fa6b7b827a356de06aa54d3bee9d33960f59150a3ef17ee85e62edac7ca650b860466ef01d91354ee304991ae6dd066aba747f791210a9830e93f8b88fc683d1822c88e674e8e4036ab3abdfe1feac8a08001e00", @ANYRES32=r4, @ANYBLOB="f900238013ba9dfc444f43f14929c20a93ec683cd41bfb325a3c7e53a9910b1d4cadbbce315b2f4b05fad2776ce449c5c045e92629bf9e6c1fd819d54e6f0f6e758ed11b1310bd40556330176caa6e093b1bbdd72ec9a8b48d437948d2fbe260fc120bbfc980ffe40c61b99cc104d9addf320836f1ff27232b91fb9a846321f497dc3c4e74d08fed8e9575eafe4016fdf492325dc6356a3537454e586533b4771be259c1f45e153873f24fdeda9eceb061428dc0e9a69eda9d59cb742cab073a8d3872174dc555496c8de369bcfccc402e7741c6dacb00503a84009b43591fee6df5b6daa201fced172603c941b812b32108002300", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x1160}, 0x1, 0x0, 0x0, 0x4000010}, 0x42000)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000047000/0x1000)=nil, 0x1000, 0x9, 0x80010, r5, 0x25b47000)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x7ff, 0x7fff, 0x1, 0x4, 0xffffffff, 0x0, 0x8, 0x7}, &(0x7f0000000280)={0x1, 0x7, 0x0, 0x8, 0x1d99, 0x0, 0x3, 0xfff}, &(0x7f00000002c0)={0x3, 0x4, 0x6, 0x2, 0x1, 0x7, 0x3, 0x9}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x2, 0x655a]}, 0x8})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x2000010, 0x8, 0x9bc6, 0x8, 0x4, 0x80000002], 0x1, 0x0, 0x0, [{}]}, 0x60)
getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x9, 0x9, 0x800be5, 0x7f]}, &(0x7f0000000000)=0x50)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x100)
ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000180)=@usbdevfs_driver={0xfffffff8, 0x80, &(0x7f0000000140)="8b0593e9ab2d8aaba3b0fc937eda8b8781d53acf6db39db56e6b84cfcd894c3ad8bebfb802881efb311d19c282f61e40165cdb"})

5.385422842s ago: executing program 3 (id=764):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x200000, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sched_getaffinity(0x0, 0x8, &(0x7f0000000300))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680)
syz_open_dev$vbi(0x0, 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0)

5.075513636s ago: executing program 2 (id=765):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x800c6803, &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
close(r2)

3.616576033s ago: executing program 1 (id=771):
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4)
r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x2, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @meta={0xc8e4e7633391175f, 0x7335e7a7, 0x17b3, 0x50dd, 0x2daf814c}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=r0, @ANYBLOB="000003000000000014000300766c616e300000000000000000000000d1b35c2c1ab19edf66ece69bf9dd15abd86b0398f14277fd4b8332c0951276aa265ec6dd"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

3.550698995s ago: executing program 1 (id=772):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4)
sendmsg$kcm(r1, 0x0, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_submit(0x0, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000100)={0x0, 0x2f00})
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x0)
r6 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xdbW', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0xa0601e1, 0x1, 0x8, 0x3})
syz_usb_connect(0x4, 0x373, &(0x7f0000000c40)={{0x12, 0x1, 0x250, 0x9c, 0x21, 0x8b, 0xff, 0x1608, 0x20c, 0xf7c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x3, 0x7, 0x1, 0x20, 0x7, "", [{{0x9, 0x4, 0x66, 0x4, 0x8, 0xfa, 0x7f, 0x82, 0xa, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "8f47c9"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb8, 0xff, 0xd, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xc000, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xf2e, 0xff, 0x6, 0xa2, 0x8, 0x7}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x5, 0xcd, 0xd, 0x94}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xc4, 0xff, 0x9, 0x2}, @as_header={0x7, 0x24, 0x1, 0x80, 0x6, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x3, 0x2, 0x8}]}], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x7, 0x6a, 0xfb}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x77, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x208, 0x3, 0x95, 0xf1}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xd, 0x52, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x9, 0x4, 0x1, [@generic={0x87, 0x1, "98eff95231faeca783845da9550ac012771fde87bc8633e7bd458d3e09ce303dc12c83ac365d9a3a2bec7d03c472b67ca89c9729cc07ffd16bbb6ed3dd2139491cbed4a4a18814145ae08b657a0dea63422983a72d032f2a90748d98cd9b5e953aa126faa6dc43eb758fd20df71338192243be715be3151953aa62e75b2520da6d7b4c9bc8"}, @generic={0x61, 0xe, "60470d01015a4c098604c16a3d7ab7058c4501a49d5546cf593a9abcf712243c7de2681130f0ca528ec01d3de58c91311aa0d36e1c53c4961c2472e28c200d4c5dc745ababcaa1af989f122fdb06f55e7bc51c1a57cbc2cdc68e9769863dce"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x9, 0x6, 0x7, [@generic={0x5c, 0x24, "e262c1d55bf5533baef1167ee9b5fecee707c7eea11ff0f7a42aa12a79f4ce988c57d2f710b1b0a73a4b55f3e3e98554f25027fd4d0dcc88eabf869148711dbc36321eba14e2d6413fb2bc6d8cfb91a54ea27ace3dc54e25c3a5"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x75, 0xc3, 0x9, [@generic={0xca, 0xe, "fb05b67652b74f3a9f72f1b62fbb2292d2a6a72efc6da8449ab7f06f2cae8166388156db81d269c3073afee3e4115ca0e57bad50aa735bd7966f862c297c34d8a21cb05c176a48b059d773d9b14b531cb8b1b0a9a6f5e04dbcc743c5d640252f3f1b3b195fab2cc3aa9f03ab67269686e1cb836f290f4dfeb3aaac8cfc5e5b6a994d5a48b4a1e61ddea064aed958049309959e0090b54695ed33201528e79dbe6f410f8f7bb8cc2278698118304b80ed1621a921d64b3c5fb3cfb11c3735d0a7c55f7aaf2419550b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa5, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0xd08811c56910ef15, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0xec, 0x5, 0x0, 0x74, 0x7b, 0x95, 0x6, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x2040, 0x33, "858c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0x17, "caac"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xb, 0xc, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x0, 0x40}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc0, 0x1, 0xff, 0x4, 'l\'', "eb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x3, 0x0, 0x5}]}]}}, {{0x9, 0x4, 0x80, 0x8, 0x6, 0xff, 0xff, 0xff, 0x40, [], [{{0x9, 0x5, 0x8, 0x13, 0x400, 0x1, 0x5, 0x3}}, {{0x9, 0x5, 0x0, 0xcc56ffd5dfa218c, 0x40, 0xf, 0xd4, 0xfc}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x0, 0x1a}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0xf45}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0x8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x401}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x6, 0x3, 0xb, 0x8}, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0x2, [{0xa4, &(0x7f0000001340)=@string={0xa4, 0x3, "87f03e24c05d60cac92eb81fc61888f29e5936f49b3ef5ae61ec643cc457f3c4fe02830224ece6ff54038d1d2b4c8aea0066cb27bff1853a095867b08c6d5be24d4eafcab6cefd7a910a80df5a072ab155b5d959f6ff45d654a75d82a37728d349800744e166ba5a26994deb134ef7c2a16a7e15dc788501f741cbf45aa91619a03ae5783d1637f00e7335d30b2987b357a75a360a60cd4bb9723b701650b4f8478b"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x380a}}]})
mq_timedreceive(r6, &(0x7f0000000280)=""/211, 0xd3, 0x800000200042e2, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x1, 0x0)

3.465815255s ago: executing program 3 (id=773):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x9, 0x999, 0x0, 0xb4d, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(0xffffffffffffffff, 0x804c4700, &(0x7f0000000040)={0x80000001, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x10}, 0x40004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3.460087041s ago: executing program 0 (id=774):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x84ff, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)

3.377003564s ago: executing program 0 (id=775):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x2)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000001c0)=0x859)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYRESHEX=r1], 0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
clock_gettime(0x3, &(0x7f0000000180))
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r3})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

2.889494316s ago: executing program 2 (id=776):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
io_setup(0x3ff, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f00000002c0)="0b47544bc2", 0x5}])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000000701010000000000000000070000010c00064000000000000060000c00078008000240000088780c00024000200000ff"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
ioctl$EVIOCGKEY(r5, 0x80404518, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000300)=0xa1)
socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r7, 0x0)
accept4$rose(r7, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

2.872348084s ago: executing program 0 (id=777):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x9902)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
creat(&(0x7f0000000280)='./file0\x00', 0xb0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0)
mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
r3 = socket(0x1e, 0x4, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000002c0)={0xd, 0x36d, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x7})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88c81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x6c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0xa4}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000003, 0x3, 0x5, 0x41, 0x2000000, 0x0, 0x2004c9, 0x0, 0xa1d, 0x6901, 0x8, 0x0, 0x3, 0x2], 0x8080000, 0x202})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.626356817s ago: executing program 1 (id=778):
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c", 0x3}) (async)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c", 0x3})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x1404, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c4005}, 0x40c0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r3=>0x0})
r4 = openat$dir(0xffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x134)
mkdirat(r4, &(0x7f00000009c0)='./file0\x00', 0x1)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0xbc, 0x10, 0x401, 0xa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3ff}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}], @IFLA_VTI_REMOTE={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_VTI_REMOTE={0x14, 0x5, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0xbc, 0x10, 0x401, 0xa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3ff}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}], @IFLA_VTI_REMOTE={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_VTI_REMOTE={0x14, 0x5, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.34732801s ago: executing program 1 (id=779):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0xf1)
fcntl$notify(r1, 0x402, 0x8000003d)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8f46}]}}}]}, 0x40}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x18, 0x3f, 0x9, 0xf2e, 0x0, {0x4}, [@nested={0x4, 0x1}]}, 0x18}}, 0x4044080)
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000300), 0x4)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
write$binfmt_elf64(r6, &(0x7f0000000580)=ANY=[], 0x78)
recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0x14}}], 0x4b, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r7=>0x0], 0x1})
socket$alg(0x26, 0x5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x0, 0x3, 0x6c, {0x6c, 0x6, "47e51163013f50c1282d55aca9655f66db37340f0af6d6b49a61391b0c679c27e5f5faf6ec09702f0d39187aa9478736d8b4f0ec9227baf702a908cff7a5013058d757b2ef68f96bbb15a202cdf2b6a47bd05c85f571ad9967d70399339ef9636d536eb1361986573c8d"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000480)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0xc, "6ee3327f"}, @global=@item_4={0x3, 0x1, 0x2, "6cc0a493"}, @local=@item_012={0x2, 0x2, 0x0, "b4a9"}, @global=@item_012={0x1, 0x1, 0x5, "a2"}, @global=@item_012={0x2, 0x1, 0x2, "f507"}, @main=@item_012={0x1, 0x0, 0xb, "88"}, @local=@item_4={0x3, 0x2, 0x8, "1eb7a99e"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc96, 0x6, 0x1, {0x22, 0xa19}}}}, &(0x7f0000000780)={0x18, &(0x7f00000005c0)={0x40, 0x0, 0x14, "42921a85149acd504be5e20a812ac5350763dab4"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x1, 0x3a, "dcace45981e715008c7457869817b0cb4c3ea43d01c986521dd510e03ff1324d41e818ce1bf4e8002a7ed3605c99618eb77e1c809eab104c2151"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0xff}})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r10=>0x0, 0x0, <r11=>0x0], &(0x7f0000000040), 0x3, r8})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r8], &(0x7f0000000100)=[0x3], &(0x7f0000000640)=[r11, r10, r10], &(0x7f0000000340), 0x0, 0xffffffff})
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00+'])

2.346475156s ago: executing program 0 (id=780):
r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=r0, @ANYBLOB="000003000000000014000300766c616e300000000000000000000000d1b35c2c1ab19edf66ece69bf9dd15abd86b0398f14277fd4b8332c0951276aa265ec6dd"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

2.17714923s ago: executing program 0 (id=781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x200000, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sched_getaffinity(0x0, 0x8, &(0x7f0000000300))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680)
syz_open_dev$vbi(0x0, 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0)

1.717585395s ago: executing program 1 (id=782):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$midi(0x4, 0x6a, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x40, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x54, [@ms_header={0x7, 0x24, 0x1, 0xaf01, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1000, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x6, 0x1, [{0x81, 0x4}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x8, 0x4, [{0x7, 0xfd}, {0x5, 0xc0}, {0x3, 0x5}, {0x7}], 0xf5}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x1, 0x2, [{0x9, 0x5}, {0x3, 0x7}], 0x8}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x9, 0x80, 0x8, {0x5, 0x25, 0x1, 0x1, "1f"}}}]}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x8, 0x3, 0x9, 0xf7, 0x6e}, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="050f0c00010710020c4402000f1239d0f781a1534ed1619306e51d77ba61f73e56e88ab379fe6e76d6116c065857ab6cf5d08015d6c86042446fd72b0ff8be2b910e77f03b59d7c620e1c1b4bd2bc2285e2737d2e946c622d05174efdc1d1e5d"], 0x4, [{0xae, &(0x7f0000000300)=@string={0xae, 0x3, "cdecfe02fdab2083443d9820d480f744e1f95161dca3254d06af570149b5f48676516a8b8a537c20ef47812ec6199c6bf675895c737ee6620854ac53a07235e814d1325562a3baf99698cb573bbb2cf2c8fd3111bdce2d5c8f05476ada724737c6129b6b9504d484a2538e8fcac391ee0e84931e0595a74b6e30c4a0a3a1c307304f07932e7804d258138a8b8c36e62ad09f2510a525a6a715a858bc8e988033f2a2bc917c80a013d805da21"}}, {0x6d, &(0x7f00000003c0)=@string={0x6d, 0x3, "d117c4450260ca567bd6a90242a3292de00da7bad2ac8ea6a4dd1fada69b8238d2f7d0d2b8c8a3d7dd2875771ecbd6813ea49a977353f7edb69e8a7c63b5623dd9d72dbbeac9e49f6829a1109f64dc9502fe0097c404bd6a966cb547b5b9a168f4f11b17c8fffb0b1f3f35"}}, {0x69, &(0x7f0000000640)=ANY=[@ANYBLOB="69038f39d66a98efe635b06e3fe1e770fd0c0317bb215341cf2dcef9fc3381a771333032d38df7ffde2bda73eaa4cc9169b5c259f54998fe5d08cf38bc99d0983102e078e4d6b0e712be4a3edf36b016fdc991b1804749a70c7ab15308b63ef277d54d9e567db4ec1a770bcb51e05c3983a129bc414564a26702d665811284397e5b7c390c6aacadd55af6190824d6d10cb70b425f56b4c5"]}, {0x9d, &(0x7f0000000500)=@string={0x9d, 0x3, "186b3cbf9e467a46067df45e9967393902d0587991d91bae199db4a9779dd33bd9601bc9407b4ededabb4e5ba7ca5e614d3f613ea8273cc295a8341eac344b1f80d51f84cfd01449b139a49763e20f496acfb91cc458cad60c0ceba072a7120f1990adbc843d177a361efe699dae8753a7bed4cf4c837f3d7fb2b12c767bdf77a06749d26a003ccfbc6e0da6b6a4abde0dc7d636b5fe41a93854ae"}}]})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
read$char_usb(r1, &(0x7f0000000040)=""/50, 0x32)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c00001458d0b4e86e603e000008000000580009ffff02400060000054dcd5e3ea78fbd0f18dc35e7f7b1e36dba9d4701639a0c62302d7161df3deffd5c23ddf8bbdae01969a9fd3b186cba3d2af0bae6709bae5e35f5ce5b423b51ecf1abddfb55ae11714b09c48d7048ef7b97c4341dfca090000008371804518d0f27033fe1622636618189598f37d926585b2463c8ce99df24b24bccf7bc85203145a6176e8d17952ae9ee58a2207a487b0c4f031a6d579c6195a378c4db48851312c5e4d86ef"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
pwrite64(r2, &(0x7f0000000800)="5b8529ae24", 0x5, 0x7)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x4)
getrandom(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, <r4=>0x0, 0x3})
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x5, &(0x7f0000000000)=[{0x6, 0x0, 0xfff}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xd, 0x0, 0x7}, {0xb, 0x0, 0x3}]}, 0x81, 0x6, 0x13, 0x1, 0x0, 0x9, 0x9, 0xfffffffffffffff7, r4})
write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000]}, 0x45c)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000339000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="00000000f98c61d804da4d0208000000650000006a0000001811000009fe453501bf49d33f5b8c63ec518f0d172af98090e0f3d60ac9bc1e266dd93299696fcef018340f7cc4374d13fc4bb36b1d42c1befa64b7494ccdcbcda41b5251421b03950d4aca0b721733776b8b7a8f20129b5f04b944b7a6c19a2364a99162fa20b6d520ae029b8e3b6b9ef8081e53222eddf53b7157e6b5f4a17247b1160c0f7f87f94e93a294373e80b1235bb3a3bbcfcd73d154a3d073a0a77c0fe9a833ef2d7f90f2bd6e0239b8b847ccb8", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r10, &(0x7f0000000200)={0x7f, 0x20, 0xf1de, 0x20, 0x6}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r9, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

