last executing test programs:

11m10.82793316s ago: executing program 32 (id=98):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

10m59.895872128s ago: executing program 33 (id=181):
prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
read(r0, &(0x7f00000002c0)=""/153, 0x99)

8m30.37785353s ago: executing program 34 (id=1392):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)

7m57.102593922s ago: executing program 35 (id=1711):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x175)

7m44.80999817s ago: executing program 7 (id=1802):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
accept(r0, 0x0, 0x0)

7m43.792998148s ago: executing program 7 (id=1820):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r1, &(0x7f0000001dc0)=""/4096, 0x1000)

7m43.577114119s ago: executing program 7 (id=1822):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x50, 0x40, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xc9, 0x7151, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x87, 0xf3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0xc, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x3}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x201d}}, {0x0, 0x0}]})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

7m39.844650361s ago: executing program 7 (id=1861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

7m39.608781621s ago: executing program 7 (id=1862):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

7m35.840142089s ago: executing program 7 (id=1892):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x5a)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0a485cbc8b0cc847cd9c4f5b189d65b8c1d0c7c0aed6c18f8", 0x3b}], 0x1}}], 0x1, 0x48045)
close_range(r0, 0xffffffffffffffff, 0x0)

7m35.493053892s ago: executing program 36 (id=1892):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x5a)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0a485cbc8b0cc847cd9c4f5b189d65b8c1d0c7c0aed6c18f8", 0x3b}], 0x1}}], 0x1, 0x48045)
close_range(r0, 0xffffffffffffffff, 0x0)

6m42.057246254s ago: executing program 0 (id=2382):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f00000000c0)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
close_range(r0, 0xffffffffffffffff, 0x0)

6m41.97184329s ago: executing program 0 (id=2384):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d564", 0xb1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000240)=""/135, 0x87}], 0x2)

6m41.86585872s ago: executing program 0 (id=2386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6m41.827626346s ago: executing program 0 (id=2388):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

6m41.665925905s ago: executing program 0 (id=2399):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m41.473971515s ago: executing program 0 (id=2394):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x3)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)

6m41.17844845s ago: executing program 37 (id=2394):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x3)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)

5m38.867449238s ago: executing program 8 (id=2969):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080))

5m38.549895963s ago: executing program 8 (id=2973):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)

5m38.29600345s ago: executing program 8 (id=2976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

5m38.127117851s ago: executing program 8 (id=2978):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x4, 0x31237648, 0x0, 0x9}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010f40)={0x0, 0x4a, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './bus'}}, 0x10020}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m37.954256768s ago: executing program 8 (id=2979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'})

5m37.005415969s ago: executing program 8 (id=2984):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=<r4=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x3, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

5m21.883213409s ago: executing program 38 (id=2984):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=<r4=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x3, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

2m40.401769719s ago: executing program 3 (id=4436):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x80000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000080000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002200)={@flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2m40.291004192s ago: executing program 3 (id=4438):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000b0000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2m40.194930022s ago: executing program 3 (id=4439):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0x50, 0x0, 0x1, 0x2, 0x4, 0x6, 0x99, 0xb, 0x4, 0x7, 0x3, 0xd1, 0x5, 0x8, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m39.242822518s ago: executing program 3 (id=4446):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@global=@item_012={0x1, 0x1, 0xc, "01"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @global=@item_4={0x3, 0x1, 0x6, "86930154"}, @main=@item_4={0x3, 0x0, 0xb, "9b012d3c"}]}}, 0x0}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m38.481400343s ago: executing program 3 (id=4457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r3 = dup(r0)
r4 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0x24, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

2m38.381677474s ago: executing program 3 (id=4459):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000680)="6526430f01d1ddcbb9ec0a00000f3266baf80cb868d6e387ef66bafc0cb825ec0000ef410f01c8f3420fc77c3232026d3c87b0ac0000c7442400c4000000c74424024b8539d9ff2c24660fc774d75db805000000b9000800000f01c1", 0x5c}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), 0x0)
mount$cgroup(0x0, &(0x7f0000000c80)='.\x00', &(0x7f0000000cc0), 0x800000, &(0x7f0000000d00)={[{@name={'name', 0x3d, '-'}}]})
syz_clone(0x630c1500, 0x0, 0x0, 0x0, 0x0, 0x0)

2m23.350241688s ago: executing program 39 (id=4459):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000680)="6526430f01d1ddcbb9ec0a00000f3266baf80cb868d6e387ef66bafc0cb825ec0000ef410f01c8f3420fc77c3232026d3c87b0ac0000c7442400c4000000c74424024b8539d9ff2c24660fc774d75db805000000b9000800000f01c1", 0x5c}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), 0x0)
mount$cgroup(0x0, &(0x7f0000000c80)='.\x00', &(0x7f0000000cc0), 0x800000, &(0x7f0000000d00)={[{@name={'name', 0x3d, '-'}}]})
syz_clone(0x630c1500, 0x0, 0x0, 0x0, 0x0, 0x0)

2m1.318291095s ago: executing program 9 (id=4750):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x9535, 0x400, 0x1, 0x353}, 0x0, 0x4, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m1.065818404s ago: executing program 9 (id=4753):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCSBRK(r1, 0x400455c8, 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2f)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xcf)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0)

2m0.963853264s ago: executing program 9 (id=4756):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m57.99316954s ago: executing program 9 (id=4772):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040080ff00000402000000020000080004", 0x1f)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008"], 0x1c}}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6})
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x260280, 0x100)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m57.885084612s ago: executing program 9 (id=4773):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x0, 0x2}, 0x18, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0)

1m57.804804388s ago: executing program 9 (id=4774):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)

1m42.727160442s ago: executing program 40 (id=4774):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)

1m33.67777303s ago: executing program 4 (id=4933):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

1m33.295735974s ago: executing program 4 (id=4939):
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = open(0x0, 0x10507e, 0xa6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0xed3, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0x93}}}, &(0x7f0000000300)=<r2=>0x0)
syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m33.054500592s ago: executing program 4 (id=4940):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000800)='1', 0x1)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r1, &(0x7f0000000e00)='48000\x00', 0x6)

1m32.958401122s ago: executing program 4 (id=4941):
r0 = syz_usb_connect(0x5, 0x73, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000200)=""/27, 0x1b}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m32.356352547s ago: executing program 4 (id=4945):
setns(0xc9, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xffe)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
syz_usb_connect$uac3(0x0, 0xb1, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c4110000110001000400000000000000b4110000b0119a8008007800", @ANYRES32=0x0, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4800)

1m31.772446105s ago: executing program 4 (id=4956):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)

1m16.31745818s ago: executing program 41 (id=4956):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)

5.17099114s ago: executing program 2 (id=5421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x1, 0x2, 0x180, 0x7f, 0x10, 0xf1, 0x53, 0xf, 0x2, 0x0, 0x2d, 0x0, 0x4, 0x5, 0x8], 0x100000, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x6, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x20000000000], 0xeeee8000, 0x202})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x7ff, 0x6, 0x73, 0x6, 0x8, 0x8, 0x1, 0x1, 0x0, 0x4, 0xfc, 0x4, 0x6}, {0xe, 0x105, 0x48, 0xa, 0xdd, 0xa, 0x9, 0x8, 0xcf, 0x1, 0x5, 0x5, 0xef}, {0x3, 0x80, 0x2, 0x2, 0x95, 0x81, 0x2, 0x7, 0x6, 0x7f, 0x5, 0x1, 0xf76}], 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0x5000, 0x8, 0x8, 0x7, 0xe4, 0x40, 0x0, 0x4c, 0x2e, 0x80}, {0x5000, 0x4000, 0xf, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x86}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0x4, 0x2, 0x7, 0xe}, {0xa000, 0xfec00000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x5, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xad, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x8}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x4d, 0x7, 0x3, 0x8, 0x81, 0x40, 0x2}, {0x5000, 0x4000, 0xf, 0x5, 0xcd, 0x7, 0x2, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xe000, 0x30}, {0x5000, 0x4}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x400000204, 0x5b, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.819777876s ago: executing program 2 (id=5424):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.209477865s ago: executing program 1 (id=5439):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000b0000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2.771994933s ago: executing program 1 (id=5442):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f000000a9c0)='./file0\x00', 0x0, 0x800)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a500)={0x18, 0xffffffffffffffda, 0x3}, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a680)={0x20, 0x0, 0x2, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r4, r0)
pwrite64(r0, &(0x7f0000000740)='@', 0x1, 0x7f)

2.681234771s ago: executing program 1 (id=5443):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
userfaultfd(0x80001)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x2, 0x318, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4aaa, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r0}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0)

2.335153934s ago: executing program 5 (id=5449):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@global=@item_012={0x1, 0x1, 0xc, "01"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @global=@item_4={0x3, 0x1, 0x6, "86930154"}, @main=@item_4={0x3, 0x0, 0xb, "9b012d3c"}]}}, 0x0}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.761938262s ago: executing program 5 (id=5451):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x19}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

1.649305758s ago: executing program 2 (id=5452):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r3 = dup(r0)
r4 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0x24, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