308.397263ms ago: executing program 2 (id=783):
syz_open_dev$vbi(0x0, 0x2, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000180)={0xa7e, "ea822c0e50aabfbe334aa6f49b11235b20e99cd21b9dc14f0c3bf30727bec50b", 0x2, 0x1})

157.472821ms ago: executing program 0 (id=784):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x800c6803, &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
close(r2)

155.135918ms ago: executing program 2 (id=785):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a0b020f00000025bd7000fcdbdf250d00180009fc5ae8"], 0x78}, 0x1, 0x34000}, 0x20008004)

58.559514ms ago: executing program 2 (id=786):
r0 = socket(0x2, 0x1, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x52a842a9f076de76, 0x0, 0x1, 0x5, 0x6, @local}, 0x14)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r2=>0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000100))
ioctl$NBD_DO_IT(r1, 0xab03)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x1b)

0s ago: executing program 3 (id=787):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x2, 0x8b, 0xa, 0x1, "4620f63a9fcfdeb92550d4c8f09dff8f32ab853cfa9600"})

kernel console output (not intermixed with test programs):

scriptor read/8, error -71
[  102.013893][ T6900] Illegal XDP return value 4294967294 on prog  (id 31) dev N/A, expect packet loss!
[  102.196401][ T5966] Bluetooth: hci2: Malformed LE Event: 0x02
[  102.458493][ T6920] 9p: Bad value for 'wfdno'
[  102.459178][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.271'.
[  102.719890][ T6904] nbd0: detected capacity change from 0 to 128
[  102.806241][  T842] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  102.888672][ T5962] block nbd0: Receive control failed (result -104)
[  102.897365][ T5966] block nbd0: Receive control failed (result -32)
[  102.940136][  T842] usb 5-1: device descriptor read/8, error -71
[  103.128263][  T842] usb usb5-port1: unable to enumerate USB device
[  103.639799][ T6928] nbd1: detected capacity change from 0 to 128
[  103.810336][ T5966] block nbd1: Receive control failed (result -32)
[  103.810336][ T5962] block nbd1: Receive control failed (result -104)
[  104.151037][ T6937] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536
[  105.181054][ T6947] 9p: Bad value for 'wfdno'
[  105.651673][ T6951] netlink: 'syz.3.285': attribute type 4 has an invalid length.
[  105.749136][ T6952] netlink: 'syz.3.285': attribute type 4 has an invalid length.
[  105.914026][ T6955] FAULT_INJECTION: forcing a failure.
[  105.914026][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.919285][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) 
[  105.919309][ T6955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.919319][ T6955] Call Trace:
[  105.919330][ T6955]  <TASK>
[  105.919336][ T6955]  dump_stack_lvl+0x100/0x190
[  105.919360][ T6955]  should_fail_ex.cold+0x5/0xa
[  105.919387][ T6955]  _copy_to_user+0x32/0xd0
[  105.919412][ T6955]  simple_read_from_buffer+0xcb/0x170
[  105.919432][ T6955]  proc_fail_nth_read+0x1af/0x230
[  105.919454][ T6955]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  105.919478][ T6955]  ? rw_verify_area+0xce/0x6d0
[  105.919493][ T6955]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  105.919516][ T6955]  vfs_read+0x1e4/0xb30
[  105.919533][ T6955]  ? __pfx_vfs_read+0x10/0x10
[  105.919545][ T6955]  ? find_held_lock+0x2b/0x80
[  105.919567][ T6955]  ? __fget_files+0x215/0x3d0
[  105.919606][ T6955]  ? __fget_files+0x21f/0x3d0
[  105.919630][ T6955]  ksys_read+0x12a/0x250
[  105.919642][ T6955]  ? __pfx_ksys_read+0x10/0x10
[  105.919659][ T6955]  ? rcu_is_watching+0x12/0xc0
[  105.919679][ T6955]  ? rcu_is_watching+0x12/0xc0
[  105.919700][ T6955]  do_int80_emulation+0x141/0x700
[  105.919727][ T6955]  asm_int80_emulation+0x1a/0x20
[  105.919740][ T6955] RIP: 0023:0xf7195cab
[  105.919753][ T6955] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  105.919767][ T6955] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  105.919785][ T6955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0
[  105.919795][ T6955] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  105.919803][ T6955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  105.919812][ T6955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  105.919821][ T6955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  105.919837][ T6955]  </TASK>
[  105.976981][ T6958] IPv6: NLM_F_CREATE should be specified when creating new route
[  106.041260][ T6962] process 'syz.1.289' launched './file2' with NULL argv: empty string added
[  106.045441][ T6962] 9p: Bad value for 'rfdno'
[  106.047742][ T6962] FAULT_INJECTION: forcing a failure.
[  106.047742][ T6962] name failslab, interval 1, probability 0, space 0, times 0
[  106.051900][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(full) 
[  106.051914][ T6962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.051920][ T6962] Call Trace:
[  106.051924][ T6962]  <TASK>
[  106.051928][ T6962]  dump_stack_lvl+0x100/0x190
[  106.051946][ T6962]  should_fail_ex.cold+0x5/0xa
[  106.051960][ T6962]  should_failslab+0xc2/0x120
[  106.051973][ T6962]  __kmalloc_cache_noprof+0x7a/0x6f0
[  106.051988][ T6962]  ? alloc_fs_context+0x57/0xf40
[  106.052005][ T6962]  alloc_fs_context+0x57/0xf40
[  106.052109][ T6962]  path_mount+0xdbd/0x23d0
[  106.052126][ T6962]  ? __pfx_path_mount+0x10/0x10
[  106.052139][ T6962]  ? lockdep_hardirqs_on+0x78/0x100
[  106.052157][ T6962]  ? putname+0xb1/0x110
[  106.052169][ T6962]  ? kmem_cache_free+0x127/0x6c0
[  106.052188][ T6962]  ? __ia32_sys_mount+0x292/0x310
[  106.052201][ T6962]  __ia32_sys_mount+0x292/0x310
[  106.052216][ T6962]  ? __pfx___ia32_sys_mount+0x10/0x10
[  106.052229][ T6962]  ? ksys_write+0x1ac/0x250
[  106.052241][ T6962]  ? rcu_is_watching+0x12/0xc0
[  106.052255][ T6962]  __do_fast_syscall_32+0xe7/0x950
[  106.052271][ T6962]  ? lockdep_hardirqs_on+0x78/0x100
[  106.052285][ T6962]  do_fast_syscall_32+0x32/0x70
[  106.052300][ T6962]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  106.052314][ T6962] RIP: 0023:0xf705efcc
[  106.052323][ T6962] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  106.052333][ T6962] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  106.052344][ T6962] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000080
[  106.052350][ T6962] RDX: 00000000800000c0 RSI: 0000000000a145cf RDI: 0000000000000000
[  106.052356][ T6962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  106.052362][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.052368][ T6962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  106.052380][ T6962]  </TASK>
[  106.179443][ T6939] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[  106.191469][ T6939] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.279751][ T6021] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  106.429711][ T6021] usb 7-1: Using ep0 maxpacket: 8
[  106.434593][ T6021] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  106.438543][ T6021] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  106.444001][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  106.447709][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.231009][ T6939] syz.0.279 (6939) used greatest stack depth: 18968 bytes left
[  107.294135][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'.
[  108.278877][ T6974] 9p: Bad value for 'wfdno'
[  108.455199][ T6981] random: crng reseeded on system resumption
[  108.467235][   T40] audit: type=1800 audit(1776776643.633:16): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="9p" ino=80478279 res=0 errno=0
[  108.957832][ T6987] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  109.062690][   T54] usb 7-1: USB disconnect, device number 7
[  109.541709][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[  109.609732][   T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  109.625554][ T7005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.304'.
[  109.987333][ T7010] lo speed is unknown, defaulting to 1000
[  110.669767][   T54] usb 7-1: Using ep0 maxpacket: 8
[  110.674802][   T54] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  110.679891][   T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.684586][   T54] usb 7-1: Product: syz
[  110.685914][   T54] usb 7-1: Manufacturer: syz
[  110.689656][   T54] usb 7-1: SerialNumber: syz
[  110.702698][   T54] usb 7-1: config 0 descriptor??
[  111.194474][ T7014] trusted_key: encrypted_key: master key parameter 'use' is invalid
[  111.583672][   T54] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  111.588640][   T54] dvb-usb: bulk message failed: -22 (2/0)
[  111.613599][   T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  111.616984][   T54] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  111.621254][   T54] usb 7-1: media controller created
[  111.631583][   T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.136176][ T7001] Mount JFS Failure: -22
[  112.138736][ T7001] jfs_mount failed w/return code = -22
[  112.154018][ T7001] comedi comedi2: aio_aio12_8: I/O port conflict (0x3,32)
[  112.481403][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[  112.582954][ T7030] FAULT_INJECTION: forcing a failure.
[  112.582954][ T7030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.587726][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.0.312 Not tainted syzkaller #0 PREEMPT(full) 
[  112.587748][ T7030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.587758][ T7030] Call Trace:
[  112.587848][ T7030]  <TASK>
[  112.587855][ T7030]  dump_stack_lvl+0x100/0x190
[  112.588417][ T7030]  should_fail_ex.cold+0x5/0xa
[  112.588496][ T7030]  _copy_to_user+0x32/0xd0
[  112.588665][ T7030]  simple_read_from_buffer+0xcb/0x170
[  112.588832][ T7030]  proc_fail_nth_read+0x1af/0x230
[  112.588908][ T7030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.588932][ T7030]  ? rw_verify_area+0xce/0x6d0
[  112.588997][ T7030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.589017][ T7030]  vfs_read+0x1e4/0xb30
[  112.589037][ T7030]  ? __pfx_vfs_read+0x10/0x10
[  112.589052][ T7030]  ? find_held_lock+0x2b/0x80
[  112.589148][ T7030]  ? __fget_files+0x215/0x3d0
[  112.589171][ T7030]  ? __fget_files+0x21f/0x3d0
[  112.589190][ T7030]  ksys_read+0x12a/0x250
[  112.589207][ T7030]  ? __pfx_ksys_read+0x10/0x10
[  112.589223][ T7030]  ? rcu_is_watching+0x12/0xc0
[  112.589260][ T7030]  ? rcu_is_watching+0x12/0xc0
[  112.589276][ T7030]  do_int80_emulation+0x141/0x700
[  112.589777][ T7030]  asm_int80_emulation+0x1a/0x20
[  112.589789][ T7030] RIP: 0023:0xf71e5cab
[  112.589846][ T7030] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  112.589857][ T7030] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  112.589920][ T7030] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f549d5d0
[  112.589927][ T7030] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  112.589932][ T7030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.589938][ T7030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  112.589944][ T7030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.589957][ T7030]  </TASK>
[  112.749814][ T7035] gretap1: entered promiscuous mode
[  112.752759][ T7035] batman_adv: batadv0: Adding interface: gretap1
[  112.754882][ T7035] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.763059][ T7035] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  112.884858][   T54] cxusb: set interface failed
[  112.886462][   T54] dvb-usb: bulk message failed: -22 (1/0)
[  112.914124][   T54] DVB: Unable to find symbol mt352_attach()
[  112.916084][   T54] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  112.958203][ T7039] netlink: 'syz.2.315': attribute type 39 has an invalid length.
[  112.961078][   T54] rc_core: IR keymap rc-dvico-portable not found
[  112.967127][   T54] Registered IR keymap rc-empty
[  112.969286][   T54] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  112.974264][   T54] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input13
[  112.985242][   T54] dvb-usb: schedule remote query interval to 100 msecs.
[  112.990403][   T54] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  113.005534][   T54] usb 7-1: USB disconnect, device number 8
[  113.058111][   T54] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  113.105550][ T7044] syzkaller0: entered promiscuous mode
[  113.107839][ T7044] syzkaller0: entered allmulticast mode
[  113.371715][ T5901] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  113.530677][ T5901] usb 8-1: Using ep0 maxpacket: 16
[  113.688993][ T5901] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.856442][ T5901] usb 8-1: config 0 interface 0 has no altsetting 0
[  113.859725][ T5901] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  113.864530][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.923450][ T5901] usb 8-1: config 0 descriptor??
[  114.718405][ T5901] usbhid 8-1:0.0: can't add hid device: -71
[  114.722074][ T5901] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  114.736678][ T5901] usb 8-1: USB disconnect, device number 5
[  115.032921][ T7069] overlayfs: failed lookup in lower (newroot/82, name='bus', err=-40): overlapping layers
[  115.179803][ T7076] syzkaller0: entered promiscuous mode
[  115.182017][ T7076] syzkaller0: entered allmulticast mode
[  115.196494][ T7076] tc action pedit offset must be on 32 bit boundaries
[  115.259766][ T6188] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  115.409739][ T6188] usb 6-1: Using ep0 maxpacket: 8
[  115.413615][ T6188] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  115.418230][ T6188] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  115.424063][ T6188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  115.426962][ T6188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.739788][   T39] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  115.891417][   T39] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.896285][   T39] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.900670][   T39] usb 8-1: config 0 interface 0 has no altsetting 0
[  115.903580][   T39] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  115.907532][   T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.927071][   T39] usb 8-1: config 0 descriptor??
[  115.942218][ T7093] netlink: 72 bytes leftover after parsing attributes in process `syz.0.333'.
[  116.125296][ T7104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.337'.
[  116.262773][ T7104] jfs: Unknown parameter 'disrArd'
[  116.352949][   T39] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  116.356076][   T39] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  116.359268][   T39] hid-steam 0003:28DE:1102.0002: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  116.420058][   T39] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected
[  116.429789][   T39] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.0002/input/input14
[  116.500162][   T39] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0
[  116.503120][   T39] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0
[  116.514178][   T39] hid-steam 0003:28DE:1102.0003: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  116.551423][ T6188] usb 8-1: USB disconnect, device number 6
[  116.609143][ T7113] fido_id[7113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory
[  116.630288][ T6188] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected
[  117.268333][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'.
[  117.276746][ T7117] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048)
[  118.027755][   T39] usb 6-1: USB disconnect, device number 13
[  118.059497][ T7135] openvswitch: netlink: Message has -2 unknown bytes.
[  118.186301][ T7143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.344'.
[  118.193678][ T6021] IPVS: starting estimator thread 0...
[  118.195875][ T7141] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  118.276908][ T7141] netlink: 'syz.1.343': attribute type 2 has an invalid length.
[  118.301494][ T7144] IPVS: using max 45 ests per chain, 108000 per kthread
[  118.462068][ T7153] mmap: syz.0.345 (7153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  118.619676][ T6021] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  118.652398][ T7145] /dev/sr0: Can't open blockdev
[  118.774018][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  118.776365][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  118.779963][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.784162][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  118.786525][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  118.790066][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.796005][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  118.798626][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  118.802771][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.810489][ T6021] usb 8-1: string descriptor 0 read error: -22
[  118.812591][ T6021] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  118.815678][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.824178][ T6021] adutux 8-1:168.0: interrupt endpoints not found
[  118.910518][ T6039] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  119.055051][ T7157] input: syz1 as /devices/virtual/input/input15
[  119.064096][ T6039] usb 6-1: Using ep0 maxpacket: 8
[  119.072753][ T6039] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  119.079237][ T6039] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  119.082946][ T6039] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  119.087055][ T6039] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  119.098373][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.107336][ T5901] usb 8-1: USB disconnect, device number 7
[  119.123252][ T6039] usbtmc 6-1:16.0: bulk endpoints not found
[  119.609853][   T39] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  119.731139][ T7178] lo speed is unknown, defaulting to 1000
[  119.761166][   T39] usb 7-1: config 0 has an invalid interface number: 181 but max is 0
[  119.764631][   T39] usb 7-1: config 0 has no interface number 0
[  119.767263][   T39] usb 7-1: config 0 interface 181 has no altsetting 0
[  119.773312][   T39] usb 7-1: string descriptor 0 read error: -22
[  119.775915][   T39] usb 7-1: New USB device found, idVendor=12d1, idProduct=14f0, bcdDevice=19.87
[  119.779179][   T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.784426][   T39] usb 7-1: config 0 descriptor??
[  119.860504][ T7181] BIDI support in bsg has been removed.
[  120.721994][ T6021] usb 7-1: USB disconnect, device number 9
[  121.676833][ T6038] usb 6-1: USB disconnect, device number 14
[  121.829809][ T7204] binder: Unknown parameter 'ma00000000006'
[  121.878051][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[  121.880447][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[  122.251984][ T7211] FAULT_INJECTION: forcing a failure.
[  122.251984][ T7211] name failslab, interval 1, probability 0, space 0, times 0
[  122.257078][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.3.362 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  122.257098][ T7211] Tainted: [L]=SOFTLOCKUP
[  122.257101][ T7211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  122.257107][ T7211] Call Trace:
[  122.257114][ T7211]  <TASK>
[  122.257120][ T7211]  dump_stack_lvl+0x100/0x190
[  122.257137][ T7211]  should_fail_ex.cold+0x5/0xa
[  122.257152][ T7211]  ? lsm_blob_alloc+0x68/0x90
[  122.257241][ T7211]  should_failslab+0xc2/0x120
[  122.257329][ T7211]  __kmalloc_noprof+0xe0/0x850
[  122.257419][ T7211]  ? down_write_nested+0x14f/0x200
[  122.257442][ T7211]  lsm_blob_alloc+0x68/0x90
[  122.257462][ T7211]  security_sb_alloc+0x25/0x240
[  122.257486][ T7211]  alloc_super+0x24c/0xd20
[  122.257509][ T7211]  ? __pfx_shmem_fill_super+0x10/0x10
[  122.257602][ T7211]  sget_fc+0x117/0xc70
[  122.257612][ T7211]  ? __pfx_set_anon_super_fc+0x10/0x10
[  122.257630][ T7211]  ? __pfx_shmem_fill_super+0x10/0x10
[  122.257643][ T7211]  get_tree_nodev+0x28/0x190
[  122.257655][ T7211]  vfs_get_tree+0x92/0x320
[  122.257671][ T7211]  path_mount+0x7d0/0x23d0
[  122.257687][ T7211]  ? __pfx_path_mount+0x10/0x10
[  122.257701][ T7211]  ? lockdep_hardirqs_on+0x78/0x100
[  122.257719][ T7211]  ? putname+0xb1/0x110
[  122.257731][ T7211]  ? kmem_cache_free+0x127/0x6c0
[  122.257751][ T7211]  ? __ia32_sys_mount+0x292/0x310
[  122.257764][ T7211]  __ia32_sys_mount+0x292/0x310
[  122.257778][ T7211]  ? __pfx___ia32_sys_mount+0x10/0x10
[  122.257791][ T7211]  ? ksys_write+0x1ac/0x250
[  122.257803][ T7211]  ? rcu_is_watching+0x12/0xc0
[  122.257817][ T7211]  __do_fast_syscall_32+0xe7/0x950
[  122.257833][ T7211]  ? lockdep_hardirqs_on+0x78/0x100
[  122.257847][ T7211]  do_fast_syscall_32+0x32/0x70
[  122.257862][ T7211]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  122.257876][ T7211] RIP: 0023:0xf7f57fcc
[  122.257886][ T7211] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  122.257897][ T7211] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  122.257909][ T7211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080
[  122.257916][ T7211] RDX: 00000000800000c0 RSI: 0000000000a145cf RDI: 0000000000000000
[  122.257922][ T7211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  122.257928][ T7211] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  122.257993][ T7211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  122.258006][ T7211]  </TASK>
[  123.098765][ T7221] tipc: Started in network mode
[  123.100977][ T7221] tipc: Node identity e22c85e39e89, cluster identity 4711
[  123.105897][ T7221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.113471][ T7221] syzkaller0: entered promiscuous mode
[  123.115889][ T7221] syzkaller0: entered allmulticast mode
[  123.429934][ T7225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.367'.
[  123.569977][   T40] audit: type=1800 audit(1776776658.733:17): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="9p" ino=80478279 res=0 errno=0
[  123.857273][ T7220] tipc: Resetting bearer <eth:syzkaller0>
[  123.875965][ T7220] tipc: Disabling bearer <eth:syzkaller0>
[  123.959976][ T5966] Bluetooth: hci4: command 0x1003 tx timeout
[  123.987062][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  124.277886][ T7237] 9pnet_virtio: no channels available for device syz
[  124.493941][ T7245] fuse: Bad value for 'fd'
[  124.563787][ T7247] 9p: Bad value for 'wfdno'
[  124.569409][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.376'.
[  124.794815][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'.
[  124.839764][ T1337] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  125.064523][ T7263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.380'.
[  125.081486][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'.
[  125.084373][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'.
[  125.396588][ T7266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  125.398753][ T7266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  125.410263][ T7266] vhci_hcd vhci_hcd.0: Device attached
[  125.513586][ T7266] netlink: 'syz.0.381': attribute type 12 has an invalid length.
[  125.779727][   T54] usb 38-1: SetAddress Request (10) to port 0
[  125.781870][   T54] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd
[  125.939663][ T1337] usb 6-1: Using ep0 maxpacket: 8
[  125.945204][ T1337] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  125.947967][ T1337] usb 6-1: config 179 has no interface number 0
[  125.950100][ T1337] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  125.953589][ T1337] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  125.957105][ T1337] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.957121][ T1337] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  125.957134][ T1337] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  125.957162][ T1337] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  125.957174][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.960528][ T7251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  125.969271][ T7267] vhci_hcd: connection reset by peer
[  125.999937][  T572] vhci_hcd vhci_hcd.0: stop threads
[  126.001706][  T572] vhci_hcd vhci_hcd.0: release socket
[  126.004959][  T572] vhci_hcd vhci_hcd.0: disconnect device
[  126.039448][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'.
[  126.185233][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[  126.194342][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[  126.206799][ T7251] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.267190][ T7251] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.280198][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.315809][ T7251] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.396981][ T7251] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.438460][ T7282] 9p: Bad value for 'wfdno'
[  126.469056][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.488290][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.497929][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.513145][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.523667][ T7274] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.613022][ T7286] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  126.617888][ T7286] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  126.648786][ T7274] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.762481][ T7274] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.876488][ T7274] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.410881][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.414042][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.666334][ T7314] 9p: Bad value for 'wfdno'
[  127.695126][ T7316] syzkaller0: entered promiscuous mode
[  127.697096][ T7316] syzkaller0: entered allmulticast mode
[  127.855924][ T7328] FAULT_INJECTION: forcing a failure.
[  127.855924][ T7328] name failslab, interval 1, probability 0, space 0, times 0
[  127.863138][ T7328] CPU: 3 UID: 0 PID: 7328 Comm: syz.3.400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.863158][ T7328] Tainted: [L]=SOFTLOCKUP
[  127.863163][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.863170][ T7328] Call Trace:
[  127.863174][ T7328]  <TASK>
[  127.863179][ T7328]  dump_stack_lvl+0x100/0x190
[  127.863197][ T7328]  should_fail_ex.cold+0x5/0xa
[  127.863216][ T7328]  ? tomoyo_encode2+0xfb/0x3c0
[  127.863229][ T7328]  should_failslab+0xc2/0x120
[  127.863243][ T7328]  __kmalloc_noprof+0xe0/0x850
[  127.863263][ T7328]  tomoyo_encode2+0xfb/0x3c0
[  127.863276][ T7328]  tomoyo_encode+0x29/0x50
[  127.863287][ T7328]  tomoyo_realpath_from_path+0x18c/0x690
[  127.863302][ T7328]  tomoyo_path_number_perm+0x23c/0x580
[  127.863318][ T7328]  ? tomoyo_path_number_perm+0x22e/0x580
[  127.863335][ T7328]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  127.863352][ T7328]  ? get_pid_task+0x106/0x250
[  127.863456][ T7328]  ? find_held_lock+0x2b/0x80
[  127.863470][ T7328]  ? __fget_files+0x215/0x3d0
[  127.863482][ T7328]  ? hook_file_ioctl_common+0x149/0x410
[  127.863498][ T7328]  ? __fget_files+0x215/0x3d0
[  127.863512][ T7328]  ? __fget_files+0x21f/0x3d0
[  127.863527][ T7328]  security_file_ioctl_compat+0xd3/0x230
[  127.863544][ T7328]  __ia32_compat_sys_ioctl+0xc2/0x360
[  127.863564][ T7328]  __do_fast_syscall_32+0xe7/0x950
[  127.863582][ T7328]  ? lockdep_hardirqs_on+0x78/0x100
[  127.863598][ T7328]  do_fast_syscall_32+0x32/0x70
[  127.863614][ T7328]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  127.863629][ T7328] RIP: 0023:0xf7f57fcc
[  127.863639][ T7328] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  127.863650][ T7328] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  127.863663][ T7328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089b1
[  127.863670][ T7328] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000
[  127.863676][ T7328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  127.863682][ T7328] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  127.863689][ T7328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  127.863702][ T7328]  </TASK>
[  127.863713][ T7328] ERROR: Out of memory at tomoyo_realpath_from_path.
[  128.690513][ T7344] 9p: Bad value for 'wfdno'
[  128.768876][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[  129.649742][ T6038] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  129.799721][ T6038] usb 7-1: Using ep0 maxpacket: 8
[  129.802892][ T6038] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  129.806105][ T6038] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.809371][ T6038] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  129.812802][ T6038] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  129.816811][ T6038] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.822464][ T6038] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  129.826115][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.013733][ T7372] 9p: Bad value for 'wfdno'
[  130.033280][ T6038] usb 7-1: usb_control_msg returned -32
[  130.037715][ T6038] usbtmc 7-1:16.0: can't read capabilities
[  130.249935][  T572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.275527][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.296010][ T7378] FAULT_INJECTION: forcing a failure.
[  130.296010][ T7378] name failslab, interval 1, probability 0, space 0, times 0
[  130.299411][   T93] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.305047][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.2.415 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  130.305075][ T7378] Tainted: [L]=SOFTLOCKUP
[  130.305081][ T7378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  130.305091][ T7378] Call Trace:
[  130.305098][ T7378]  <TASK>
[  130.305106][ T7378]  dump_stack_lvl+0x100/0x190
[  130.305131][ T7378]  should_fail_ex.cold+0x5/0xa
[  130.305154][ T7378]  should_failslab+0xc2/0x120
[  130.305175][ T7378]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  130.305202][ T7378]  ? do_getname+0x35/0x390
[  130.305225][ T7378]  ? find_held_lock+0x2b/0x80
[  130.305246][ T7378]  ? ksys_write+0x190/0x250
[  130.305268][ T7378]  do_getname+0x35/0x390
[  130.305294][ T7378]  do_sys_openat2+0xc5/0x1e0
[  130.305320][ T7378]  ? __pfx_do_sys_openat2+0x10/0x10
[  130.305344][ T7378]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  130.305375][ T7378]  ? __fget_files+0x21f/0x3d0
[  130.305398][ T7378]  __ia32_compat_sys_openat+0x12d/0x210
[  130.305425][ T7378]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  130.305451][ T7378]  ? ksys_write+0x1ac/0x250
[  130.305472][ T7378]  ? rcu_is_watching+0x12/0xc0
[  130.305500][ T7378]  do_int80_emulation+0x141/0x700
[  130.305527][ T7378]  asm_int80_emulation+0x1a/0x20
[  130.305545][ T7378] RIP: 0023:0xf7185cab
[  130.305559][ T7378] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  130.305575][ T7378] RSP: 002b:00000000f542503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  130.305592][ T7378] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5425100
[  130.305603][ T7378] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  130.305613][ T7378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  130.305622][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.305632][ T7378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  130.305654][ T7378]  </TASK>
[  130.317575][   T93] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.358402][   T39] usb 7-1: USB disconnect, device number 10
[  130.361329][ T7370] usbtmc 7-1:16.0: usb_control_msg returned -71
[  130.443422][    C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  130.446939][    C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  130.449733][ T6038] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  130.451205][   T24] usb 6-1: USB disconnect, device number 15
[  130.601158][ T7386] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  130.609839][ T6038] usb 8-1: Using ep0 maxpacket: 8
[  130.617960][ T6038] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  130.621357][ T6038] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.625049][ T6038] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.628578][ T6038] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.633750][ T6038] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.638483][ T6038] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  130.642455][ T6038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.829790][   T54] usb 38-1: device descriptor read/8, error -110
[  130.852499][ T6038] usb 8-1: usb_control_msg returned -32
[  130.854416][ T6038] usbtmc 8-1:16.0: can't read capabilities
[  130.909853][   T39] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  130.979755][  T842] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  131.039747][   T39] usb 7-1: device descriptor read/64, error -71
[  131.053619][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.057092][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.129735][  T842] usb 5-1: Using ep0 maxpacket: 8
[  131.132841][  T842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  131.136157][  T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  131.139531][  T842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024
[  131.143142][  T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  131.146217][  T842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.150629][  T842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  131.156450][  T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.229207][ T6038] usb 8-1: USB disconnect, device number 8
[  131.229854][ T7377] usbtmc 8-1:16.0: usb_control_msg returned -71
[  131.234190][   T54] usb usb38-port1: attempt power cycle
[  131.290647][   T39] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  131.383102][  T842] usb 5-1: GET_CAPABILITIES returned 0
[  131.385053][  T842] usbtmc 5-1:16.0: can't read capabilities
[  131.417737][ T7402] 9p: Bad value for 'wfdno'
[  131.420284][   T39] usb 7-1: device descriptor read/64, error -71
[  131.482745][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.485846][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.488542][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.495865][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.502203][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.505040][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.507755][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.512116][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.514744][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.517272][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0
[  131.525339][ T6188] hid-generic 0007:0001:FFFFFFFF.0004: hidraw1: <UNKNOWN> HID va.e8 Device [syz0] on syz1
[  131.534743][   T39] usb usb7-port1: attempt power cycle
[  131.554961][ T7408] fido_id[7408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  131.640745][   T24] usb 5-1: USB disconnect, device number 9
[  131.669814][  T842] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  131.800715][   T54] usb usb38-port1: unable to enumerate USB device
[  131.819785][  T842] usb 8-1: Using ep0 maxpacket: 8