1.568978793s ago: executing program 5 (id=5453):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.524195037s ago: executing program 2 (id=5454):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0)

1.127224443s ago: executing program 6 (id=5455):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6(0xa, 0x3, 0x3c)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2})
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r4, 0x8916, &(0x7f0000000000))
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

1.127018138s ago: executing program 5 (id=5456):
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
flock(0xffffffffffffffff, 0x1)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
read(r0, &(0x7f0000000000)=""/134, 0x86)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000440)='g', 0x1, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @multicast}, 0x14)

1.125175854s ago: executing program 1 (id=5463):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x80, 0x4, 0x4000200})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={@remote, @loopback, @private1, 0x5, 0x6, 0x0, 0x100, 0x5, 0x86120186, r7})

1.020554177s ago: executing program 1 (id=5457):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

962.178375ms ago: executing program 6 (id=5458):
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84)
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208010, 0x0)

835.486799ms ago: executing program 6 (id=5459):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "7f9298c9413f0000fb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)

577.2454ms ago: executing program 2 (id=5460):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='serial8250\x00', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='r8a66597_hcd\x00', 0xd)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/r8a66597_hcd/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='serial8250\x00', 0xb)
close(r2)

576.350741ms ago: executing program 5 (id=5469):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

505.515712ms ago: executing program 2 (id=5461):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

283.756075ms ago: executing program 6 (id=5462):
mmap$IORING_OFF_SQ_RING(0x0, 0xf9, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

168.556959ms ago: executing program 6 (id=5464):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

100.165542ms ago: executing program 6 (id=5465):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

99.375895ms ago: executing program 1 (id=5474):
pipe(&(0x7f0000002680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x1)
chdir(&(0x7f0000000180)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

0s ago: executing program 5 (id=5466):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10)
sysfs$1(0x1, &(0x7f0000000140)='udf\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r2, 0x11, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

kernel console output (not intermixed with test programs):