[  131.823949][  T842] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  131.827860][  T842] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  131.832160][  T842] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  131.836096][  T842] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  131.841313][  T842] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.845997][  T842] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  131.849499][  T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.901262][   T39] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  131.923539][   T39] usb 7-1: device descriptor read/8, error -71
[  132.058722][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.061924][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.065819][  T842] usb 8-1: usb_control_msg returned -32
[  132.067741][  T842] usbtmc 8-1:16.0: can't read capabilities
[  132.077866][  T842] usb 8-1: USB disconnect, device number 9
[  132.169837][   T39] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  132.200678][   T39] usb 7-1: device descriptor read/8, error -71
[  132.310439][   T39] usb usb7-port1: unable to enumerate USB device
[  132.664221][ T7440] fuse: Unknown parameter '0x0000000000000004'
[  133.167464][ T1297] block nbd0: Connection timed out, retrying (0/2 alive)
[  133.171228][ T1297] block nbd0: Dead connection, failed to find a fallback
[  133.173759][ T1297] block nbd0: shutting down sockets
[  133.175741][ T1297] blk_print_req_error: 10 callbacks suppressed
[  133.175752][ T1297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.181077][ T1297] buffer_io_error: 10 callbacks suppressed
[  133.181087][ T1297] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.188672][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.196166][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.201966][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.207061][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.215876][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.218798][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.221409][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.224254][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.226795][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.239892][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.242360][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.245091][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.247588][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.250553][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.253109][ T5961] ldm_validate_partition_table(): Disk read failed.
[  133.255276][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.258122][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.260780][ T5961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.263620][ T5961] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.266738][ T5961] Dev nbd0: unable to read RDB block 0
[  133.269035][ T5961]  nbd0: unable to read partition table
[  133.277730][ T5961] ldm_validate_partition_table(): Disk read failed.
[  133.280435][ T5961] Dev nbd0: unable to read RDB block 0
[  133.282726][ T5961]  nbd0: unable to read partition table
[  133.790815][ T1297] block nbd1: Connection timed out, retrying (0/2 alive)
[  133.795138][ T1297] block nbd1: Dead connection, failed to find a fallback
[  133.801281][ T1297] block nbd1: shutting down sockets
[  133.803774][ T6111] ldm_validate_partition_table(): Disk read failed.
[  133.809940][ T6111] Dev nbd1: unable to read RDB block 0
[  133.813598][ T6111]  nbd1: unable to read partition table
[  133.820824][ T6111] ldm_validate_partition_table(): Disk read failed.
[  133.823710][ T6111] Dev nbd1: unable to read RDB block 0
[  133.824149][ T7450] 9p: Bad value for 'wfdno'
[  133.826041][ T6111]  nbd1: unable to read partition table
[  133.948855][ T7452] FAULT_INJECTION: forcing a failure.
[  133.948855][ T7452] name failslab, interval 1, probability 0, space 0, times 0
[  133.953371][ T7452] CPU: 3 UID: 0 PID: 7452 Comm: syz.0.436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.953390][ T7452] Tainted: [L]=SOFTLOCKUP
[  133.953393][ T7452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.953401][ T7452] Call Trace:
[  133.953405][ T7452]  <TASK>
[  133.953409][ T7452]  dump_stack_lvl+0x100/0x190
[  133.953427][ T7452]  should_fail_ex.cold+0x5/0xa
[  133.953442][ T7452]  should_failslab+0xc2/0x120
[  133.953455][ T7452]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  133.953473][ T7452]  ? __alloc_skb+0x140/0x710
[  133.953823][ T7452]  ? __alloc_skb+0x5b7/0x710
[  133.953840][ T7452]  __alloc_skb+0x140/0x710
[  133.953854][ T7452]  ? __alloc_skb+0x5b7/0x710
[  133.953868][ T7452]  ? __pfx___alloc_skb+0x10/0x10
[  133.953887][ T7452]  alloc_skb_with_frags+0xdd/0x760
[  133.953897][ T7452]  ? bpf_ksym_find+0x124/0x1c0
[  133.953972][ T7452]  sock_alloc_send_pskb+0x801/0x980
[  133.953988][ T7452]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  133.953999][ T7452]  ? arch_stack_walk+0xa6/0xf0
[  133.954088][ T7452]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  133.954104][ T7452]  ? find_held_lock+0x2b/0x80
[  133.954118][ T7452]  ? dev_get_by_index+0x180/0x380
[  133.954134][ T7452]  ? dev_get_by_index+0x180/0x380
[  133.954153][ T7452]  packet_sendmsg+0x20b8/0x51c0
[  133.954382][ T7452]  ? __pfx___might_resched+0x10/0x10
[  133.954449][ T7452]  ? aa_sk_perm+0x309/0xaa0
[  133.954467][ T7452]  ? __pfx_packet_sendmsg+0x10/0x10
[  133.954478][ T7452]  ? __pfx_aa_sk_perm+0x10/0x10
[  133.954497][ T7452]  ? __might_fault+0xc5/0x140
[  133.954517][ T7452]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  133.954534][ T7452]  __sys_sendto+0x468/0x4b0
[  133.954548][ T7452]  ? __pfx_packet_sendmsg+0x10/0x10
[  133.954560][ T7452]  ? __pfx___sys_sendto+0x10/0x10
[  133.954585][ T7452]  ? __fget_files+0x215/0x3d0
[  133.954602][ T7452]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  133.954632][ T7452]  ? fput+0x79/0x100
[  133.954653][ T7452]  ? ksys_write+0x1ac/0x250
[  133.954670][ T7452]  __ia32_sys_sendto+0xdd/0x1b0
[  133.954690][ T7452]  ? __do_fast_syscall_32+0x98/0x950
[  133.954717][ T7452]  ? lockdep_hardirqs_on+0x78/0x100
[  133.954739][ T7452]  __do_fast_syscall_32+0xe7/0x950
[  133.954763][ T7452]  ? lockdep_hardirqs_on+0x78/0x100
[  133.954784][ T7452]  do_fast_syscall_32+0x32/0x70
[  133.954799][ T7452]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  133.954813][ T7452] RIP: 0023:0xf70aefcc
[  133.954823][ T7452] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  133.954860][ T7452] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  133.954875][ T7452] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  133.954882][ T7452] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000800000c0
[  133.954888][ T7452] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  133.954894][ T7452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  133.954899][ T7452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  133.954913][ T7452]  </TASK>
[  135.129825][ T6188] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  135.299678][ T6188] usb 6-1: Using ep0 maxpacket: 8
[  135.303663][ T6188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  135.307975][ T6188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  135.316119][ T6188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024
[  135.324768][ T6188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  135.330022][ T6188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.337910][ T6188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.342541][ T6188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.553714][ T6188] usb 6-1: GET_CAPABILITIES returned 0
[  135.555663][ T6188] usbtmc 6-1:16.0: can't read capabilities
[  136.309562][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'.
[  136.329989][ T6317] IPVS: starting estimator thread 0...
[  136.469887][ T7478] IPVS: using max 45 ests per chain, 108000 per kthread
[  136.677642][ T7488] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  136.883351][ T7490] program syz.3.447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.888595][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'.
[  137.903637][ T6188] usb 6-1: USB disconnect, device number 16
[  138.300843][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  138.303716][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  140.349919][ T6317] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  140.503223][ T6317] usb 8-1: config 0 has no interfaces?
[  140.507605][ T6317] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.9a
[  140.513852][ T6317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.517605][ T6317] usb 8-1: Product: syz
[  140.519498][ T6317] usb 8-1: Manufacturer: syz
[  140.522215][ T6317] usb 8-1: SerialNumber: syz
[  140.526755][ T6317] usb 8-1: config 0 descriptor??
[  140.540885][ T7540] blk_print_req_error: 64 callbacks suppressed
[  140.540899][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.546740][ T7540] buffer_io_error: 64 callbacks suppressed
[  140.546757][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.553791][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.557249][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.560525][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.563944][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.567099][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.573175][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.576115][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.579427][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.582393][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.585552][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.588748][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.593012][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.596210][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.599554][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.602199][ T7540] ldm_validate_partition_table(): Disk read failed.
[  140.604558][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.607650][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.610945][ T7540] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.614029][ T7540] Buffer I/O error on dev nbd1, logical block 0, async page read
[  140.615885][ T7543] sp0: Synchronizing with TNC
[  140.616808][ T7540] Dev nbd1: unable to read RDB block 0
[  140.617229][ T7540]  nbd1: unable to read partition table
[  140.644194][ T7540] netlink: 'syz.1.463': attribute type 10 has an invalid length.
[  140.797213][ T7532] delete_channel: no stack
[  140.803598][ T6038] usb 8-1: USB disconnect, device number 10
[  140.850176][   T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  140.999734][   T34] usb 5-1: Using ep0 maxpacket: 8
[  141.004700][   T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  141.008148][   T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  141.011914][   T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  141.015550][   T34] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  141.019456][   T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  141.024665][   T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  141.028356][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.040670][   T34] usbtmc 5-1:16.0: bulk endpoints not found
[  141.364327][ T7553] dummy0: entered promiscuous mode
[  141.366478][ T7553] macvlan2: entered promiscuous mode
[  141.368223][ T7553] macvlan2: entered allmulticast mode
[  141.372341][ T7553] dummy0: entered allmulticast mode
[  143.626859][ T1337] usb 5-1: USB disconnect, device number 10
[  143.643480][ T7590] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size.
[  144.189791][ T7604] block nbd2: Device being setup by another task
[  144.196864][ T7601] block nbd2: shutting down sockets
[  144.339642][ T7612] 9p: Bad value for 'wfdno'
[  144.664088][ T7620] ldm_validate_partition_table(): Disk read failed.
[  144.667380][ T7620] Dev nbd1: unable to read RDB block 0
[  144.670622][ T7620]  nbd1: unable to read partition table
[  144.709679][   T54] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  144.723318][ T7623] FAULT_INJECTION: forcing a failure.
[  144.723318][ T7623] name failslab, interval 1, probability 0, space 0, times 0
[  144.727751][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.0.489 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.727770][ T7623] Tainted: [L]=SOFTLOCKUP
[  144.727774][ T7623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.727781][ T7623] Call Trace:
[  144.727787][ T7623]  <TASK>
[  144.727793][ T7623]  dump_stack_lvl+0x100/0x190
[  144.727810][ T7623]  should_fail_ex.cold+0x5/0xa
[  144.727825][ T7623]  should_failslab+0xc2/0x120
[  144.727838][ T7623]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  144.727855][ T7623]  ? skb_clone+0x190/0x400
[  144.727873][ T7623]  ? dev_forward_skb_nomtu+0x32/0x60
[  144.727889][ T7623]  skb_clone+0x190/0x400
[  144.727906][ T7623]  bpf_clone_redirect+0x166/0x500
[  144.727998][ T7623]  bpf_prog_bf2aacce0757c8a7+0x65/0x7d
[  144.728009][ T7623]  ? unwind_get_return_address+0x59/0xa0
[  144.728091][ T7623]  ? arch_stack_walk+0xa6/0xf0
[  144.728106][ T7623]  ? __lock_acquire+0x4a5/0x2630
[  144.728125][ T7623]  ? __lock_acquire+0x4a5/0x2630
[  144.728142][ T7623]  ? stack_trace_save+0x8e/0xc0
[  144.728160][ T7623]  ? find_held_lock+0x2b/0x80
[  144.728173][ T7623]  ? bpf_test_timer_enter+0xf7/0x2b0
[  144.728252][ T7623]  ? rcu_is_watching+0x12/0xc0
[  144.728265][ T7623]  ? ktime_get+0x22c/0x320
[  144.728341][ T7623]  ? lockdep_hardirqs_on+0x78/0x100
[  144.728358][ T7623]  ? bpf_test_run+0x2a4/0xa40
[  144.728374][ T7623]  ? __pfx___cant_migrate+0x10/0x10
[  144.728391][ T7623]  ? bpf_test_timer_continue+0x17b/0x5d0
[  144.728407][ T7623]  ? lockdep_hardirqs_on+0x78/0x100
[  144.728426][ T7623]  bpf_test_run+0x39c/0xa40
[  144.728445][ T7623]  ? bpf_test_run+0x1c6/0xa40
[  144.728463][ T7623]  ? __pfx_bpf_test_run+0x10/0x10
[  144.728490][ T7623]  ? eth_type_trans+0x2e3/0x720
[  144.728566][ T7623]  bpf_prog_test_run_skb+0x15c4/0x3540
[  144.728587][ T7623]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  144.728601][ T7623]  ? fput+0x79/0x100
[  144.728616][ T7623]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  144.728628][ T7623]  __sys_bpf+0x1725/0x4b90
[  144.728641][ T7623]  ? __pfx___sys_bpf+0x10/0x10
[  144.728650][ T7623]  ? get_pid_task+0x106/0x250
[  144.728666][ T7623]  ? proc_fail_nth_write+0x9f/0x220
[  144.728683][ T7623]  ? find_held_lock+0x2b/0x80
[  144.728698][ T7623]  ? find_held_lock+0x2b/0x80
[  144.728712][ T7623]  ? ksys_write+0x190/0x250
[  144.728725][ T7623]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  144.728740][ T7623]  ? kernel_write+0x633/0x6c0
[  144.728758][ T7623]  ? fput+0x79/0x100
[  144.728771][ T7623]  ? ksys_write+0x1ac/0x250
[  144.728784][ T7623]  __ia32_sys_bpf+0x79/0xf0
[  144.728794][ T7623]  ? lockdep_hardirqs_on+0x78/0x100
[  144.728808][ T7623]  __do_fast_syscall_32+0xe7/0x950
[  144.728824][ T7623]  ? lockdep_hardirqs_on+0x78/0x100
[  144.728839][ T7623]  do_fast_syscall_32+0x32/0x70
[  144.728854][ T7623]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  144.728870][ T7623] RIP: 0023:0xf70aefcc
[  144.728879][ T7623] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  144.728890][ T7623] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  144.728902][ T7623] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240
[  144.728909][ T7623] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000
[  144.728915][ T7623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  144.728921][ T7623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  144.728927][ T7623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  144.728940][ T7623]  </TASK>
[  144.880471][   T40] audit: type=1326 audit(1776776680.053:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.1.490" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efcc code=0x0
[  144.949773][   T54] usb 7-1: Using ep0 maxpacket: 8
[  144.955543][   T54] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  144.961363][   T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.967406][   T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  144.973801][   T54] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.982911][   T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.994142][   T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  144.998733][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.016928][   T54] usbtmc 7-1:16.0: bulk endpoints not found
[  145.113724][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.492'.
[  145.645753][ T7645] Bluetooth: MGMT ver 1.23
[  145.902642][ T7649] netlink: 268 bytes leftover after parsing attributes in process `syz.3.497'.
[  145.907079][ T7649] netlink: 136 bytes leftover after parsing attributes in process `syz.3.497'.
[  145.910368][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'.
[  147.243473][ T7666] netlink: 'syz.3.502': attribute type 4 has an invalid length.
[  147.364683][ T7670] syzkaller0: entered promiscuous mode
[  147.366902][ T7670] syzkaller0: entered allmulticast mode
[  147.373903][ T7670] tc action pedit offset 128 out of bounds
[  147.476410][   T54] usb 7-1: USB disconnect, device number 15
[  147.876513][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'.
[  147.891353][ T7677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.507'.