 T5713] usb 10-1: USB disconnect, device number 25
[  532.157940][T17232] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  532.346808][T17238] tipc: Failed to remove unknown binding: 66,0,0/4269801491:301139325/301139326
[  532.356693][T17238] tipc: Failed to remove unknown binding: 66,0,0/4269801491:301139325/301139326
[  532.486982][T17244] netlink: 'syz.9.3779': attribute type 4 has an invalid length.
[  532.529943][T17244] netlink: 'syz.9.3779': attribute type 4 has an invalid length.
[  533.029044][T17268] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  533.260151][ T4933] Bluetooth: hci5: link tx timeout
[  533.263546][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  533.327319][ T4933] Bluetooth: hci5: link tx timeout
[  533.327366][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  533.351335][ T4933] Bluetooth: hci5: link tx timeout
[  533.351372][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  533.692011][ T4933] Bluetooth: hci5: link tx timeout
[  533.692050][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  533.867581][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880318b1000: rx timeout, send abort
[  534.171812][ T4933] Bluetooth: hci5: link tx timeout
[  534.171857][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  534.367662][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880318b1000: abort rx timeout. Force session deactivation
[  534.966780][T17315] fuse: fd is not a fuse device
[  535.211481][ T4933] Bluetooth: hci5: link tx timeout
[  535.211516][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  535.290825][ T4933] Bluetooth: hci5: command 0x0406 tx timeout
[  536.651081][ T5694] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  536.754039][T17364] cgroup: No subsys list or none specified
[  536.810610][ T5694] usb 10-1: Using ep0 maxpacket: 32
[  536.818205][ T5694] usb 10-1: unable to get BOS descriptor or descriptor too short
[  536.818285][ T5694] usb 10-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  536.839947][ T5694] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 18, changing to 7
[  536.856209][ T5694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.865302][ T5694] usb 10-1: Product: syz
[  536.865351][ T5694] usb 10-1: Manufacturer: syz
[  536.865373][ T5694] usb 10-1: SerialNumber: syz
[  536.882284][T17367] netlink: 'syz.5.3816': attribute type 4 has an invalid length.
[  536.943656][T17367] netlink: 'syz.5.3816': attribute type 4 has an invalid length.
[  537.246107][ T5694] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  537.328353][ T5694] usb 10-1: USB disconnect, device number 26
[  537.417404][T16751] udevd[16751]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  538.416316][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3832'.
[  538.825265][T17425] clocksource: Switched to clocksource acpi_pm
[  538.837670][T17425] clocksource: Switched to clocksource kvm-clock
[  538.841507][T17425] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  538.870775][T17425] clocksource: Switched to clocksource tsc
[  539.283941][  T122] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  539.453383][  T122] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  539.470710][  T122] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.470779][  T122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.470894][  T122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.470948][  T122] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  539.471042][  T122] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.488729][  T122] usb 10-1: config 0 descriptor??
[  539.971950][  T122] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  540.214857][ T5694] usb 10-1: USB disconnect, device number 27
[  540.530861][T13134] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  540.680694][T13134] usb 4-1: Using ep0 maxpacket: 8
[  540.683128][T13134] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  540.690949][T13134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.691012][T13134] usb 4-1: Product: syz
[  540.691041][T13134] usb 4-1: Manufacturer: syz
[  540.691076][T13134] usb 4-1: SerialNumber: syz
[  540.700079][T13134] usb 4-1: config 0 descriptor??
[  540.894133][T17480] loop8: detected capacity change from 0 to 8
[  540.915055][T17480] Dev loop8: unable to read RDB block 8
[  540.915673][T17480]  loop8: unable to read partition table
[  540.915937][T17480] loop8: partition table beyond EOD, truncated
[  540.915975][T17480] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  540.945064][T13134] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  541.084641][T17482] r8a66597_hcd serial8250: platform_get_resource error.
[  542.289299][T17509] fuse: fd is not a fuse device
[  542.469135][T17516] fuse: fd is not a fuse device
[  542.559648][T13134] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  542.577961][T13134] usb 4-1: USB disconnect, device number 19
[  542.895999][T17528] fuse: fd is not a fuse device
[  543.275745][T17549] syzkaller0: entered promiscuous mode
[  543.275794][T17549] syzkaller0: entered allmulticast mode
[  543.802641][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  543.813829][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  543.836229][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  543.872475][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  543.906168][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  546.016167][ T5625] Bluetooth: hci0: command tx timeout
[  546.191486][T17570] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3900'.
[  547.386557][T17553] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.386718][T17553] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.387053][T17553] bridge_slave_0: entered allmulticast mode
[  547.391870][T17553] bridge_slave_0: entered promiscuous mode
[  547.396020][T17553] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.396172][T17553] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.396293][T17553] bridge_slave_1: entered allmulticast mode
[  547.399142][T17553] bridge_slave_1: entered promiscuous mode
[  547.525219][T17643] fuse: fd is not a fuse device
[  547.563035][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.578158][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.714545][T17644] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  547.777182][T17553] team0: Port device team_slave_0 added
[  547.794982][T17553] team0: Port device team_slave_1 added
[  548.032713][ T6058] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.066073][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.066104][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.066131][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.086380][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.086419][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.086488][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.106782][ T5625] Bluetooth: hci0: command tx timeout
[  548.229983][T17553] hsr_slave_0: entered promiscuous mode
[  548.238937][T17553] hsr_slave_1: entered promiscuous mode
[  548.246734][T17553] debugfs: 'hsr0' already exists in 'hsr'
[  548.246773][T17553] Cannot create hsr debugfs directory
[  548.329436][ T6058] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.533362][ T6058] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.561145][T17670] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  548.673642][ T6058] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.711929][ T5765] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  548.860673][ T5765] usb 4-1: Using ep0 maxpacket: 32
[  548.866828][ T5765] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  548.879820][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.879859][ T5765] usb 4-1: Product: syz
[  548.879890][ T5765] usb 4-1: Manufacturer: syz
[  548.879909][ T5765] usb 4-1: SerialNumber: syz
[  548.906341][ T5765] usb 4-1: config 0 descriptor??
[  548.929432][ T5765] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  549.277223][ T6058] bridge_slave_1: left allmulticast mode
[  549.283624][ T6058] bridge_slave_1: left promiscuous mode
[  549.290888][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.307783][ T6058] bridge_slave_0: left allmulticast mode
[  549.307851][ T6058] bridge_slave_0: left promiscuous mode
[  549.308334][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.634182][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.653304][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.664651][ T6058] bond0 (unregistering): Released all slaves
[  549.777938][ T6058] tipc: Disabling bearer <udp:syz0>
[  549.778195][ T6058] tipc: Disabling bearer <udp:syz2>
[  549.778462][ T6058] tipc: Left network mode
[  550.178653][ T5625] Bluetooth: hci0: command tx timeout
[  550.414874][ T6058] hsr_slave_0: left promiscuous mode
[  550.424262][ T6058] hsr_slave_1: left promiscuous mode
[  550.430769][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.448566][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.459689][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.477103][ T6058] veth1_macvtap: left promiscuous mode
[  550.483925][ T6058] veth0_macvtap: left promiscuous mode
[  550.489570][ T6058] veth1_vlan: left promiscuous mode
[  550.496776][ T6058] veth0_vlan: left promiscuous mode
[  550.513567][T17712] netlink: 'syz.5.3926': attribute type 4 has an invalid length.
[  551.015944][ T5765] gspca_ov534_9: reg_r err -71
[  551.066798][ T6058] team0 (unregistering): Port device team_slave_1 removed
[  551.082235][ T6058] team0 (unregistering): Port device team_slave_0 removed
[  551.272263][ T5765] gspca_ov534_9: Unknown sensor 0000
[  551.272364][ T5765] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  551.292111][ T5765] usb 4-1: USB disconnect, device number 20
[  551.392079][T17553] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  551.408685][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  551.417249][T17553] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  551.437276][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  551.445836][T17553] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  551.459999][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  551.468929][T17553] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  551.486609][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  551.639458][T17553] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.662291][T17553] 8021q: adding VLAN 0 to HW filter on device team0
[  551.682515][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.682897][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.743539][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.743767][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.250928][ T5625] Bluetooth: hci0: command tx timeout
[  552.637264][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  552.962156][T17553] veth0_vlan: entered promiscuous mode
[  552.980007][T17553] veth1_vlan: entered promiscuous mode
[  553.047223][T17553] veth0_macvtap: entered promiscuous mode
[  553.056317][T17553] veth1_macvtap: entered promiscuous mode
[  553.085101][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.106355][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.140441][T17793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.153252][   T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.155239][   T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.155347][   T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.155433][   T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.256260][T17790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.365847][T17790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.380134][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.380178][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.449205][ T6926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.449249][ T6926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.023881][   T30] audit: type=1326 audit(1787590300.092:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.9.3960" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa5d9e0d9 code=0x0
[  556.201944][T17883] loop4: detected capacity change from 0 to 2640
[  556.207655][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.207788][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.207861][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.207931][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.207994][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208106][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208209][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208278][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208313][T17883] ldm_validate_partition_table(): Disk read failed.
[  556.208367][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208396][T17883] Buffer I/O error on dev loop4, logical block 0, async page read
[  556.208440][T17883] Dev loop4: unable to read RDB block 0
[  556.208864][T17883]  loop4: unable to read partition table
[  556.209360][T17883] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  556.567169][T17887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  556.822988][   T30] audit: type=1326 audit(1787590301.892:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17892 comm="syz.3.3973" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd913d9e0d9 code=0x0
[  556.889075][T17894] ªªªªªª: renamed from vlan0 (while UP)
[  557.581266][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3987'.
[  557.724682][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'.
[  557.734179][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'.
[  557.893179][T17926] fuse: fd is not a fuse device
[  558.006973][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'.
[  558.017334][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'.
[  558.844184][T17952] fuse: fd is not a fuse device
[  560.248341][T17973] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  560.248389][T17973] overlayfs: failed to set xattr on upper
[  560.251526][T17973] overlayfs: ...falling back to redirect_dir=nofollow.
[  560.251571][T17973] overlayfs: ...falling back to index=off.
[  560.251617][T17973] overlayfs: ...falling back to uuid=null.
[  560.310314][T17973] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  560.310356][T17973] overlayfs: failed to set xattr on upper
[  560.310365][T17973] overlayfs: ...falling back to redirect_dir=nofollow.
[  560.310373][T17973] overlayfs: ...falling back to index=off.
[  560.310380][T17973] overlayfs: ...falling back to uuid=null.
[  560.356904][T17975] fuse: fd is not a fuse device
[  560.658747][T17982] tipc: Failed to remove unknown binding: 66,0,0/0:3993028644/3993028645
[  560.678279][T17982] tipc: Failed to remove unknown binding: 66,0,0/0:3993028644/3993028645
[  562.613479][T18028] sock: sock_set_timeout: `syz.5.4024' (pid 18028) tries to set negative timeout
[  562.974747][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  563.322388][T18043] overlayfs: failed to clone upperpath
[  563.490900][   T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  563.649129][   T45] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  563.658592][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.658659][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.658724][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.679124][   T45] usb 4-1: config 0 descriptor??
[  564.109648][   T45] hid_parser_main: 448 callbacks suppressed
[  564.109712][   T45] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  564.113208][   T45] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  564.135095][   T45] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0014/input/input36
[  564.216038][   T45] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  564.318141][  T191] usb 4-1: USB disconnect, device number 21
[  564.408225][T18047] fido_id[18047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  564.697503][T18065] kvm: pic: non byte write
[  565.945891][T18095] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  565.954193][T18095] overlayfs: failed to set xattr on upper
[  565.954235][T18095] overlayfs: ...falling back to redirect_dir=nofollow.
[  565.954249][T18095] overlayfs: ...falling back to index=off.
[  565.954261][T18095] overlayfs: ...falling back to uuid=null.
[  566.023435][T18099] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  566.162973][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4049'.
[  566.225662][T18112] fuse: fd is not a fuse device
[  566.232305][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4049'.
[  566.768546][T18124] futex_wake_op: syz.1.4056 tries to shift op by 144; fix this program
[  567.401448][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888032ddac00: rx timeout, send abort
[  567.901567][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888032ddac00: abort rx timeout. Force session deactivation
[  567.901908][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888032dda000: rx timeout, send abort
[  568.402008][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888032dda000: abort rx timeout. Force session deactivation
[  568.406817][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888067721800: rx timeout, send abort
[  568.407506][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888067721800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  568.962751][T18173] fuse: fd is not a fuse device
[  569.500266][T18186] fuse: fd is not a fuse device
[  569.521815][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888026be4400: rx timeout, send abort
[  569.530790][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888059385400: rx timeout, send abort
[  570.005457][T18200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4087'.
[  570.023664][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888026be4400: abort rx timeout. Force session deactivation
[  570.034125][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888059385400: abort rx timeout. Force session deactivation
[  570.062094][T18203] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  570.062150][T18203] overlayfs: failed to set xattr on upper
[  570.062161][T18203] overlayfs: ...falling back to redirect_dir=nofollow.
[  570.062170][T18203] overlayfs: ...falling back to index=off.
[  570.062177][T18203] overlayfs: ...falling back to uuid=null.
[  570.062729][T18203] overlayfs: failed to clone lowerpath
[  570.420754][ T5765] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  570.517441][T18218] kvm: pic: single mode not supported
[  570.519064][T18218] kvm: pic: level sensitive irq not supported
[  570.528529][T18218] kvm: pic: level sensitive irq not supported
[  570.590722][ T5765] usb 4-1: Using ep0 maxpacket: 32
[  570.592601][ T5765] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  570.598669][ T5765] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  570.598762][ T5765] usb 4-1: config 0 has no interface number 0
[  570.598867][ T5765] usb 4-1: config 0 interface 184 has no altsetting 0
[  570.617267][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.617323][ T5765] usb 4-1: Product: syz
[  570.617351][ T5765] usb 4-1: Manufacturer: syz
[  570.617388][ T5765] usb 4-1: SerialNumber: syz
[  570.645614][ T5765] usb 4-1: config 0 descriptor??
[  570.963390][T18231] sctp: [Deprecated]: syz.1.4099 (pid 18231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  570.963390][T18231] Use struct sctp_sack_info instead
[  571.210248][T18242] overlayfs: failed to clone upperpath
[  571.266287][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  571.277569][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  571.278494][T18244] overlayfs: failed to clone upperpath
[  571.941190][  T191] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  572.170137][  T191] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  572.186941][  T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.186996][  T191] usb 10-1: Product: syz
[  572.187105][  T191] usb 10-1: Manufacturer: syz
[  572.187151][  T191] usb 10-1: SerialNumber: syz
[  572.525502][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  572.525584][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  572.525606][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  572.526468][ T5765] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  572.554319][ T5765] usb 4-1: USB disconnect, device number 22
[  572.620359][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  572.620463][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  573.570852][   T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  573.731190][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  573.733658][   T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  573.738026][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  573.738080][   T45] usb 4-1: Product: syz
[  573.738114][   T45] usb 4-1: Manufacturer: syz
[  573.738149][   T45] usb 4-1: SerialNumber: syz
[  573.867091][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  573.977667][   T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  574.069880][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  574.083413][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  574.083494][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  574.110098][  T191] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  574.121635][  T191] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  574.136630][  T191] usb 10-1: USB disconnect, device number 28
[  574.229338][   T45] usb 4-1: USB disconnect, device number 23
[  574.246030][   T45] usblp0: removed
[  575.582533][T18310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4135'.
[  575.582575][T18310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4135'.
[  575.582611][T18310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4135'.
[  575.777600][T18314] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  576.657708][T18327] loop7: detected capacity change from 0 to 16384
[  576.877134][T18330] loop7: detected capacity change from 16384 to 0
[  576.884605][    C1] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2
[  576.998659][T18337] fuse: fd is not a fuse device
[  577.858075][T18356] kvm: pic: single mode not supported
[  577.859815][T18356] kvm: pic: single mode not supported
[  577.866374][T18356] kvm: pic: single mode not supported
[  577.872979][T18356] kvm: pic: level sensitive irq not supported
[  577.879462][T18356] kvm: pic: level sensitive irq not supported
[  577.887312][T18356] kvm: pic: single mode not supported
[  577.895074][T18356] kvm: pic: single mode not supported
[  577.901143][T18356] kvm: pic: single mode not supported
[  579.897319][T18413] fuse: fd is not a fuse device
[  579.923978][T18414] overlayfs: failed to clone upperpath
[  580.147456][T18426] fuse: fd is not a fuse device
[  580.360705][ T5707] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  580.510689][ T5707] usb 4-1: Using ep0 maxpacket: 32
[  580.516717][ T5707] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  580.525961][ T5707] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  580.537380][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.537417][ T5707] usb 4-1: config 0 has no interface number 0
[  580.553242][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.553281][ T5707] usb 4-1: config 0 has no interface number 0
[  580.570423][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.578761][ T5707] usb 4-1: config 0 has no interface number 0
[  580.588473][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.597508][ T5707] usb 4-1: config 0 has no interface number 0
[  580.607666][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.617032][ T5707] usb 4-1: config 0 has no interface number 0
[  580.624636][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.633143][ T5707] usb 4-1: config 0 has no interface number 0
[  580.640279][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.649295][ T5707] usb 4-1: config 0 has no interface number 0
[  580.656662][ T5707] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  580.665254][ T5707] usb 4-1: config 0 has no interface number 0
[  580.675479][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.683712][ T5707] usb 4-1: Product: syz
[  580.688007][ T5707] usb 4-1: Manufacturer: syz
[  580.694119][ T5707] usb 4-1: SerialNumber: syz
[  580.702068][ T5707] usb 4-1: config 0 descriptor??
[  580.716463][ T5707] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz)
[  580.767528][T18441] fuse: fd is not a fuse device
[  580.919537][ T5707] etas_es58x 4-1:0.2: could not retrieve the product info string
[  580.972215][T18449] syzkaller0: entered promiscuous mode
[  580.972274][T18449] syzkaller0: entered allmulticast mode
[  581.121376][T18454] fuse: fd is not a fuse device
[  581.490681][ T5707] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  581.611017][ T5625] Bluetooth: hci0: command tx timeout
[  581.657601][ T5707] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  581.668227][ T5707] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  581.676934][ T5707] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  581.688133][ T5707] usb 10-1: config 220 has no interface number 2
[  581.694864][ T5707] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  581.708309][ T5707] usb 10-1: config 220 interface 0 has no altsetting 0
[  581.715323][ T5707] usb 10-1: config 220 interface 76 has no altsetting 0
[  581.722483][ T5707] usb 10-1: config 220 interface 1 has no altsetting 0
[  581.733427][ T5707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.741768][ T5707] usb 10-1: Product: syz
[  581.746189][ T5707] usb 10-1: Manufacturer: syz
[  581.750982][ T5707] usb 10-1: SerialNumber: syz
[  581.857321][    C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  581.857435][    C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  581.857447][    C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG
[  581.859303][ T5278] etas_es58x 4-1:0.2 can0: bit-timing not yet defined
[  581.994872][ T5707] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  581.994973][ T5707] uvcvideo 10-1:220.0: No valid video chain found.
[  581.995474][ T5707] usb 10-1: selecting invalid altsetting 0
[  582.026039][ T5707] usb 10-1: selecting invalid altsetting 0
[  582.026068][ T5707] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  582.043854][ T5707] usb 10-1: USB disconnect, device number 29
[  582.068566][    C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  582.068654][    C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  582.068728][    C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  582.068795][  T191] usb 4-1: USB disconnect, device number 24
[  582.068802][    C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  582.068874][    C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  582.068968][    C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  582.072272][ T5278] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  582.160792][  T191] etas_es58x 4-1:0.2: Disconnecting syz syz
[  582.395565][T18505] fuse: fd is not a fuse device
[  582.482549][T18510] fuse: fd is not a fuse device
[  582.753862][T18526] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  583.878353][T18564] jffs2: notice: (18564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  584.790681][ T5707] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  584.875712][T18606] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  584.910712][  T122] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  584.953663][ T5707] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  584.971951][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.972042][ T5707] usb 4-1: Product: syz