[  147.896267][ T7677] bridge1: port 1(erspan0) entered blocking state
[  147.899174][ T7677] bridge1: port 1(erspan0) entered disabled state
[  147.902543][ T7677] erspan0: entered allmulticast mode
[  147.905629][ T7677] erspan0: entered promiscuous mode
[  147.908145][ T7677] bridge1: port 1(erspan0) entered blocking state
[  147.910501][ T7677] bridge1: port 1(erspan0) entered forwarding state
[  148.252295][ T5962] Bluetooth: hci2: adv larger than maximum supported
[  148.252338][ T5962] Bluetooth: hci2: Malformed LE Event: 0x0d
[  148.562511][ T7686] input: syz0 as /devices/virtual/input/input16
[  148.616825][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[  148.636165][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[  148.949723][   T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  149.119786][   T39] usb 6-1: Using ep0 maxpacket: 8
[  149.123269][   T39] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  149.125954][   T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.129280][   T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.132698][   T39] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  149.136047][   T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.141311][   T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.144159][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.151917][   T39] usbtmc 6-1:16.0: bulk endpoints not found
[  149.959226][ T7703] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  149.961431][ T7703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  149.964450][ T7703] vhci_hcd vhci_hcd.0: Device attached
[  150.240216][   T39] usb 42-1: SetAddress Request (6) to port 0
[  150.242369][   T39] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  150.320554][ T7706] vhci_hcd: connection reset by peer
[  150.323822][   T93] vhci_hcd vhci_hcd.2: stop threads
[  150.325913][   T93] vhci_hcd vhci_hcd.2: release socket
[  150.329431][   T93] vhci_hcd vhci_hcd.2: disconnect device
[  150.485827][ T7711] input: syz1 as /devices/virtual/input/input17
[  150.799857][ T5901] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  150.956125][ T5901] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  150.962013][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.965286][ T5901] usb 8-1: Product: syz
[  150.966625][ T5901] usb 8-1: Manufacturer: syz
[  150.968140][ T5901] usb 8-1: SerialNumber: syz
[  150.971461][ T5901] usb 8-1: config 0 descriptor??
[  151.579782][ T5901] usb 8-1: Firmware version (0.0) predates our first public release.
[  151.582618][ T5901] usb 8-1: Please update to version 0.2 or newer
[  151.651314][ T7725] batman_adv: batadv0: Removing interface: gretap1
[  151.725088][ T1337] usb 6-1: USB disconnect, device number 17
[  151.931956][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'.
[  153.058722][ T7738] dummy0: entered promiscuous mode
[  153.064814][ T7738] macsec1: entered promiscuous mode
[  153.067171][ T7738] macsec1: entered allmulticast mode
[  153.069198][ T7738] dummy0: entered allmulticast mode
[  153.075596][ T7738] dummy0: left allmulticast mode
[  153.077490][ T7738] dummy0: left promiscuous mode
[  153.121388][ T5901] usb 8-1: USB disconnect, device number 11
[  153.449865][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  153.599790][   T24] usb 5-1: Using ep0 maxpacket: 8
[  153.605579][   T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  153.612281][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.616635][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.621094][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  153.626815][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  153.630997][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.638263][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  153.642094][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.654374][   T24] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  155.309736][   T39] usb 42-1: device descriptor read/8, error -110
[  155.700775][   T39] usb usb42-port1: attempt power cycle
[  156.227125][ T1036] usb 5-1: USB disconnect, device number 11
[  156.271644][   T39] usb usb42-port1: unable to enumerate USB device
[  156.276996][ T7782] binder: 7781:7782 ioctl 2288 800003c0 returned -22
[  156.342452][ T7783] binder: 7781:7783 ioctl 89f8 800005c0 returned -22
[  156.651580][ T7785] netlink: 27 bytes leftover after parsing attributes in process `syz.2.544'.
[  157.394708][ T7802] FAULT_INJECTION: forcing a failure.
[  157.394708][ T7802] name failslab, interval 1, probability 0, space 0, times 0
[  157.398783][ T7802] CPU: 3 UID: 0 PID: 7802 Comm: syz.0.552 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  157.398801][ T7802] Tainted: [L]=SOFTLOCKUP
[  157.398804][ T7802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.398812][ T7802] Call Trace:
[  157.398819][ T7802]  <TASK>
[  157.398825][ T7802]  dump_stack_lvl+0x100/0x190
[  157.398843][ T7802]  should_fail_ex.cold+0x5/0xa
[  157.398858][ T7802]  ? offload_action_alloc+0x29/0xf0
[  157.398873][ T7802]  should_failslab+0xc2/0x120
[  157.398886][ T7802]  __kmalloc_noprof+0xe0/0x850
[  157.398907][ T7802]  offload_action_alloc+0x29/0xf0
[  157.398922][ T7802]  tcf_action_offload_add_ex+0x1b6/0x860
[  157.398940][ T7802]  ? __pfx_tcf_action_offload_add_ex+0x10/0x10
[  157.398965][ T7802]  ? tcf_action_fill_size+0x110/0x340
[  157.398979][ T7802]  ? tcf_action_fill_size+0x110/0x340
[  157.398995][ T7802]  tcf_action_init+0x679/0xa60
[  157.399013][ T7802]  ? __pfx_tcf_action_init+0x10/0x10
[  157.399037][ T7802]  ? __kernel_text_address+0xd/0x30
[  157.399048][ T7802]  ? unwind_get_return_address+0x59/0xa0
[  157.399063][ T7802]  ? arch_stack_walk+0xa6/0xf0
[  157.399087][ T7802]  ? kasan_save_stack+0x3f/0x50
[  157.399097][ T7802]  ? kasan_save_stack+0x30/0x50
[  157.399105][ T7802]  ? kasan_save_track+0x14/0x30
[  157.399114][ T7802]  ? kasan_save_free_info+0x3b/0x70
[  157.399128][ T7802]  ? __kasan_slab_free+0x5f/0x80
[  157.399137][ T7802]  ? kmem_cache_free+0x127/0x6c0
[  157.399151][ T7802]  ? kfree_skbmem+0x19a/0x210
[  157.399164][ T7802]  ? consume_skb+0xd1/0x110
[  157.399173][ T7802]  ? nlmon_xmit+0xa5/0xe0
[  157.399270][ T7802]  ? dev_hard_start_xmit+0x128/0x7a0
[  157.399285][ T7802]  tcf_action_add+0xed/0x5c0
[  157.399301][ T7802]  ? __pfx_tcf_action_add+0x10/0x10
[  157.399341][ T7802]  ? __nla_parse+0x40/0x60
[  157.399357][ T7802]  tc_ctl_action+0x2e3/0x470
[  157.399372][ T7802]  ? __pfx_tc_ctl_action+0x10/0x10
[  157.399390][ T7802]  ? __pfx_tc_ctl_action+0x10/0x10
[  157.399405][ T7802]  rtnetlink_rcv_msg+0x3c9/0xe90
[  157.399424][ T7802]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  157.399445][ T7802]  ? ref_tracker_free+0x37e/0x6c0
[  157.399457][ T7802]  netlink_rcv_skb+0x159/0x420
[  157.399470][ T7802]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  157.399487][ T7802]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.399504][ T7802]  ? netlink_deliver_tap+0x1ae/0xcc0
[  157.399517][ T7802]  netlink_unicast+0x585/0x850
[  157.399531][ T7802]  ? __pfx_netlink_unicast+0x10/0x10
[  157.399546][ T7802]  netlink_sendmsg+0x8b0/0xda0
[  157.399560][ T7802]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.399596][ T7802]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  157.399614][ T7802]  ____sys_sendmsg+0x9e1/0xb70
[  157.399626][ T7802]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.399638][ T7802]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.399657][ T7802]  ___sys_sendmsg+0x190/0x1e0
[  157.399684][ T7802]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.399703][ T7802]  ? find_held_lock+0x2b/0x80
[  157.399726][ T7802]  __sys_sendmsg+0x170/0x220
[  157.399742][ T7802]  ? __pfx___sys_sendmsg+0x10/0x10
[  157.399757][ T7802]  ? __fget_files+0x21f/0x3d0
[  157.399773][ T7802]  ? ksys_write+0x1ac/0x250
[  157.399786][ T7802]  ? rcu_is_watching+0x12/0xc0
[  157.399802][ T7802]  __do_fast_syscall_32+0xe7/0x950
[  157.399819][ T7802]  ? lockdep_hardirqs_on+0x78/0x100
[  157.399834][ T7802]  do_fast_syscall_32+0x32/0x70
[  157.399850][ T7802]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  157.399865][ T7802] RIP: 0023:0xf70aefcc
[  157.399875][ T7802] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  157.399886][ T7802] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  157.399898][ T7802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  157.399904][ T7802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  157.399910][ T7802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  157.399916][ T7802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  157.399922][ T7802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  157.399936][ T7802]  </TASK>
[  157.609275][ T7809] zonefs (nullb0) ERROR: Not a zoned block device
[  157.640789][ T7810] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  157.768365][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  157.772567][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  157.826341][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[  157.829243][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'.
[  157.832323][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'.
[  157.929725][ T6188] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  158.089842][ T6188] usb 8-1: Using ep0 maxpacket: 8
[  158.095718][ T6188] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  158.098817][ T6188] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.102252][ T6188] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.105980][ T6188] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  158.109217][ T6188] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  158.113780][ T6188] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.117971][ T6188] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.126582][ T6188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.134002][ T6188] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22
[  158.946931][ T7842] smc: net device bond0 applied user defined pnetid SYZ2
[  158.962849][   T40] audit: type=1107 audit(1776776694.123:19): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  159.135583][   T40] audit: type=1326 audit(1776776694.303:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.208906][   T40] audit: type=1326 audit(1776776694.303:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.218610][   T40] audit: type=1326 audit(1776776694.303:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.229295][   T40] audit: type=1326 audit(1776776694.303:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.241582][   T40] audit: type=1326 audit(1776776694.303:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.254746][   T40] audit: type=1326 audit(1776776694.303:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.266548][   T40] audit: type=1326 audit(1776776694.303:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.278416][   T40] audit: type=1326 audit(1776776694.313:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.287027][   T40] audit: type=1326 audit(1776776694.313:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  159.577413][ T7851] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  160.713399][ T6188] usb 8-1: USB disconnect, device number 12
[  161.100233][ T7881] netlink: 104 bytes leftover after parsing attributes in process `syz.1.580'.
[  161.111754][ T7881] syzkaller0: entered promiscuous mode
[  161.116221][ T7881] syzkaller0: entered allmulticast mode
[  161.348524][ T7884] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  161.913134][ T7900] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  161.915216][ T7900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  161.918283][ T7900] vhci_hcd vhci_hcd.0: Device attached
[  161.924733][ T7900] CIFS: VFS: UNC: missing delimiter between hostname and share name
[  161.929931][ T7900] CIFS: VFS: Malformed UNC in devname
[  161.969796][ T6188] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  162.119690][ T6188] usb 5-1: Using ep0 maxpacket: 8
[  162.126369][ T6188] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  162.130061][ T6188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.133347][ T6188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.136572][ T6188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  162.140122][ T6188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  162.143707][ T6188] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.147934][ T6188] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.151721][ T6188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.159364][ T6188] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  162.253948][ T6039] usb 44-1: SetAddress Request (2) to port 0
[  162.258567][ T6039] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  162.323140][ T7906] fuse: Bad value for 'group_id'
[  162.324982][ T7906] fuse: Bad value for 'group_id'
[  162.377532][ T7901] vhci_hcd: connection reset by peer
[  162.381916][  T572] vhci_hcd vhci_hcd.3: stop threads
[  162.383875][  T572] vhci_hcd vhci_hcd.3: release socket
[  162.385726][  T572] vhci_hcd vhci_hcd.3: disconnect device
[  163.069154][ T7913] loop2: detected capacity change from 0 to 7
[  163.073095][ T7913] Dev loop2: unable to read RDB block 7
[  163.074956][ T7913]  loop2: unable to read partition table
[  163.079318][ T7913] loop2: partition table beyond EOD, truncated
[  163.081469][ T7913] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  163.097334][ T7913] netlink: 'syz.3.590': attribute type 10 has an invalid length.
[  163.100025][ T7913] batadv0: left promiscuous mode
[  163.103135][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.107548][ T7913] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  163.115044][ T7913] netlink: 'syz.3.590': attribute type 10 has an invalid length.
[  163.117601][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.590'.
[  163.121026][ T7913] batadv0: entered promiscuous mode
[  163.122774][ T7913] batadv0: entered allmulticast mode
[  163.127724][ T7913] bond0: (slave batadv0): Releasing backup interface
[  163.134850][ T7913] bridge0: port 3(batadv0) entered blocking state
[  163.137087][ T7913] bridge0: port 3(batadv0) entered disabled state
[  163.269824][  T572] batman_adv: batadv0: IGMP Querier appeared
[  163.274338][  T572] batman_adv: batadv0: MLD Querier appeared
[  163.586903][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'.
[  164.504837][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.599'.
[  164.742036][ T1036] usb 5-1: USB disconnect, device number 12
[  164.769944][   T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  165.004232][   T24] usb 8-1: Using ep0 maxpacket: 32
[  165.102257][   T24] usb 8-1: config 5 has an invalid interface number: 125 but max is 1
[  165.108020][   T24] usb 8-1: config 5 has an invalid interface number: 191 but max is 1
[  165.112015][   T24] usb 8-1: config 5 has no interface number 0
[  165.114060][   T24] usb 8-1: config 5 has no interface number 1
[  165.119690][   T24] usb 8-1: config 5 interface 125 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  165.128255][   T24] usb 8-1: config 5 interface 125 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  165.132682][   T24] usb 8-1: config 5 interface 191 altsetting 78 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  165.136552][   T24] usb 8-1: config 5 interface 191 altsetting 78 has an invalid descriptor for endpoint zero, skipping
[  165.140542][   T24] usb 8-1: config 5 interface 191 altsetting 78 bulk endpoint 0xB has invalid maxpacket 64
[  165.143840][   T24] usb 8-1: config 5 interface 191 altsetting 78 has a duplicate endpoint with address 0x2, skipping
[  165.147532][   T24] usb 8-1: config 5 interface 191 altsetting 78 has a duplicate endpoint with address 0xB, skipping
[  165.153584][   T24] usb 8-1: config 5 interface 191 altsetting 78 has a duplicate endpoint with address 0x2, skipping
[  165.157206][   T24] usb 8-1: config 5 interface 191 altsetting 78 endpoint 0x4 has invalid wMaxPacketSize 0
[  165.170566][   T24] usb 8-1: config 5 interface 191 altsetting 78 has a duplicate endpoint with address 0x7, skipping
[  165.174198][   T24] usb 8-1: config 5 interface 191 altsetting 78 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  165.177849][   T24] usb 8-1: config 5 interface 125 has no altsetting 0
[  165.187918][   T24] usb 8-1: config 5 interface 191 has no altsetting 0
[  165.201926][   T24] usb 8-1: Dual-Role OTG device on HNP port
[  165.205469][   T24] usb 8-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice=1c.7a
[  165.208360][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.211033][   T24] usb 8-1: Product: syz
[  165.212408][   T24] usb 8-1: Manufacturer: 疙育甖뛺ꅐ쀡＞좐ₔ詻ﱚჳﴇ㘐昀筮㋷覉纥뽾䔝扑쥷㡐徂⊦ꍍ膪퇰續꫊┬ꪵ≗ᤄﺢꉫ桠뜠῾쑡䪝ꤡⒿ濇ⵉꈴക갪⪇
[  165.218400][   T24] usb 8-1: SerialNumber: syz
[  165.233834][ T7941] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  165.518299][   T24] usb 8-1: USB disconnect, device number 13
[  165.724619][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'.
[  165.783066][ T7959] trusted_key: encrypted_key: insufficient parameters specified
[  165.789352][ T7959] FAULT_INJECTION: forcing a failure.
[  165.789352][ T7959] name failslab, interval 1, probability 0, space 0, times 0
[  165.790954][ T7958] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  165.796589][ T7959] CPU: 2 UID: 0 PID: 7959 Comm: syz.2.607 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.796608][ T7959] Tainted: [L]=SOFTLOCKUP
[  165.796612][ T7959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.796619][ T7959] Call Trace:
[  165.796741][ T7959]  <TASK>
[  165.796746][ T7959]  dump_stack_lvl+0x100/0x190
[  165.797676][ T7959]  should_fail_ex.cold+0x5/0xa
[  165.797988][ T7959]  ? tomoyo_encode2+0xfb/0x3c0
[  165.798275][ T7959]  should_failslab+0xc2/0x120
[  165.798640][ T7959]  __kmalloc_noprof+0xe0/0x850
[  165.798798][ T7959]  ? d_absolute_path+0x136/0x1b0
[  165.798946][ T7959]  tomoyo_encode2+0xfb/0x3c0
[  165.798959][ T7959]  tomoyo_encode+0x29/0x50
[  165.798970][ T7959]  tomoyo_realpath_from_path+0x18c/0x690
[  165.798984][ T7959]  tomoyo_path_number_perm+0x23c/0x580
[  165.799000][ T7959]  ? tomoyo_path_number_perm+0x22e/0x580
[  165.799016][ T7959]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  165.799032][ T7959]  ? get_pid_task+0x106/0x250
[  165.799189][ T7959]  ? find_held_lock+0x2b/0x80
[  165.799419][ T7959]  ? __fget_files+0x215/0x3d0
[  165.799602][ T7959]  ? hook_file_ioctl_common+0x149/0x410
[  165.799618][ T7959]  ? __fget_files+0x215/0x3d0
[  165.799632][ T7959]  ? __fget_files+0x21f/0x3d0
[  165.799645][ T7959]  security_file_ioctl_compat+0xd3/0x230
[  165.799663][ T7959]  __ia32_compat_sys_ioctl+0xc2/0x360
[  165.799683][ T7959]  __do_fast_syscall_32+0xe7/0x950
[  165.800736][ T7959]  ? lockdep_hardirqs_on+0x78/0x100
[  165.800753][ T7959]  do_fast_syscall_32+0x32/0x70
[  165.800769][ T7959]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.800783][ T7959] RIP: 0023:0xf7f88fcc
[  165.800895][ T7959] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  165.800907][ T7959] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  165.801026][ T7959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004b52
[  165.801032][ T7959] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  165.801038][ T7959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.801044][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.801050][ T7959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.801064][ T7959]  </TASK>
[  165.804158][ T7958] team0: Device ipvlan2 is already an upper device of the team interface
[  165.807527][ T7959] ERROR: Out of memory at tomoyo_realpath_from_path.
[  165.911563][ T7962] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536
[  166.135107][ T7967] 9p: Bad value for 'wfdno'
[  167.320148][ T6039] usb 44-1: device descriptor read/8, error -110
[  167.529703][ T6188] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  167.689653][ T6188] usb 6-1: Using ep0 maxpacket: 8
[  167.692991][ T6188] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  167.696827][ T6188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.700422][ T6188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.703568][ T6188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.706670][ T6188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.711010][ T6188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  167.714014][ T6188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.720203][ T6039] usb usb44-port1: attempt power cycle
[  167.805594][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.808155][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.816811][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.820190][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.919803][ T6021] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  167.927501][ T6188] usb 6-1: usb_control_msg returned -32
[  167.929846][ T6188] usbtmc 6-1:16.0: can't read capabilities
[  167.940705][ T6188] usb 6-1: USB disconnect, device number 18
[  168.081598][ T6021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.085315][ T6021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.088624][ T6021] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  168.092931][ T6021] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  168.095862][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.100623][ T6021] usb 8-1: config 0 descriptor??
[  168.291210][ T6039] usb usb44-port1: unable to enumerate USB device
[  168.471088][ T8000] 9p: Bad value for 'wfdno'
[  168.475896][ T7997] loop2: detected capacity change from 0 to 7
[  168.484495][ T7997] Dev loop2: unable to read RDB block 7
[  168.486305][ T7997]  loop2: unable to read partition table
[  168.488748][ T7997] loop2: partition table beyond EOD, truncated
[  168.491082][ T7997] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  168.508853][ T7997] netlink: 'syz.2.618': attribute type 10 has an invalid length.
[  168.513857][ T7997] netlink: 'syz.2.618': attribute type 10 has an invalid length.
[  168.517313][ T7997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'.
[  168.670948][ T8002] syz.1.620 (8002): attempted to duplicate a private mapping with mremap.  This is not supported.
[  168.705209][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'.
[  168.708435][ T8009] FAULT_INJECTION: forcing a failure.
[  168.708435][ T8009] name failslab, interval 1, probability 0, space 0, times 0
[  168.712744][ T8009] CPU: 3 UID: 0 PID: 8009 Comm: syz.2.623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.712761][ T8009] Tainted: [L]=SOFTLOCKUP
[  168.712765][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.712772][ T8009] Call Trace:
[  168.712776][ T8009]  <TASK>
[  168.712781][ T8009]  dump_stack_lvl+0x100/0x190
[  168.712811][ T8009]  should_fail_ex.cold+0x5/0xa
[  168.712827][ T8009]  should_failslab+0xc2/0x120
[  168.712839][ T8009]  __kmalloc_cache_noprof+0x7a/0x6f0
[  168.712854][ T8009]  ? alloc_netdev_mqs+0xe01/0x14f0
[  168.713190][ T8009]  alloc_netdev_mqs+0xe01/0x14f0
[  168.713210][ T8009]  rtnl_create_link+0xc13/0xf80
[  168.713231][ T8009]  rtnl_newlink+0x13bd/0x2380
[  168.713252][ T8009]  ? __pfx_rtnl_newlink+0x10/0x10
[  168.713267][ T8009]  ? rcu_is_watching+0x12/0xc0
[  168.713381][ T8009]  ? kasan_quarantine_put+0x104/0x240
[  168.713397][ T8009]  ? lockdep_hardirqs_on+0x78/0x100
[  168.713415][ T8009]  ? kfree_skbmem+0x19a/0x210
[  168.713427][ T8009]  ? kmem_cache_free+0x127/0x6c0
[  168.713449][ T8009]  ? __dev_queue_xmit+0x9ef/0x4950
[  168.713468][ T8009]  ? find_held_lock+0x2b/0x80
[  168.713481][ T8009]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  168.713497][ T8009]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  168.713514][ T8009]  ? __pfx_rtnl_newlink+0x10/0x10
[  168.713530][ T8009]  rtnetlink_rcv_msg+0x95e/0xe90
[  168.713548][ T8009]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  168.713568][ T8009]  ? ref_tracker_free+0x37e/0x6c0
[  168.713582][ T8009]  netlink_rcv_skb+0x159/0x420
[  168.713808][ T8009]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  168.713826][ T8009]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.713843][ T8009]  ? netlink_deliver_tap+0x1ae/0xcc0
[  168.713859][ T8009]  netlink_unicast+0x585/0x850
[  168.713873][ T8009]  ? __pfx_netlink_unicast+0x10/0x10
[  168.713889][ T8009]  netlink_sendmsg+0x8b0/0xda0
[  168.713904][ T8009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.713918][ T8009]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  168.713935][ T8009]  ____sys_sendmsg+0x9e1/0xb70
[  168.713948][ T8009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.713961][ T8009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.713980][ T8009]  ___sys_sendmsg+0x190/0x1e0
[  168.714053][ T8009]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.714073][ T8009]  ? find_held_lock+0x2b/0x80
[  168.714095][ T8009]  __sys_sendmsg+0x170/0x220
[  168.714112][ T8009]  ? __pfx___sys_sendmsg+0x10/0x10
[  168.714127][ T8009]  ? __fget_files+0x21f/0x3d0
[  168.714144][ T8009]  ? ksys_write+0x1ac/0x250
[  168.714157][ T8009]  ? rcu_is_watching+0x12/0xc0
[  168.714171][ T8009]  __do_fast_syscall_32+0xe7/0x950
[  168.714186][ T8009]  ? lockdep_hardirqs_on+0x78/0x100
[  168.714202][ T8009]  do_fast_syscall_32+0x32/0x70
[  168.714217][ T8009]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  168.714232][ T8009] RIP: 0023:0xf7f88fcc
[  168.714242][ T8009] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  168.714253][ T8009] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  168.714264][ T8009] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000080
[  168.714271][ T8009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  168.714280][ T8009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  168.714286][ T8009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  168.714292][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  168.714305][ T8009]  </TASK>
[  168.740099][ T8010] x_tables: duplicate underflow at hook 2
[  168.832123][ T8013] gretap1: entered promiscuous mode
[  168.859921][ T8013] batman_adv: batadv0: Adding interface: gretap1
[  168.862148][ T8013] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.870869][ T8013] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  169.052915][ T6021] usbhid 8-1:0.0: can't add hid device: -71
[  169.068533][ T6021] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  169.078053][ T6021] usb 8-1: USB disconnect, device number 14
[  169.319819][ T6039] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  169.469671][ T6039] usb 6-1: Using ep0 maxpacket: 8
[  169.472700][ T6039] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  169.475650][ T6039] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.478896][ T6039] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.482946][ T6039] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.487138][ T6039] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.491607][ T6039] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  169.494442][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.624192][ T8022] 9p: Bad value for 'wfdno'
[  169.722513][ T6039] usb 6-1: usb_control_msg returned -32
[  169.724702][ T6039] usbtmc 6-1:16.0: can't read capabilities
[  169.766086][ T6039] usb 6-1: USB disconnect, device number 19
[  170.424711][ T8044] netlink: 'syz.1.637': attribute type 39 has an invalid length.
[  170.465228][ T8047] 9p: Bad value for 'wfdno'
[  170.514321][ T8048] syzkaller0: entered promiscuous mode
[  170.516272][ T8048] syzkaller0: entered allmulticast mode
[  171.884209][ T8053] x_tables: duplicate underflow at hook 1
[  171.887917][ T8053] hub 8-0:1.0: USB hub found
[  171.894310][ T8053] hub 8-0:1.0: 1 port detected
[  173.479877][ T6039] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  173.629656][ T6039] usb 8-1: Using ep0 maxpacket: 8
[  173.634475][ T6039] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  173.637875][ T6039] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.641513][ T6039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.644837][ T6039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.599796][ T6039] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.604034][ T6039] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  174.606890][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.866958][ T6039] usb 8-1: usb_control_msg returned -32
[  174.871078][ T6039] usbtmc 8-1:16.0: can't read capabilities
[  174.881324][ T6039] usb 8-1: USB disconnect, device number 15
[  175.387363][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  175.579139][ T8098] netlink: 'syz.3.652': attribute type 11 has an invalid length.
[  175.778460][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'.
[  175.842094][ T8109] netlink: 'syz.1.654': attribute type 10 has an invalid length.
[  176.269722][ T5962] Bluetooth: hci2: command 0x0406 tx timeout
[  176.269753][   T62] Bluetooth: hci1: command 0x0406 tx timeout
[  176.269852][ T5957] Bluetooth: hci0: command 0x0406 tx timeout
[  177.133756][ T8146] 9p: Bad value for 'wfdno'
[  177.257600][ T8150] input: syz0 as /devices/virtual/input/input19
[  177.862359][ T8159] geneve2: entered promiscuous mode
[  177.864141][ T8159] geneve2: entered allmulticast mode
[  178.250750][ T8173] netlink: 'syz.1.675': attribute type 4 has an invalid length.
[  178.264134][ T8171] usb usb1: check_ctrlrecip: process 8171 (syz.2.673) requesting ep 01 but needs 81
[  178.269461][ T6021] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  178.272479][ T8171] usb usb1: usbfs: process 8171 (syz.2.673) did not claim interface 0 before use
[  178.323331][ T8171] lo speed is unknown, defaulting to 1000
[  178.429257][ T6021] usb 8-1: Using ep0 maxpacket: 8
[  178.435592][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  178.441199][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  178.459110][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  178.463078][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  178.466663][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  178.479947][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  178.482560][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  178.488600][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  178.492892][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  178.493904][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  178.496396][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  178.500095][ T6021] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  178.500121][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  178.500135][ T6021] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  178.500148][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  178.500161][ T6021] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  178.502791][ T6021] usb 8-1: string descriptor 0 read error: -22
[  178.524222][ T6021] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  178.527225][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.535002][ T8183] hsr_slave_0: left promiscuous mode
[  178.537407][ T6021] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  178.549248][ T8183] hsr_slave_1: left promiscuous mode
[  178.602394][ T8168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'.
[  178.660134][ T8189] binder: BINDER_SET_CONTEXT_MGR already set
[  178.671576][ T8189] binder: 8188:8189 ioctl 4018620d 80004a80 returned -16
[  178.746373][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.755243][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.802351][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  178.802366][   T40] audit: type=1326 audit(1776776969.980:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.812912][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'.
[  178.817241][   T40] audit: type=1326 audit(1776776969.990:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.824762][   T40] audit: type=1326 audit(1776776969.990:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.831719][   T40] audit: type=1326 audit(1776776969.990:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.838526][   T40] audit: type=1326 audit(1776776969.990:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.866732][   T40] audit: type=1326 audit(1776776969.990:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.874866][   T40] audit: type=1326 audit(1776776969.990:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.881734][   T40] audit: type=1326 audit(1776776969.990:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.889214][   T40] audit: type=1326 audit(1776776969.990:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.896004][   T40] audit: type=1326 audit(1776776969.990:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.685" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705efcc code=0x7ffc0000
[  178.896079][ T8202] input: syz1 as /devices/virtual/input/input20
[  179.072524][ T8206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  179.134381][ T6317] usb 8-1: USB disconnect, device number 16
[  179.175339][ T8208] xt_CT: You must specify a L4 protocol and not use inversions on it
[  179.210222][ T8213] netlink: 188 bytes leftover after parsing attributes in process `syz.2.686'.
[  183.276999][ T6188] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  183.439109][ T6188] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.443807][ T6188] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.450413][ T6188] usb 5-1: config 0 interface 0 has no altsetting 0
[  183.454731][ T6188] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  183.458922][ T6188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.472630][ T6188] usb 5-1: config 0 descriptor??
[  183.889945][ T6188] hid_parser_main: 96 callbacks suppressed
[  183.890028][ T6188] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[  183.897695][ T6188] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[  183.900732][ T6188] hid-steam 0003:28DE:1102.0005: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  183.956631][ T6188] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' connected
[  183.971357][ T6188] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.0005/input/input21
[  184.035402][ T6188] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  184.040435][ T6188] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  184.050822][ T6188] hid-steam 0003:28DE:1102.0006: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  184.097762][ T6317] usb 5-1: USB disconnect, device number 13
[  184.132634][ T8309] fido_id[8309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory
[  184.142944][ T6317] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' disconnected
[  184.814274][ T8325] FAULT_INJECTION: forcing a failure.
[  184.814274][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.825598][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.0.710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.825620][ T8325] Tainted: [L]=SOFTLOCKUP
[  184.825624][ T8325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  184.825631][ T8325] Call Trace:
[  184.825640][ T8325]  <TASK>
[  184.825646][ T8325]  dump_stack_lvl+0x100/0x190
[  184.825668][ T8325]  should_fail_ex.cold+0x5/0xa
[  184.825685][ T8325]  _copy_to_user+0x32/0xd0
[  184.825704][ T8325]  snd_pcm_oss_read2+0x294/0x400
[  184.825823][ T8325]  ? __pfx_snd_pcm_oss_read2+0x10/0x10
[  184.825859][ T8325]  ? snd_pcm_kernel_ioctl+0x14a/0x2e0
[  184.825880][ T8325]  ? snd_pcm_oss_prepare+0x11e/0x240
[  184.825894][ T8325]  snd_pcm_oss_read+0x5aa/0x730
[  184.825910][ T8325]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  184.825924][ T8325]  vfs_read+0x1e4/0xb30
[  184.825940][ T8325]  ? __pfx_vfs_read+0x10/0x10
[  184.825950][ T8325]  ? find_held_lock+0x2b/0x80
[  184.825965][ T8325]  ? __fget_files+0x215/0x3d0
[  184.825977][ T8325]  ? __fget_files+0x215/0x3d0
[  184.825991][ T8325]  ? __fget_files+0x21f/0x3d0
[  184.826011][ T8325]  ksys_read+0x12a/0x250
[  184.826023][ T8325]  ? __pfx_ksys_read+0x10/0x10
[  184.826033][ T8325]  ? ksys_write+0x1ac/0x250
[  184.826045][ T8325]  ? rcu_is_watching+0x12/0xc0
[  184.826060][ T8325]  __do_fast_syscall_32+0xe7/0x950
[  184.826081][ T8325]  ? lockdep_hardirqs_on+0x78/0x100
[  184.826098][ T8325]  do_fast_syscall_32+0x32/0x70
[  184.826113][ T8325]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  184.826128][ T8325] RIP: 0023:0xf70aefcc
[  184.826138][ T8325] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  184.826149][ T8325] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  184.826163][ T8325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0
[  184.826169][ T8325] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000
[  184.826176][ T8325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  184.826182][ T8325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  184.826188][ T8325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  184.826202][ T8325]  </TASK>
[  184.965119][ T8329] FAULT_INJECTION: forcing a failure.
[  184.965119][ T8329] name failslab, interval 1, probability 0, space 0, times 0
[  184.972435][ T8329] CPU: 2 UID: 0 PID: 8329 Comm: syz.0.711 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.972458][ T8329] Tainted: [L]=SOFTLOCKUP
[  184.972461][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  184.972468][ T8329] Call Trace:
[  184.972473][ T8329]  <TASK>
[  184.972478][ T8329]  dump_stack_lvl+0x100/0x190
[  184.972498][ T8329]  should_fail_ex.cold+0x5/0xa
[  184.972515][ T8329]  should_failslab+0xc2/0x120
[  184.972529][ T8329]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  184.972547][ T8329]  ? __d_alloc+0x34/0xa80
[  184.972565][ T8329]  __d_alloc+0x34/0xa80
[  184.972580][ T8329]  d_alloc_parallel+0x111/0x14e0
[  184.972591][ T8329]  ? find_held_lock+0x2b/0x80
[  184.972606][ T8329]  ? is_bpf_text_address+0x8a/0x1a0
[  184.972762][ T8329]  ? is_bpf_text_address+0x8a/0x1a0
[  184.972776][ T8329]  ? bpf_ksym_find+0x124/0x1c0
[  184.972786][ T8329]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  184.972803][ T8329]  ? __pfx_d_alloc_parallel+0x10/0x10
[  184.972960][ T8329]  ? lockdep_init_map_type+0x5c/0x250
[  184.972972][ T8329]  ? lockdep_init_map_type+0x5c/0x250
[  184.972984][ T8329]  __lookup_slow+0x193/0x460
[  184.973001][ T8329]  ? __pfx___lookup_slow+0x10/0x10
[  184.973021][ T8329]  ? irq_entries_start+0xd0/0xcb0
[  184.973036][ T8329]  ? irq_entries_start+0xd0/0xcb0
[  184.973050][ T8329]  lookup_slow+0x50/0x70
[  184.973065][ T8329]  lookup_one_unlocked+0xb8/0xd0
[  184.973078][ T8329]  ovl_lookup_single+0x3df/0x1280
[  184.973177][ T8329]  ? __pfx_ovl_lookup_single+0x10/0x10
[  184.973202][ T8329]  ovl_lookup_layer+0x3f1/0x4b0
[  184.973219][ T8329]  ? find_held_lock+0x2b/0x80
[  184.973232][ T8329]  ? __pfx_ovl_lookup_layer+0x10/0x10
[  184.973252][ T8329]  ovl_lookup_layers+0x355/0x2ac0
[  184.973268][ T8329]  ? map_id_range_up+0x2ce/0x3b0
[  184.973490][ T8329]  ? from_kgid+0x8f/0xd0
[  184.973505][ T8329]  ? __pfx_ovl_lookup_layers+0x10/0x10
[  184.973521][ T8329]  ? apparmor_capable+0x1d7/0x4d0
[  184.973537][ T8329]  ? privileged_wrt_inode_uidgid+0xc1/0x1d0
[  184.973552][ T8329]  ? bpf_lsm_capable+0x9/0x10
[  184.973643][ T8329]  ? capable_wrt_inode_uidgid+0xde/0x170
[  184.973658][ T8329]  ? generic_permission+0xae/0x800
[  184.973675][ T8329]  ovl_lookup+0x4a8/0x6b0
[  184.973690][ T8329]  ? inode_permission+0x374/0x620
[  184.973707][ T8329]  ? __pfx_ovl_lookup+0x10/0x10
[  184.973723][ T8329]  ? ovl_permission+0x17c/0x2d0
[  184.973744][ T8329]  ? bpf_lsm_inode_create+0x9/0x10
[  184.973758][ T8329]  ? security_inode_create+0xc4/0x280
[  184.973770][ T8329]  ? may_o_create+0x46/0x3a0
[  184.973787][ T8329]  lookup_open.isra.0+0x631/0x11b0
[  184.973808][ T8329]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  184.973827][ T8329]  ? __pfx___might_resched+0x10/0x10
[  184.974075][ T8329]  ? mnt_get_write_access+0x52/0x2f0
[  184.974095][ T8329]  ? __pfx_down_write+0x10/0x10
[  184.974113][ T8329]  ? mnt_get_write_access+0x1e9/0x2f0
[  184.974131][ T8329]  path_openat+0x2291/0x31a0
[  184.974146][ T8329]  ? entry_SYSENTER_compat+0x11/0x2d
[  184.974160][ T8329]  ? __pfx_path_openat+0x10/0x10
[  184.974178][ T8329]  do_file_open+0x20e/0x430
[  184.974195][ T8329]  ? __pfx_do_file_open+0x10/0x10
[  184.974218][ T8329]  ? alloc_fd+0x476/0x790
[  184.974232][ T8329]  ? do_getname+0x191/0x390
[  184.974248][ T8329]  do_sys_openat2+0x10d/0x1e0
[  184.974264][ T8329]  ? __pfx_do_sys_openat2+0x10/0x10
[  184.974279][ T8329]  ? __fget_files+0x215/0x3d0
[  184.974292][ T8329]  ? __fget_files+0x21f/0x3d0
[  184.974305][ T8329]  __ia32_compat_sys_open+0xfe/0x1c0
[  184.974321][ T8329]  ? __pfx___ia32_compat_sys_open+0x10/0x10
[  184.974336][ T8329]  ? fput+0x79/0x100
[  184.974350][ T8329]  ? ksys_write+0x1ac/0x250
[  184.974362][ T8329]  ? rcu_is_watching+0x12/0xc0
[  184.974377][ T8329]  __do_fast_syscall_32+0xe7/0x950
[  184.974392][ T8329]  ? lockdep_hardirqs_on+0x78/0x100
[  184.974408][ T8329]  do_fast_syscall_32+0x32/0x70
[  184.974423][ T8329]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  184.974437][ T8329] RIP: 0023:0xf70aefcc
[  184.974447][ T8329] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  184.974457][ T8329] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000005
[  184.974469][ T8329] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000023942
[  184.974475][ T8329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  184.974481][ T8329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  184.974487][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.974493][ T8329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  184.974507][ T8329]  </TASK>
[  185.520523][ T8333] lo speed is unknown, defaulting to 1000
[  188.565092][ T8362] lo speed is unknown, defaulting to 1000
[  189.003303][ T8362] overlayfs: failed to resolve './file1': -2
[  189.083414][ T8368] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  189.097208][ T8368] overlayfs: overlapping lowerdir path
[  189.129976][ T8371] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  189.140303][ T8371] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  189.480230][ T8375] bridge0: entered promiscuous mode
[  189.487617][ T8375] bridge0: entered allmulticast mode
[  190.303276][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  190.455950][   T24] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  190.461897][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.467304][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.476789][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.482433][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.498412][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.504165][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.509837][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.513863][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.518174][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.521610][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.525116][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.529325][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.534146][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.538116][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.542919][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.547008][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.550848][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.555337][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.559170][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.563393][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.568560][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.575184][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.578149][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.581727][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  190.586787][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  190.589836][   T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  190.593677][   T24] usb 5-1: Product: syz
[  190.595610][   T24] usb 5-1: Manufacturer: syz
[  190.597690][   T24] usb 5-1: SerialNumber: syz
[  190.602304][   T24] usb 5-1: config 0 descriptor??
[  190.644385][   T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  190.972846][ T6317] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  191.134600][ T6317] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.139590][ T6317] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.144394][ T6317] usb 6-1: config 0 interface 0 has no altsetting 0
[  191.147469][ T6317] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  191.151452][ T6317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.162083][ T6317] usb 6-1: config 0 descriptor??
[  191.312130][ T8409] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  191.317485][ T8409] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  191.379726][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[  191.435142][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  191.435157][   T40] audit: type=1800 audit(1776776982.616:62): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.738" name="/newroot/204/bus" dev="tmpfs" ino=1085 res=0 errno=0
[  191.591441][ T6317] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  191.593881][ T6317] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  191.596688][ T6317] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  191.652591][ T6317] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected
[  191.657748][ T6317] input: Steam Controller as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:28DE:1102.0007/input/input22
[  191.685520][ T6317] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0
[  191.688308][ T6317] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0
[  191.711721][ T6317] hid-steam 0003:28DE:1102.0008: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  191.802202][ T6317] usb 6-1: USB disconnect, device number 20
[  192.192303][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  192.222288][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  192.272181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  192.322178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  192.585514][ T6317] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected
[  192.882890][    C2] usb 5-1: yurex_control_callback - control failed: -2
[  192.885699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!!
[  192.942431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[  193.872625][ T5965] Bluetooth: hci0: unexpected event 0x14 length: 73 > 6
[  193.925991][ T1036] usb 5-1: USB disconnect, device number 14
[  193.947197][ T1036] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  194.021862][ T8449] FAULT_INJECTION: forcing a failure.
[  194.021862][ T8449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.030490][ T8449] CPU: 3 UID: 0 PID: 8449 Comm: syz.2.749 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.030524][ T8449] Tainted: [L]=SOFTLOCKUP
[  194.030531][ T8449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  194.030542][ T8449] Call Trace:
[  194.030549][ T8449]  <TASK>
[  194.030579][ T8449]  dump_stack_lvl+0x100/0x190
[  194.030608][ T8449]  should_fail_ex.cold+0x5/0xa
[  194.030632][ T8449]  _copy_to_user+0x32/0xd0
[  194.030661][ T8449]  simple_read_from_buffer+0xcb/0x170
[  194.030684][ T8449]  proc_fail_nth_read+0x1af/0x230
[  194.030900][ T8449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.030928][ T8449]  ? rw_verify_area+0xce/0x6d0
[  194.030945][ T8449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.030977][ T8449]  vfs_read+0x1e4/0xb30
[  194.031000][ T8449]  ? __pfx_vfs_read+0x10/0x10
[  194.031016][ T8449]  ? find_held_lock+0x2b/0x80
[  194.031040][ T8449]  ? __fget_files+0x215/0x3d0
[  194.031065][ T8449]  ? __fget_files+0x21f/0x3d0
[  194.031091][ T8449]  ksys_read+0x12a/0x250
[  194.031110][ T8449]  ? __pfx_ksys_read+0x10/0x10
[  194.031129][ T8449]  ? rcu_is_watching+0x12/0xc0
[  194.031150][ T8449]  ? rcu_is_watching+0x12/0xc0
[  194.031174][ T8449]  do_int80_emulation+0x141/0x700
[  194.031205][ T8449]  asm_int80_emulation+0x1a/0x20
[  194.031238][ T8449] RIP: 0023:0xf7185cab
[  194.031254][ T8449] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  194.031271][ T8449] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  194.031290][ T8449] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0
[  194.031300][ T8449] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  194.031309][ T8449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  194.031320][ T8449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  194.031329][ T8449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  194.031351][ T8449]  </TASK>
[  194.499449][ T8462] syzkaller0: entered promiscuous mode
[  194.501419][ T8462] syzkaller0: entered allmulticast mode
[  195.870445][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  196.020424][   T24] usb 5-1: Using ep0 maxpacket: 16
[  196.024180][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.030289][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.033584][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  196.037628][   T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  196.050329][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.054399][   T24] usb 5-1: config 0 descriptor??
[  196.480613][   T24] shield 0003:0955:7214.0009: unknown main item tag 0x0
[  196.482978][   T24] shield 0003:0955:7214.0009: unknown main item tag 0x0
[  196.485171][   T24] shield 0003:0955:7214.0009: unknown main item tag 0x0
[  196.487748][   T24] shield 0003:0955:7214.0009: unknown main item tag 0x0
[  196.490098][   T24] shield 0003:0955:7214.0009: unknown main item tag 0x0
[  196.502879][   T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[  196.594380][   T24] shield 0003:0955:7214.0009: Registered Thunderstrike controller
[  196.604503][   T24] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  196.660173][ T5965] Bluetooth: hci3: command 0x0406 tx timeout
[  196.681308][ T8469] netlink: 504 bytes leftover after parsing attributes in process `syz.0.754'.
[  196.696082][ T6728] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  196.711989][ T1337] usb 5-1: USB disconnect, device number 15
[  196.715446][ T6728] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  196.725175][ T6728] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  196.732749][ T6728] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  197.202817][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  197.205773][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'.
[  197.589613][ T5901] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  197.618824][ T8480] netlink: 148 bytes leftover after parsing attributes in process `syz.3.758'.
[  197.634789][ T8480] input: syz1 as /devices/virtual/input/input24
[  198.115129][ T5901] usb 5-1: Using ep0 maxpacket: 16
[  198.118911][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.126307][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.131818][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  198.143246][ T5901] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  198.149686][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.162718][ T5901] usb 5-1: config 0 descriptor??
[  198.582287][ T5901] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  198.587083][ T5901] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  198.596119][ T5901] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  198.598518][ T5901] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  198.600926][ T5901] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  198.609169][ T6021] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  198.693825][ T5901] input: HID 0955:7214 Haptics as /devices/virtual/input/input25
[  198.756193][ T8492] overlayfs: missing 'lowerdir'
[  198.760115][ T6021] usb 7-1: Using ep0 maxpacket: 16
[  198.765370][ T6021] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  198.769471][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  198.772480][ T6021] usb 7-1: Product: syz
[  198.773891][ T6021] usb 7-1: Manufacturer: syz
[  198.775384][ T6021] usb 7-1: SerialNumber: syz
[  198.782169][ T6021] usb 7-1: config 0 descriptor??
[  198.994951][ T6021] usb 7-1: USB disconnect, device number 16
[  199.132815][ T8497] lo speed is unknown, defaulting to 1000
[  199.550651][ T5901] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[  199.559793][ T5901] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  199.618954][ T1036] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  199.629808][ T5901] usb 5-1: USB disconnect, device number 16