[  584.972060][ T5707] usb 4-1: Manufacturer: syz
[  584.972134][ T5707] usb 4-1: SerialNumber: syz
[  585.004155][ T5707] usb 4-1: config 0 descriptor??
[  585.072816][T18612] fuse: fd is not a fuse device
[  585.083175][  T122] usb 10-1: Using ep0 maxpacket: 8
[  585.139113][T18614] tipc: Enabled bearer <udp:syz2>, priority 10
[  585.151758][T18614] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4225'.
[  585.167289][T18614] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  585.177448][T18614] tipc: Enabled bearer <udp:syz0>, priority 10
[  585.226373][ T5707] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  585.342257][  T122] usb 10-1: unable to get BOS descriptor or descriptor too short
[  585.342338][  T122] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  585.351447][  T122] usb 10-1: unable to read config index 0 descriptor/start: -71
[  585.351624][  T122] usb 10-1: can't read configurations, error -71
[  586.450854][  T122] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  586.601847][  T122] usb 10-1: Using ep0 maxpacket: 16
[  586.611694][  T122] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  586.624998][  T122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  586.640832][  T122] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.640873][  T122] usb 10-1: Product: syz
[  586.640906][  T122] usb 10-1: Manufacturer: syz
[  586.640988][  T122] usb 10-1: SerialNumber: syz
[  586.664167][  T122] usb 10-1: config 0 descriptor??
[  586.679371][ T5707] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  586.715324][ T5707] usb 4-1: USB disconnect, device number 25
[  586.731981][  T122] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  586.732047][  T122] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  587.317245][  T122] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  587.550849][   T25] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  587.649720][T18664] fuse: fd is not a fuse device
[  587.740399][  T122] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  587.756606][   T25] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  587.769549][  T122] em28xx 10-1:0.0: board has no eeprom
[  587.779685][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.779741][   T25] usb 4-1: Product: syz
[  587.779796][   T25] usb 4-1: Manufacturer: syz
[  587.779816][   T25] usb 4-1: SerialNumber: syz
[  587.807050][   T25] usb 4-1: config 0 descriptor??
[  587.819633][   T25] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  587.880679][  T122] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  587.888856][  T122] em28xx 10-1:0.0: dvb set to bulk mode.
[  587.904007][  T122] usb 10-1: USB disconnect, device number 31
[  587.913395][  T122] em28xx 10-1:0.0: Disconnecting em28xx
[  587.919154][ T5707] em28xx 10-1:0.0: Binding DVB extension
[  587.993806][ T5707] em28xx 10-1:0.0: Registering input extension
[  588.000493][  T122] em28xx 10-1:0.0: Closing input extension
[  588.028655][  T122] em28xx: Freeing device
[  588.042036][T18048] udevd[18048]: setting owner of /dev/bus/usb/010/031 to uid=0, gid=0 failed: No such file or directory
[  589.260994][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  589.304428][   T25] gspca_stk1135: reg_w 0x0 err -110
[  589.305682][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.305714][   T25] gspca_stk1135: Sensor write failed
[  589.305794][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.305891][   T25] gspca_stk1135: Sensor write failed
[  589.306011][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306039][   T25] gspca_stk1135: Sensor read failed
[  589.306120][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306148][   T25] gspca_stk1135: Sensor read failed
[  589.306169][   T25] gspca_stk1135: Detected sensor type unknown (0x0)
[  589.306286][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306324][   T25] gspca_stk1135: Sensor read failed
[  589.306402][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306424][   T25] gspca_stk1135: Sensor read failed
[  589.306513][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306534][   T25] gspca_stk1135: Sensor write failed
[  589.306610][   T25] gspca_stk1135: serial bus timeout: status=0x00
[  589.306630][   T25] gspca_stk1135: Sensor write failed
[  589.306868][   T25] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  589.456162][T18678] fuse: fd is not a fuse device
[  589.758011][T18683] fuse: fd is not a fuse device
[  589.801236][ T5694] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  589.887627][T18688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4252'.
[  589.953062][ T5694] usb 10-1: Using ep0 maxpacket: 16
[  589.961037][ T5694] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  589.971746][ T5694] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  589.981518][ T5694] usb 10-1: config 0 has no interface number 0
[  589.981615][ T5694] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  589.981646][ T5694] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  590.010959][ T5694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.019125][ T5694] usb 10-1: Product: syz
[  590.019143][ T5694] usb 10-1: Manufacturer: syz
[  590.019157][ T5694] usb 10-1: SerialNumber: syz
[  590.037004][ T5694] usb 10-1: config 0 descriptor??
[  590.062810][T18681] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  590.062963][T18681] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  590.268998][T18681] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  590.270280][T18681] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  590.476944][ T5694] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  590.789275][  T122] usb 4-1: USB disconnect, device number 26
[  591.080511][T18712] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  591.801444][  T122] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  591.950720][  T122] usb 4-1: Using ep0 maxpacket: 8
[  591.956832][  T122] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  591.970081][  T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.970136][  T122] usb 4-1: Product: syz
[  591.970155][  T122] usb 4-1: Manufacturer: syz
[  591.970175][  T122] usb 4-1: SerialNumber: syz
[  591.985681][  T122] usb 4-1: config 0 descriptor??
[  592.212441][  T122] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  592.509601][ T5694] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  592.509835][ T5694] asix 10-1:0.34: probe with driver asix failed with error -71
[  592.543002][ T5694] usb 10-1: USB disconnect, device number 32
[  593.031744][  T122] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  593.032638][  T122] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  593.032772][  T122] usb 4-1: media controller created
[  593.074045][  T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  593.174748][  T122] i2c i2c-1: Added multiplexed i2c bus 2
[  593.174791][  T122] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  593.175913][  T122] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  593.177087][  T122] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  593.299469][  T122] DVB: Unable to find symbol mxl5005s_attach()
[  593.428863][T18756] syzkaller1: entered promiscuous mode
[  593.428910][T18756] syzkaller1: entered allmulticast mode
[  593.518584][T18761] fuse: fd is not a fuse device
[  593.576302][T18764] fuse: fd is not a fuse device
[  593.633845][  T122] usb 4-1: USB disconnect, device number 27
[  594.006585][T18775] kvm [18773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  594.017216][T18775] kvm [18773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  594.406107][T18786] overlayfs: failed to clone upperpath
[  594.443719][T18788] jffs2: notice: (18788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  594.544391][T18791] fuse: fd is not a fuse device
[  595.551089][T18815] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  595.703412][T18818] kvm: pic: non byte write
[  596.042795][T18833] loop0: detected capacity change from 0 to 3904
[  596.091381][T18833] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  596.091503][T18833] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[  596.091532][T18833] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  596.091674][T18833]  loop0:
[  596.598486][T18861] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  596.598486][T18861] The task syz.3.4313 (18861) triggered the difference, watch for misbehavior.
[  596.626835][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  596.634726][ T5694] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  596.648319][  T122] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  596.904273][ T5694] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  596.911250][  T122] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  596.912022][  T122] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  596.969042][ T5625] Bluetooth: hci5: link tx timeout
[  596.969084][ T5625] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  596.973133][T18874] fuse: fd is not a fuse device
[  597.427677][  T122] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  597.435701][ T5694] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  597.437544][  T122] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  597.450203][T18860] ceph: No mds server is up or the cluster is laggy
[  597.465816][T18862] ceph: No mds server is up or the cluster is laggy
[  597.477060][T18863] ceph: No mds server is up or the cluster is laggy
[  597.703479][T18888] netlink: 'syz.3.4322': attribute type 12 has an invalid length.
[  597.901409][T18894] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  597.910535][T18894] tipc: Bearer <eth:dummy0>: already 2 bearers with priority 10
[  597.912627][T18894] tipc: Bearer <eth:dummy0>: trying with adjusted priority
[  597.913622][T18894] tipc: Enabled bearer <eth:dummy0>, priority 9
[  597.923166][T18894] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  598.220861][  T191] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  598.335091][T18898] openvswitch: netlink: Missing key (keys=40, expected=100)
[  598.371236][  T191] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  598.381186][  T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.381212][  T191] usb 4-1: Product: syz
[  598.381226][  T191] usb 4-1: Manufacturer: syz
[  598.381241][  T191] usb 4-1: SerialNumber: syz
[  598.551683][  T191] usb 4-1: reset high-speed USB device number 28 using dummy_hcd
[  598.580792][  T122] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  598.710888][  T122] usb 10-1: device descriptor read/64, error -71
[  598.758539][ T5765] usb 4-1: unsupported firmware.
[  598.952076][  T122] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  598.971151][ T4933] Bluetooth: hci5: command 0x0406 tx timeout
[  599.082121][  T122] usb 10-1: device descriptor read/64, error -71
[  599.198955][  T122] usb usb10-port1: attempt power cycle
[  599.511642][T18917] tipc: Failed to remove unknown binding: 66,0,0/1731884136:2797114802/2797114803
[  599.525082][T18917] tipc: Failed to remove unknown binding: 66,0,0/1731884136:2797114802/2797114803
[  599.551178][  T122] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  599.571625][  T122] usb 10-1: device descriptor read/8, error -71
[  599.810737][  T122] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  599.834093][  T122] usb 10-1: device descriptor read/8, error -71
[  599.873528][ T5765] usb 4-1: kill pending tx urbs.
[  599.944348][  T122] usb usb10-port1: unable to enumerate USB device
[  600.410728][ T5625] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  600.410814][ T5625] Bluetooth: hci0: Injecting HCI hardware error event
[  600.426430][ T5625] Bluetooth: hci0: hardware error 0x00
[  601.000082][   T10] usb 4-1: USB disconnect, device number 28
[  601.252768][T18984] netlink: 'syz.1.4333': attribute type 4 has an invalid length.
[  601.254463][T18984] netlink: 'syz.1.4333': attribute type 4 has an invalid length.
[  601.476102][T18996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  602.494513][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  602.835061][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4351'.
[  602.979748][T19057] fuse: fd is not a fuse device
[  603.891683][T19086] fuse: fd is not a fuse device
[  604.077380][T19095] binder: 19094:19095 ioctl c0306201 200000000b80 returned -22
[  604.200760][   T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  604.322764][T19102] jffs2: notice: (19102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  604.361448][T19102] jffs2: warning: (19102) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60
[  604.371394][   T10] usb 10-1: Using ep0 maxpacket: 8
[  604.389716][   T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  604.404030][   T10] usb 10-1: config 0 has an invalid interface number: 186 but max is 0
[  604.404081][   T10] usb 10-1: config 0 has no interface number 0
[  604.404153][   T10] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  604.404235][   T10] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  604.404352][   T10] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  604.404425][   T10] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  604.404497][   T10] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  604.410530][T19102] jffs2: warning: (19102) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=48
[  604.437882][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.437943][   T10] usb 10-1: Product: syz
[  604.437981][   T10] usb 10-1: Manufacturer: syz
[  604.438018][   T10] usb 10-1: SerialNumber: syz
[  604.475220][   T10] usb 10-1: config 0 descriptor??