[  199.632434][ T1036] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  199.640579][ T1036] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  199.651135][ T1036] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  199.703012][ T6188] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  199.735200][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  199.740995][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  199.864586][ T6188] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  200.017197][ T6188] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.408540][ T6188] usb 7-1: config 0 interface 0 has no altsetting 0
[  200.411296][ T6188] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  200.415065][ T6188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.433618][ T6188] usb 7-1: config 0 descriptor??
[  200.613138][ T8511] syzkaller0: entered promiscuous mode
[  200.615125][ T8511] syzkaller0: entered allmulticast mode
[  200.856666][ T6188] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0
[  200.862622][ T6188] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0
[  200.868169][ T6188] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  200.881281][ T8522] netlink: 'syz.0.770': attribute type 8 has an invalid length.
[  200.935882][ T6188] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected
[  200.944765][ T6188] input: Steam Controller as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:28DE:1102.000B/input/input26
[  200.986353][ T6188] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0
[  200.992658][ T6188] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0
[  201.001224][ T6188] hid-steam 0003:28DE:1102.000C: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  201.064786][ T5901] usb 7-1: USB disconnect, device number 17
[  201.107346][ T8534] netlink: 'syz.0.775': attribute type 10 has an invalid length.
[  201.114633][ T5901] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected
[  201.140874][ T8534] team0: Port device dummy0 added
[  201.154031][ T8534] netlink: 'syz.0.775': attribute type 10 has an invalid length.
[  201.199392][ T8534] team0: Port device dummy0 removed
[  201.213935][ T8534] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  201.362418][ T8543] lo speed is unknown, defaulting to 1000
[  201.561674][ T6039] IPVS: starting estimator thread 0...
[  201.667583][ T8545] IPVS: using max 45 ests per chain, 108000 per kthread
[  204.367564][ T6728] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  204.521969][ T5966] block nbd2: Receive control failed (result -107)
[  204.529197][ T5966] 
[  204.530031][ T5966] ======================================================
[  204.532420][ T5966] WARNING: possible circular locking dependency detected
[  204.534747][ T5966] syzkaller #0 Tainted: G             L     
[  204.536740][ T5966] ------------------------------------------------------
[  204.539002][ T5966] kworker/u33:6/5966 is trying to acquire lock:
[  204.540995][ T5966] ffff888024c75d60 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410
[  204.545005][ T5966] 
[  204.545005][ T5966] but task is already holding lock:
[  204.547608][ T5966] ffff888029d67e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  204.549742][ T6728] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  204.550675][ T5966] 
[  204.550675][ T5966] which lock already depends on the new lock.
[  204.550675][ T5966] 
[  204.550682][ T5966] 
[  204.550682][ T5966] the existing dependency chain (in reverse order) is:
[  204.550686][ T5966] 
[  204.550686][ T5966] -> #6
[  204.553888][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  204.557057][ T5966]  (&nsock->tx_lock){+.+.}-{4:4}:
[  204.557135][ T5966]        __mutex_lock+0x1a4/0x1b10
[  204.561640][ T6728] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  204.562991][ T5966]        nbd_queue_rq+0x428/0x1080
[  204.563008][ T5966]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  204.567999][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  204.568736][ T5966]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  204.570684][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  204.574163][ T5966]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  204.574187][ T5966]        blk_mq_run_hw_queue+0x23c/0x670
[  204.574201][ T5966]        blk_mq_dispatch_list+0x51d/0x1360
[  204.574211][ T5966]        blk_mq_flush_plug_list+0x130/0x600
[  204.574221][ T5966]        __blk_flush_plug+0x2c4/0x4b0
[  204.574236][ T5966]        __submit_bio+0x584/0x6c0
[  204.577441][ T6728] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  204.578086][ T5966]        submit_bio_noacct_nocheck+0x543/0xbf0
[  204.578107][ T5966]        submit_bio_noacct+0xd18/0x2000
[  204.582034][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  204.583989][ T5966]        submit_bh_wbc+0x681/0x890
[  204.587622][ T6728] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  204.589664][ T5966]        block_read_full_folio+0x4c8/0x8e0
[  204.591875][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  204.593495][ T5966]        filemap_read_folio+0xfc/0x3b0
[  204.596175][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  204.597673][ T5966]        do_read_cache_folio+0x2d7/0x6b0
[  204.600982][ T6728] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  204.602337][ T5966]        read_part_sector+0xd1/0x370
[  204.605159][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  204.606760][ T5966]        adfspart_check_ICS+0x91/0x7d0
[  204.606778][ T5966]        bdev_disk_changed+0x7a3/0x1250
[  204.606792][ T5966]        blkdev_get_whole+0x187/0x290
[  204.606806][ T5966]        bdev_open+0x2c7/0xe40
[  204.606820][ T5966]        blkdev_open+0x34e/0x4f0
[  204.606828][ T5966]        do_dentry_open+0x6d8/0x1660
[  204.606911][ T5966]        vfs_open+0x82/0x3f0
[  204.606925][ T5966]        path_openat+0x208c/0x31a0
[  204.610495][ T6728] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  204.611985][ T5966]        do_file_open+0x20e/0x430
[  204.615613][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  204.617405][ T5966]        do_sys_openat2+0x10d/0x1e0
[  204.617428][ T5966]        __x64_sys_openat+0x12d/0x210
[  204.617442][ T5966]        do_syscall_64+0x10b/0xf80
[  204.617459][ T5966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.617470][ T5966] 
[  204.617470][ T5966] -> #5 (&cmd->lock){+.+.}-{4:4}
[  204.621118][ T6728] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  204.622738][ T5966] :
[  204.622747][ T5966]        __mutex_lock+0x1a4/0x1b10
[  204.628782][ T6728] usb 6-1: string descriptor 0 read error: -22
[  204.630444][ T5966]        nbd_queue_rq+0xba/0x1080
[  204.632442][ T6728] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  204.635504][ T5966]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  204.635521][ T5966]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  204.637471][ T6728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.639043][ T5966]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  204.639065][ T5966]        blk_mq_run_hw_queue+0x23c/0x670
[  204.652137][ T6728] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  204.652422][ T5966]        blk_mq_dispatch_list+0x51d/0x1360
[  204.652441][ T5966]        blk_mq_flush_plug_list+0x130/0x600
[  204.652451][ T5966]        __blk_flush_plug+0x2c4/0x4b0
[  204.697542][ T5966]        __submit_bio+0x584/0x6c0
[  204.699182][ T5966]        submit_bio_noacct_nocheck+0x543/0xbf0
[  204.701117][ T5966]        submit_bio_noacct+0xd18/0x2000
[  204.703006][ T5966]        submit_bh_wbc+0x681/0x890
[  204.704792][ T5966]        block_read_full_folio+0x4c8/0x8e0
[  204.707042][ T5966]        filemap_read_folio+0xfc/0x3b0
[  204.709033][ T5966]        do_read_cache_folio+0x2d7/0x6b0
[  204.710915][ T5966]        read_part_sector+0xd1/0x370
[  204.712574][ T5966]        adfspart_check_ICS+0x91/0x7d0
[  204.714330][ T5966]        bdev_disk_changed+0x7a3/0x1250
[  204.716168][ T5966]        blkdev_get_whole+0x187/0x290
[  204.717850][ T5966]        bdev_open+0x2c7/0xe40
[  204.719407][ T5966]        blkdev_open+0x34e/0x4f0
[  204.720982][ T5966]        do_dentry_open+0x6d8/0x1660
[  204.722669][ T5966]        vfs_open+0x82/0x3f0
[  204.724142][ T5966]        path_openat+0x208c/0x31a0
[  204.725756][ T5966]        do_file_open+0x20e/0x430
[  204.727383][ T5966]        do_sys_openat2+0x10d/0x1e0
[  204.729101][ T5966]        __x64_sys_openat+0x12d/0x210
[  204.730826][ T5966]        do_syscall_64+0x10b/0xf80
[  204.732473][ T5966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.734881][ T5966] 
[  204.734881][ T5966] -> #4 (set->srcu){.+.+}-{0:0}:
[  204.737543][ T5966]        __synchronize_srcu+0xa2/0x300
[  204.739506][ T5966]        blk_mq_quiesce_queue+0x149/0x1c0
[  204.741339][ T5966]        elevator_switch+0x17b/0x7e0
[  204.743149][ T5966]        elevator_change+0x352/0x530
[  204.744830][ T5966]        elevator_set_default+0x29e/0x360
[  204.746640][ T5966]        blk_register_queue+0x48e/0x630
[  204.748426][ T5966]        __add_disk+0x73f/0xe40
[  204.750022][ T5966]        add_disk_fwnode+0x118/0x5c0
[  204.751786][ T5966]        nbd_dev_add+0x77a/0xb10
[  204.753402][ T5966]        nbd_init+0x291/0x2b0
[  204.755437][ T5966]        do_one_initcall+0x121/0x750
[  204.757223][ T5966]        kernel_init_freeable+0x6ea/0x7b0
[  204.759094][ T5966]        kernel_init+0x1f/0x1e0
[  204.760623][ T5966]        ret_from_fork+0x72b/0xd50
[  204.762387][ T5966]        ret_from_fork_asm+0x1a/0x30
[  204.764091][ T5966] 
[  204.764091][ T5966] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  204.766635][ T5966]        __mutex_lock+0x1a4/0x1b10
[  204.768401][ T5966]        elevator_change+0x1bc/0x530
[  204.770285][ T5966]        elevator_set_none+0x92/0xf0
[  204.772212][ T5966]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  204.774312][ T5966]        nbd_start_device+0x1a6/0xbd0
[  204.776128][ T5966]        nbd_genl_connect+0xff2/0x1a40
[  204.777913][ T5966]        genl_family_rcv_msg_doit+0x214/0x300
[  204.780040][ T5966]        genl_rcv_msg+0x560/0x800
[  204.781685][ T5966]        netlink_rcv_skb+0x159/0x420
[  204.783384][ T5966]        genl_rcv+0x28/0x40
[  204.784841][ T5966]        netlink_unicast+0x585/0x850
[  204.786527][ T5966]        netlink_sendmsg+0x8b0/0xda0
[  204.788191][ T5966]        ____sys_sendmsg+0x9e1/0xb70
[  204.790119][ T5966]        ___sys_sendmsg+0x190/0x1e0
[  204.791837][ T5966]        __sys_sendmsg+0x170/0x220
[  204.793508][ T5966]        __do_fast_syscall_32+0xe7/0x950
[  204.795317][ T5966]        do_fast_syscall_32+0x32/0x70
[  204.797018][ T5966]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  204.799192][ T5966] 
[  204.799192][ T5966] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  204.801912][ T5966]        blk_alloc_queue+0x610/0x790
[  204.803728][ T5966]        blk_mq_alloc_queue+0x174/0x290
[  204.805592][ T5966]        __blk_mq_alloc_disk+0x29/0x120
[  204.807473][ T5966]        nbd_dev_add+0x492/0xb10
[  204.809094][ T5966]        nbd_init+0x291/0x2b0
[  204.810590][ T5966]        do_one_initcall+0x121/0x750
[  204.812297][ T5966]        kernel_init_freeable+0x6ea/0x7b0
[  204.814102][ T5966]        kernel_init+0x1f/0x1e0
[  204.815670][ T5966]        ret_from_fork+0x72b/0xd50
[  204.817297][ T5966]        ret_from_fork_asm+0x1a/0x30
[  204.819025][ T5966] 
[  204.819025][ T5966] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  204.821448][ T5966]        fs_reclaim_acquire+0xc4/0x100
[  204.823449][ T5966]        kmem_cache_alloc_node_noprof+0x53/0x6f0
[  204.825499][ T5966]        __alloc_skb+0x140/0x710
[  204.827199][ T5966]        tcp_stream_alloc_skb+0x34/0x660
[  204.829110][ T5966]        tcp_sendmsg_locked+0x13cd/0x4500
[  204.830945][ T5966]        tcp_sendmsg+0x2e/0x50
[  204.832500][ T5966]        inet_sendmsg+0xb9/0x140
[  204.834077][ T5966]        sock_write_iter+0x4ea/0x5a0
[  204.835763][ T5966]        vfs_write+0x6ac/0x1070
[  204.837261][ T5966]        ksys_write+0x1f8/0x250
[  204.838758][ T5966]        do_syscall_64+0x10b/0xf80
[  204.840338][ T5966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.842399][ T5966] 
[  204.842399][ T5966] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}:
[  204.844838][ T5966]        __lock_acquire+0x14b8/0x2630
[  204.846598][ T5966]        lock_acquire+0x1b1/0x370
[  204.848215][ T5966]        lock_sock_nested+0x41/0xf0
[  204.849936][ T5966]        inet_shutdown+0x67/0x410
[  204.851689][ T5966]        nbd_mark_nsock_dead+0xae/0x5c0
[  204.853710][ T5966]        recv_work+0x5fb/0x8c0
[  204.855391][ T5966]        process_one_work+0xa0e/0x1980
[  204.857263][ T5966]        worker_thread+0x5ef/0xe50
[  204.858927][ T5966]        kthread+0x370/0x450
[  204.860413][ T5966]        ret_from_fork+0x72b/0xd50
[  204.862086][ T5966]        ret_from_fork_asm+0x1a/0x30
[  204.863774][ T5966] 
[  204.863774][ T5966] other info that might help us debug this:
[  204.863774][ T5966] 
[  204.865998][ T8571] input: syz1 as /devices/virtual/input/input27
[  204.866948][ T5966] Chain exists of:
[  204.866948][ T5966]   sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock
[  204.866948][ T5966] 
[  204.866972][ T5966]  Possible unsafe locking scenario:
[  204.866972][ T5966] 
[  204.866976][ T5966]        CPU0                    CPU1
[  204.866978][ T5966]        ----                    ----
[  204.866981][ T5966]   lock(&nsock->tx_lock);
[  204.866988][ T5966]                                lock(
[  204.877393][ T8571] uinput: write device info first
[  204.878810][ T5966] &cmd->lock);
[  204.878821][ T5966]                                lock(&nsock->tx_lock);
[  204.878830][ T5966]   lock(sk_lock-AF_INET);
[  204.878837][ T5966] 
[  204.878837][ T5966]  *** DEADLOCK ***
[  204.878837][ T5966] 
[  204.878840][ T5966] 3 locks held by kworker/u33:6/5966:
[  204.878846][ T5966]  #0: ffff888027ca3140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  204.896811][ T5966]  #1: ffffc90004e2fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  204.900416][ T5966]  #2: ffff888029d67e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  204.903326][ T5966] 
[  204.903326][ T5966] stack backtrace:
[  204.905460][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: kworker/u33:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.905478][ T5966] Tainted: [L]=SOFTLOCKUP
[  204.905482][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  204.905492][ T5966] Workqueue: nbd2-recv recv_work
[  204.905504][ T5966] Call Trace:
[  204.905587][ T5966]  <TASK>
[  204.905593][ T5966]  dump_stack_lvl+0x100/0x190
[  204.905678][ T5966]  print_circular_bug.cold+0x178/0x1c7
[  204.905699][ T5966]  check_noncircular+0x146/0x160
[  204.905719][ T5966]  __lock_acquire+0x14b8/0x2630
[  204.905738][ T5966]  lock_acquire+0x1b1/0x370
[  204.905755][ T5966]  ? inet_shutdown+0x67/0x410
[  204.905768][ T5966]  ? __queue_work+0x445/0x1130
[  204.905780][ T5966]  lock_sock_nested+0x41/0xf0
[  204.905797][ T5966]  ? inet_shutdown+0x67/0x410
[  204.905814][ T5966]  inet_shutdown+0x67/0x410
[  204.905827][ T5966]  nbd_mark_nsock_dead+0xae/0x5c0
[  204.905845][ T5966]  recv_work+0x5fb/0x8c0
[  204.905855][ T5966]  ? __lock_acquire+0xd73/0x2630
[  204.905873][ T5966]  ? __pfx_recv_work+0x10/0x10
[  204.905885][ T5966]  ? rcu_is_watching+0x12/0xc0
[  204.905899][ T5966]  process_one_work+0xa0e/0x1980
[  204.905912][ T5966]  ? __pfx_process_one_work+0x10/0x10
[  204.905925][ T5966]  ? __pfx_recv_work+0x10/0x10
[  204.905935][ T5966]  worker_thread+0x5ef/0xe50
[  204.905947][ T5966]  ? __pfx_worker_thread+0x10/0x10
[  204.905957][ T5966]  ? kthread+0x13a/0x450
[  204.905973][ T5966]  ? __pfx_worker_thread+0x10/0x10
[  204.905983][ T5966]  kthread+0x370/0x450
[  204.905999][ T5966]  ? __pfx_kthread+0x10/0x10
[  204.906016][ T5966]  ret_from_fork+0x72b/0xd50
[  204.906029][ T5966]  ? __pfx_ret_from_fork+0x10/0x10
[  204.906040][ T5966]  ? __switch_to+0x800/0x1100
[  204.906121][ T5966]  ? __pfx_kthread+0x10/0x10
[  204.906138][ T5966]  ret_from_fork_asm+0x1a/0x30
[  204.906155][ T5966]  </TASK>
[  204.906345][ T6188] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  205.016069][ T5961] block nbd2: shutting down sockets
[  205.138866][ T6188] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.147811][ T6188] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.153705][ T6188] usb 5-1: config 0 interface 0 has no altsetting 0
[  205.156044][ T6188] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  205.160976][ T6188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.167555][ T6188] usb 5-1: config 0 descriptor??
[  205.586202][ T6188] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0
[  205.588697][ T6188] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0
[  205.591295][ T6188] hid-steam 0003:28DE:1102.000D: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  205.655747][ T6188] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected
[  205.660820][ T6188] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.000D/input/input28
[  205.681994][ T6188] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0
[  205.686143][ T6188] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0
[  205.690884][ T6188] hid-steam 0003:28DE:1102.000E: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  205.782995][ T6728] usb 5-1: USB disconnect, device number 17
[  205.792625][ T6728] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected
[  207.149823][ T6188] usb 6-1: USB disconnect, device number 21