[  604.602899][   T30] audit: type=1326 audit(1787590349.672:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.602967][   T30] audit: type=1326 audit(1787590349.672:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.605525][   T30] audit: type=1326 audit(1787590349.672:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.605701][   T30] audit: type=1326 audit(1787590349.672:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.628804][   T30] audit: type=1326 audit(1787590349.702:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.629049][   T30] audit: type=1326 audit(1787590349.702:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.630539][   T30] audit: type=1326 audit(1787590349.702:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.631233][   T30] audit: type=1326 audit(1787590349.702:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.631398][   T30] audit: type=1326 audit(1787590349.702:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.737802][   T30] audit: type=1326 audit(1787590349.802:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.3.4366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd913d9e0d9 code=0x7ffc0000
[  604.871371][   T10] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  605.062358][T19119] fuse: fd is not a fuse device
[  605.279384][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888055ef6800: rx timeout, send abort
[  605.337820][T19128] fuse: fd is not a fuse device
[  605.539102][T19136] fuse: fd is not a fuse device
[  605.779544][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888055ef6800: abort rx timeout. Force session deactivation
[  607.050964][  T122] usb 10-1: USB disconnect, device number 37
[  607.050991][    C0] iowarrior 10-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19
[  607.529540][T19191] binder: 19189:19191 unknown command 0
[  607.535878][T19191] binder: 19189:19191 ioctl c0306201 2000000001c0 returned -22
[  608.253918][T19220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4390'.
[  608.257151][T19220] unsupported nlmsg_type 40
[  608.560025][T19229] fuse: fd is not a fuse device
[  609.490680][   T25] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  609.642764][   T25] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  609.652864][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.652900][   T25] usb 10-1: Product: syz
[  609.652915][   T25] usb 10-1: Manufacturer: syz
[  609.652941][   T25] usb 10-1: SerialNumber: syz
[  610.109685][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  610.109766][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  611.673366][T19294] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4421'.
[  611.728419][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  611.728512][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  611.762435][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  611.784334][   T25] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  611.800365][   T25] usb 10-1: USB disconnect, device number 38
[  611.829009][T19300] futex_wake_op: syz.1.4422 tries to shift op by 144; fix this program
[  612.500102][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4426'.
[  612.666909][T19316] netlink: 'syz.3.4429': attribute type 1 has an invalid length.
[  612.667006][T19316] netlink: 'syz.3.4429': attribute type 2 has an invalid length.
[  612.680032][ T4933] Bluetooth: hci5: hardware error 0x09
[  612.916587][ T5625] Bluetooth: hci5: Unknown advertising packet type: 0x14
[  613.969309][T19358] overlayfs: failed to clone upperpath
[  614.628418][T19376] fuse: fd is not a fuse device
[  614.750223][T19378] netlink: 'syz.1.4453': attribute type 4 has an invalid length.
[  614.805435][T19378] netlink: 'syz.1.4453': attribute type 4 has an invalid length.
[  614.817949][ T4933] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  615.460756][  T122] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  615.612921][  T122] usb 10-1: Using ep0 maxpacket: 8
[  615.618575][  T122] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  615.630033][  T122] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.630087][  T122] usb 10-1: Product: syz
[  615.630102][  T122] usb 10-1: Manufacturer: syz
[  615.630129][  T122] usb 10-1: SerialNumber: syz
[  615.657156][  T122] usb 10-1: config 0 descriptor??
[  615.666138][  T122] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  616.057682][T19420] overlayfs: failed to clone upperpath
[  616.179625][T19424] overlayfs: failed to clone upperpath
[  618.058077][T19459] fuse: fd is not a fuse device
[  618.095265][  T122] gspca_sonixj: reg_w1 err -71
[  618.130942][  T122] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[  618.143743][  T122] usb 10-1: USB disconnect, device number 39
[  618.247369][T19463] overlayfs: upper fs does not support tmpfile.
[  618.358804][T19469] overlayfs: failed to clone upperpath
[  619.079494][T19493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4494'.
[  619.132183][ T9093] IPVS: starting estimator thread 0...
[  619.220714][T19495] IPVS: using max 33 ests per chain, 79200 per kthread
[  619.387861][T19504] fuse: fd is not a fuse device
[  619.587632][T19510] fuse: fd is not a fuse device
[  619.745180][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4507'.
[  619.759213][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'.
[  619.811061][ T5765] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[  619.970952][ T5765] usb 10-1: Using ep0 maxpacket: 32
[  619.972803][ T5765] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  619.976394][ T5765] usb 10-1: config 0 has an invalid interface number: 196 but max is 0
[  619.976459][ T5765] usb 10-1: config 0 has no interface number 0
[  619.976580][ T5765] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  619.976655][ T5765] usb 10-1: config 0 interface 196 has no altsetting 0
[  620.003454][ T5765] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.003514][ T5765] usb 10-1: Product: syz
[  620.003550][ T5765] usb 10-1: Manufacturer: syz
[  620.003586][ T5765] usb 10-1: SerialNumber: syz
[  620.023850][ T5765] usb 10-1: config 0 descriptor??
[  620.026735][T19507] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  620.850614][ T5765] ipheth 10-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  620.865505][ T5765] ipheth 10-1:0.196: Apple iPhone USB Ethernet device attached
[  622.845260][  T122] usb 10-1: USB disconnect, device number 40
[  623.016312][  T122] ipheth 10-1:0.196: Apple iPhone USB Ethernet now disconnected
[  623.210527][T19575] netlink: 'syz.9.4516': attribute type 4 has an invalid length.
[  623.264185][T19578] netlink: 'syz.9.4516': attribute type 4 has an invalid length.
[  624.433566][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  624.615503][T19613] fuse: fd is not a fuse device
[  624.730173][T19617] tipc: Failed to remove unknown binding: 66,0,0/4:935548604/935548606
[  624.730226][T19617] tipc: Failed to remove unknown binding: 66,0,0/4:935548604/935548605
[  624.757741][T19617] tipc: Failed to remove unknown binding: 66,0,0/4:935548604/935548606
[  624.766149][T19617] tipc: Failed to remove unknown binding: 66,0,0/4:935548604/935548605
[  625.285706][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4537'.
[  625.337830][T19639] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4008af00, magic af != 6b]
[  625.454898][   T30] kauditd_printk_skb: 77 callbacks suppressed
[  625.455023][   T30] audit: type=1326 audit(1787590370.522:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.9.4532" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1aa5d9e0d9 code=0x0
[  626.296674][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4538'.
[  626.296729][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4538'.
[  626.711448][T19708] netlink: 'syz.9.4544': attribute type 10 has an invalid length.
[  627.239604][T19716] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4549'.
[  627.307867][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4549'.
[  628.010433][T19747] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4563'.
[  628.026833][T19747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  628.351152][ T5694] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  628.382288][T19767] fuse: fd is not a fuse device
[  628.500679][ T5694] usb 10-1: Using ep0 maxpacket: 16
[  628.503753][ T5694] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  628.507366][ T5694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.527478][ T5694] usb 10-1: config 0 descriptor??
[  628.547326][ T5694] gspca_main: sonixj-2.14.0 probing 0471:0327
[  628.925962][T19780] fuse: fd is not a fuse device
[  629.159242][T19782] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4577'.
[  630.144166][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  630.155424][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  630.163960][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  630.179990][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  630.190475][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  630.796353][T19831] fuse: fd is not a fuse device
[  630.984636][ T5694] gspca_sonixj: reg_w1 err -71
[  630.984811][ T5694] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[  630.998560][ T5694] usb 10-1: USB disconnect, device number 41
[  631.008159][T19808] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.008439][T19808] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.008819][T19808] bridge_slave_0: entered allmulticast mode
[  631.028984][T19808] bridge_slave_0: entered promiscuous mode
[  631.039162][T19808] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.047308][T19808] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.047716][T19808] bridge_slave_1: entered allmulticast mode
[  631.079149][T19808] bridge_slave_1: entered promiscuous mode
[  631.166220][T19808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.178833][T19808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.222347][T19808] team0: Port device team_slave_0 added
[  631.230893][T19808] team0: Port device team_slave_1 added
[  631.267844][T19808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.274975][T19808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  631.302441][T19808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.317556][T19808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.322508][T19808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  631.322600][T19808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.418141][T19808] hsr_slave_0: entered promiscuous mode
[  631.425709][T19808] hsr_slave_1: entered promiscuous mode
[  631.432206][T19808] debugfs: 'hsr0' already exists in 'hsr'
[  631.438058][T19808] Cannot create hsr debugfs directory
[  631.667681][T19860] kvm [19858]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[  631.868901][T19855] fuse: fd is not a fuse device
[  632.028291][T19869] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  632.260823][ T4933] Bluetooth: hci4: command tx timeout
[  632.303613][T19878] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  632.576630][T19891] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  632.898484][T19808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  632.914090][T19808] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  632.918430][T19808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  632.963886][T19808] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  632.978379][T19808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  633.010113][T19808] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  633.022612][T19808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  633.049322][T19808] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  633.333234][T19924] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4611'.
[  633.343984][T19808] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.356674][T19924] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4611'.
[  633.368086][T19924] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4611'.
[  633.422824][T19808] 8021q: adding VLAN 0 to HW filter on device team0
[  633.448825][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.448918][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.480417][T19929] binder: 19928:19929 ioctl c0306201 200000000440 returned -14
[  633.545770][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.546009][ T9090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.103539][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'.
[  634.332175][ T4933] Bluetooth: hci4: command tx timeout
[  635.045860][T19808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.164222][T19808] veth0_vlan: entered promiscuous mode
[  635.189518][T19808] veth1_vlan: entered promiscuous mode
[  635.241702][T19808] veth0_macvtap: entered promiscuous mode
[  635.253330][T19808] veth1_macvtap: entered promiscuous mode
[  635.276928][T19808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.293934][T19808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.357435][ T5694] usb 10-1: new full-speed USB device number 42 using dummy_hcd
[  635.382355][ T9090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  635.390466][ T9093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  635.439207][ T9093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  635.439259][ T9093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  635.543801][ T5694] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  635.554466][ T5694] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.554504][ T5694] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  635.554540][ T5694] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  635.554567][ T5694] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  635.554588][ T5694] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  635.559964][ T5694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  635.560040][ T5694] usb 10-1: SerialNumber: syz
[  635.574973][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.575040][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.797183][ T9211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.805576][ T9211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.156600][ T5694] usb 10-1: USB disconnect, device number 42
[  636.411657][ T4933] Bluetooth: hci4: command tx timeout
[  638.491309][ T4933] Bluetooth: hci4: command tx timeout
[  638.603476][T20083] netlink: 'syz.1.4645': attribute type 4 has an invalid length.
[  638.631510][  T122] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  638.800669][  T122] usb 10-1: Using ep0 maxpacket: 16
[  638.806634][  T122] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  638.818621][  T122] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  638.827563][  T122] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.827611][  T122] usb 10-1: config 0 has no interface number 0
[  638.875256][  T122] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.925704][  T122] usb 10-1: config 0 descriptor??
[  640.209021][T20129] overlayfs: failed to clone upperpath
[  640.269499][T20131] fuse: fd is not a fuse device
[  641.445987][ T5765] usb 10-1: USB disconnect, device number 43
[  641.914819][T20208] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  642.588205][T20235] netlink: 'syz.5.4679': attribute type 25 has an invalid length.
[  643.550164][T20273] x_tables: duplicate entry at hook 1
[  643.617864][T20276] netlink: 'syz.1.4688': attribute type 4 has an invalid length.
[  644.651744][  T191] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  644.801383][  T191] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  644.804334][  T191] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  644.804416][  T191] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  644.804482][  T191] usb 10-1: config 220 has no interface number 2
[  644.804611][  T191] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  644.804674][  T191] usb 10-1: config 220 interface 0 has no altsetting 0
[  644.804700][  T191] usb 10-1: config 220 interface 76 has no altsetting 0
[  644.804744][  T191] usb 10-1: config 220 interface 1 has no altsetting 0
[  644.809652][  T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.809728][  T191] usb 10-1: Product: syz
[  644.809767][  T191] usb 10-1: Manufacturer: syz
[  644.809805][  T191] usb 10-1: SerialNumber: syz
[  645.070050][  T191] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  645.072334][  T191] uvcvideo 10-1:220.0: No valid video chain found.
[  645.072518][  T191] usb 10-1: selecting invalid altsetting 0
[  645.137051][  T191] usb 10-1: selecting invalid altsetting 0
[  645.137115][  T191] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  645.163496][  T191] usb 10-1: USB disconnect, device number 44
[  645.792840][ T9211] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  646.478261][T20336] fuse: fd is not a fuse device
[  646.655906][T20340] fuse: fd is not a fuse device
[  647.406640][T20361] fuse: fd is not a fuse device
[  648.269494][T20371] protocol 0000 is buggy, dev veth0_vlan
[  648.715721][T20325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  648.819960][T20375] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  648.914312][T20377] loop4: detected capacity change from 0 to 2640
[  648.925903][T20377] buffer_io_error: 14 callbacks suppressed
[  648.928848][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.928990][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929086][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929162][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929225][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929360][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929460][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.929537][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.930208][T20377] ldm_validate_partition_table(): Disk read failed.
[  648.930411][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.930501][T20377] Buffer I/O error on dev loop4, logical block 0, async page read
[  648.930941][T20377] Dev loop4: unable to read RDB block 0
[  648.932056][T20377]  loop4: unable to read partition table
[  648.934065][T20377] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  649.181333][T20381] 9p: Bad value for 'rfdno'
[  649.294926][T20386] netlink: 'syz.9.4727': attribute type 3 has an invalid length.
[  649.304166][T20386] netlink: 11575 bytes leftover after parsing attributes in process `syz.9.4727'.
[  649.434790][T20393] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4731'.
[  649.453420][T20393] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4731'.
[  649.480537][T20396] netlink: 'syz.9.4732': attribute type 2 has an invalid length.
[  649.480777][T20396] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4732'.
[  649.499325][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4732'.
[  649.539147][T20396] team0: Port device team_slave_1 removed
[  650.046062][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4733'.
[  650.399441][T20411] binder_alloc: 20410: pid 20410 spamming oneway? 1 buffers allocated for a total size of 4096
[  650.467489][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4737'.
[  650.924994][T20418] wlan0 speed is unknown, defaulting to 1000
[  650.937252][T20418] wlan0 speed is unknown, defaulting to 1000
[  650.948314][T20418] wlan0 speed is unknown, defaulting to 1000
[  650.961771][T20418] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  650.979976][T20418] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  650.997500][T20418] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  651.102520][T20418] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  651.134411][   T30] audit: type=1326 audit(1787590396.202:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20420 comm="syz.9.4740" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1aa5d9e0d9 code=0x0
[  651.179012][T20418] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  651.207087][T20426] kvm: emulating exchange as write
[  651.327674][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.336793][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.348051][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.360460][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.367089][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.373668][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.387596][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.396203][T20418] wlan0 speed is unknown, defaulting to 1000
[  651.556800][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'.
[  651.556839][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'.
[  652.045203][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4749'.
[  652.302451][T20467] fuse: fd is not a fuse device
[  652.411914][T20473] fuse: fd is not a fuse device
[  652.640744][   T25] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  652.801700][   T25] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  652.816903][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.816944][   T25] usb 10-1: Product: syz
[  652.816985][   T25] usb 10-1: Manufacturer: syz
[  652.817004][   T25] usb 10-1: SerialNumber: syz
[  653.267307][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  653.285772][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  653.925641][T20507] fuse: fd is not a fuse device
[  654.707078][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  654.719533][    C1] raw-gadget.0 gadget.9: ignoring, device is not running
[  654.727253][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  654.741320][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  654.753561][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  654.763624][   T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  654.786767][   T25] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  654.807324][   T25] usb 10-1: USB disconnect, device number 45
[  655.046237][   T30] audit: type=1326 audit(1787590400.112:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.5.4771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0a099e0d9 code=0x0
[  655.114245][T20515] ªªªªªª: renamed from vlan0 (while UP)
[  656.455809][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4780'.
[  656.752050][T20544] serio: Serial port ptm0
[  658.234089][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4795'.
[  659.543681][T20604] fuse: fd is not a fuse device
[  660.328177][T20627] binder: 20626:20627 ioctl c0306201 200000000080 returned -14
[  660.340239][T20627] binder: 20626:20627 ioctl c0306201 2000000003c0 returned -14
[  662.521500][T20665] fuse: fd is not a fuse device
[  663.368249][T20679] overlayfs: failed to clone upperpath
[  663.543747][T20683] Bluetooth: (null): Invalid header checksum
[  664.123182][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4832'.
[  664.787386][   T30] audit: type=1800 audit(1787590409.852:134): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4840" name="qw_sign" dev="configfs" ino=82093 res=0 errno=0
[  667.053050][T20789] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  668.686395][T20818] wlan0 speed is unknown, defaulting to 1000
[  668.915778][T20825] wlan0 speed is unknown, defaulting to 1000
[  670.425167][T20831] netlink: 'syz.5.4871': attribute type 10 has an invalid length.
[  670.435454][T20831] 8021q: adding VLAN 0 to HW filter on device team0
[  670.441330][T20831] bond0: (slave team0): Enslaving as an active interface with an up link
[  670.968799][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  670.994037][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  671.016778][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  671.028401][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  671.039173][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  671.597010][T20849] wlan0 speed is unknown, defaulting to 1000
[  672.014250][T20849] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.014520][T20849] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.014892][T20849] bridge_slave_0: entered allmulticast mode
[  672.019027][T20849] bridge_slave_0: entered promiscuous mode
[  672.031770][T20849] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.031946][T20849] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.032076][T20849] bridge_slave_1: entered allmulticast mode
[  672.035868][T20849] bridge_slave_1: entered promiscuous mode
[  672.095566][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.113436][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.176771][T20849] team0: Port device team_slave_0 added
[  672.191957][T20849] team0: Port device team_slave_1 added
[  672.243770][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.251384][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.251417][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.290345][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.297435][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.297465][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.394807][T20849] hsr_slave_0: entered promiscuous mode
[  672.397572][T20849] hsr_slave_1: entered promiscuous mode
[  672.399826][T20849] debugfs: 'hsr0' already exists in 'hsr'
[  672.399871][T20849] Cannot create hsr debugfs directory
[  672.667328][T20849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.874066][T20849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.966534][T20849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.999365][T20897] fuse: fd is not a fuse device
[  673.114776][T20849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.132036][ T5625] Bluetooth: hci6: command tx timeout
[  673.310121][T20849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  673.321832][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  673.324636][T20849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  673.340685][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  673.348762][T20849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  673.358109][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  673.367374][T20849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  673.377151][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  673.447002][T20849] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.471425][T20849] 8021q: adding VLAN 0 to HW filter on device team0
[  673.481337][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.481607][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.500453][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.503766][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  673.883912][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.002548][T20925] futex_wake_op: syz.5.4893 tries to shift op by 144; fix this program
[  674.190369][T20849] veth0_vlan: entered promiscuous mode
[  674.209009][T20849] veth1_vlan: entered promiscuous mode
[  674.249014][T20849] veth0_macvtap: entered promiscuous mode
[  674.266986][T20849] veth1_macvtap: entered promiscuous mode
[  674.292214][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  674.303769][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.387844][ T9095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.387907][ T9095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.387956][ T9095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.387993][ T9095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.479927][ T6934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.493186][ T6934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.543072][ T6934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.543132][ T6934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.852301][ T5765] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  675.001975][ T5765] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  675.005244][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  675.005557][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.005620][ T5765] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  675.005736][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.058568][ T5765] usb 5-1: config 0 descriptor??
[  675.211080][ T5625] Bluetooth: hci6: command tx timeout
[  675.508122][ T5765] hid-multitouch 0003:0457:07DA.0015: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  676.210158][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'.
[  676.272085][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'.
[  676.975288][T20975] fuse: fd is not a fuse device
[  677.292155][ T5625] Bluetooth: hci6: command tx timeout
[  677.637943][   T45] usb 5-1: USB disconnect, device number 23
[  677.759957][T20993] binder_alloc: 20991: binder_alloc_buf, no vma
[  678.065770][T21001] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4920'.
[  678.283099][T21005] tipc: Started in network mode
[  678.283141][T21005] tipc: Node identity 2000004, cluster identity 4711
[  678.283156][T21005] tipc: Node number set to 33554436
[  679.371681][ T5625] Bluetooth: hci6: command tx timeout
[  679.810135][T21039] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4933'.
[  679.870359][T21043] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  679.870407][T21043] overlayfs: failed to set xattr on upper
[  679.878962][T21043] overlayfs: ...falling back to redirect_dir=nofollow.
[  679.878995][T21043] overlayfs: ...falling back to index=off.
[  679.879020][T21043] overlayfs: ...falling back to uuid=null.
[  679.901240][T21043] overlayfs: failed to clone lowerpath
[  680.347894][T21056] overlayfs: failed to clone upperpath
[  680.398139][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.609007][T21070] sctp: [Deprecated]: syz.5.4943 (pid 21070) Use of struct sctp_assoc_value in delayed_ack socket option.
[  680.609007][T21070] Use struct sctp_sack_info instead
[  681.033481][T21077] netlink: 'syz.4.4945': attribute type 46 has an invalid length.
[  681.399304][T21088] fuse: fd is not a fuse device
[  681.446465][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888082e68000: rx timeout, send abort
[  681.536125][T21093] fuse: fd is not a fuse device
[  681.946560][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888082e68000: abort rx timeout. Force session deactivation
[  681.957152][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888082e67c00: rx timeout, send abort
[  682.089756][T21113] overlayfs: failed to clone upperpath
[  682.448120][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888082e67800: rx timeout, send abort
[  682.456848][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888082e67800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  682.457198][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888082e67c00: abort rx timeout. Force session deactivation
[  682.536473][T21125] fuse: fd is not a fuse device
[  682.890065][   T30] audit: type=1800 audit(1787590427.952:135): pid=21142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4973" name="file0" dev="overlay" ino=515 res=0 errno=0
[  684.857132][T21174] netlink: 'syz.5.4986': attribute type 15 has an invalid length.
[  684.857185][T21174] netlink: 11870 bytes leftover after parsing attributes in process `syz.5.4986'.
[  684.864379][T21174] netlink: 'syz.5.4986': attribute type 6 has an invalid length.
[  684.864431][T21174] netlink: 'syz.5.4986': attribute type 7 has an invalid length.
[  684.864470][T21174] netlink: 'syz.5.4986': attribute type 11 has an invalid length.
[  684.864511][T21174] netlink: 'syz.5.4986': attribute type 15 has an invalid length.
[  684.864541][T21174] netlink: 'syz.5.4986': attribute type 16 has an invalid length.
[  684.864573][T21174] netlink: 'syz.5.4986': attribute type 21 has an invalid length.
[  684.864612][T21174] netlink: 'syz.5.4986': attribute type 25 has an invalid length.
[  684.864644][T21174] netlink: 13906 bytes leftover after parsing attributes in process `syz.5.4986'.
[  685.854492][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  687.734842][T21199] serial 00:03: in use; can't configure
[  687.839689][T21201] create_pit_timer: 48 callbacks suppressed
[  687.840874][T21201] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  687.851245][T21201] kvm: requested 167619 ns i8254 timer period limited to 200000 ns
[  687.851815][T21201] kvm: requested 163428 ns i8254 timer period limited to 200000 ns
[  687.852353][T21201] kvm: requested 25980 ns i8254 timer period limited to 200000 ns
[  687.852939][T21201] kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[  687.858905][T21201] kvm: requested 175162 ns i8254 timer period limited to 200000 ns
[  687.860350][T21201] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  687.877608][T21201] kvm: requested 158400 ns i8254 timer period limited to 200000 ns
[  687.879327][T21201] kvm: requested 141638 ns i8254 timer period limited to 200000 ns
[  687.879861][T21201] kvm: requested 125714 ns i8254 timer period limited to 200000 ns
[  688.189636][T21215] fuse: fd is not a fuse device
[  688.219642][T21217] fuse: fd is not a fuse device
[  688.403327][T21227] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5008'.
[  688.421885][T21227] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.5008'.
[  688.466766][T21229] fuse: fd is not a fuse device
[  688.501138][T21231] fuse: fd is not a fuse device
[  691.288883][T21237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.209235][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  697.223574][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  697.239741][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  697.243569][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  697.244896][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  697.561492][T21268] wlan0 speed is unknown, defaulting to 1000
[  697.836851][T21268] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.837132][T21268] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.837475][T21268] bridge_slave_0: entered allmulticast mode
[  697.845241][T21268] bridge_slave_0: entered promiscuous mode
[  697.852629][T21268] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.853063][T21268] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.853456][T21268] bridge_slave_1: entered allmulticast mode
[  697.856844][T21268] bridge_slave_1: entered promiscuous mode
[  697.927944][T21268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  697.941075][T21268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.971575][T21268] team0: Port device team_slave_0 added
[  697.978236][T21268] team0: Port device team_slave_1 added
[  698.004582][T21268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  698.004629][T21268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.004655][T21268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  698.013037][T21268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  698.013051][T21268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.013077][T21268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.118067][T21268] hsr_slave_0: entered promiscuous mode
[  698.121873][T21268] hsr_slave_1: entered promiscuous mode
[  698.123806][T21268] debugfs: 'hsr0' already exists in 'hsr'
[  698.123827][T21268] Cannot create hsr debugfs directory
[  698.914559][T21268] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  698.925548][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  698.935010][T21268] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  698.946333][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  698.955186][T21268] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  698.969274][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  698.983020][T21268] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  698.993557][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  699.095133][T21268] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.116001][T21268] 8021q: adding VLAN 0 to HW filter on device team0
[  699.134546][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.134782][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.164254][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.164376][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.380880][ T4933] Bluetooth: hci7: command tx timeout
[  699.703623][T21268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.027700][T21268] veth0_vlan: entered promiscuous mode
[  700.039927][T21268] veth1_vlan: entered promiscuous mode
[  700.094678][T21268] veth0_macvtap: entered promiscuous mode
[  700.107355][T21268] veth1_macvtap: entered promiscuous mode
[  700.129400][T21268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.152987][T21268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.233778][ T6934] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.234103][ T6934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.234160][ T6934] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.251966][ T6926] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.305349][ T9089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.305394][ T9089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.394438][ T9089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.394490][ T9089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.544674][T21358] fuse: fd is not a fuse device
[  700.602122][T21361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  700.748240][ T5707] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  700.912833][ T5707] usb 7-1: unable to get BOS descriptor or descriptor too short
[  700.912910][ T5707] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  700.932902][ T5707] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  700.932949][ T5707] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  700.956051][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.956078][ T5707] usb 7-1: Product: syz
[  700.956092][ T5707] usb 7-1: Manufacturer: syz
[  700.956106][ T5707] usb 7-1: SerialNumber: syz
[  701.002101][ T5707] usb 7-1: selecting invalid altsetting 1
[  701.004225][ T5707] usb 7-1: unit 6 not found!
[  701.233699][ T5707] usb 7-1: 2:0: failed to get current value for ch 0 (-32)
[  701.310351][T21381] fuse: fd is not a fuse device
[  701.491504][ T4933] Bluetooth: hci7: command tx timeout
[  701.556462][ T5707] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  701.611781][ T5707] usb 7-1: USB disconnect, device number 4
[  701.744463][T21263] udevd[21263]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  702.477657][T21408] fuse: fd is not a fuse device
[  702.482999][  T122] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  702.636884][T21420] fuse: fd is not a fuse device
[  702.644183][  T122] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  702.665510][  T122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.665563][  T122] usb 7-1: Product: syz
[  702.665595][  T122] usb 7-1: Manufacturer: syz
[  702.665613][  T122] usb 7-1: SerialNumber: syz
[  702.690408][  T122] usb 7-1: config 0 descriptor??
[  702.918029][  T122] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  703.530671][ T4933] Bluetooth: hci7: command tx timeout
[  703.574123][T21453] fuse: fd is not a fuse device
[  704.342571][  T122] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  704.356268][  T122] usb 7-1: USB disconnect, device number 5
[  704.369177][T21263] udevd[21263]: setting mode of /dev/bus/usb/007/005 to 020664 failed: No such file or directory
[  704.369455][T21263] udevd[21263]: setting owner of /dev/bus/usb/007/005 to uid=0, gid=0 failed: No such file or directory
[  705.261430][T21519] overlayfs: failed to clone upperpath
[  705.560908][  T122] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  705.611128][ T4933] Bluetooth: hci7: command tx timeout
[  705.723685][  T122] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  705.740041][  T122] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  705.762275][  T122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  705.770515][  T122] usb 7-1: Product: syz
[  705.775533][  T122] usb 7-1: Manufacturer: syz
[  705.780281][  T122] usb 7-1: SerialNumber: syz
[  706.004415][  T122] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  706.265330][ T5707] usb 7-1: USB disconnect, device number 6
[  706.276933][ T5707] usblp0: removed
[  709.041339][  T191] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  709.191473][  T191] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  709.197656][  T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.197719][  T191] usb 7-1: Product: syz
[  709.197757][  T191] usb 7-1: Manufacturer: syz
[  709.197795][  T191] usb 7-1: SerialNumber: syz
[  709.644386][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  709.644465][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  710.607499][T21615] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  710.864329][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  711.078154][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  711.079923][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  711.080024][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  711.123479][  T191] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  711.138262][  T191] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  711.151226][  T191] usb 7-1: USB disconnect, device number 7
[  711.616215][T21627] kvm: pic: single mode not supported
[  711.616487][T21627] kvm: pic: single mode not supported
[  711.625048][T21627] kvm: pic: single mode not supported
[  711.631851][T21627] kvm: pic: level sensitive irq not supported
[  711.638131][T21627] kvm: pic: level sensitive irq not supported
[  711.638915][T21627] kvm: pic: single mode not supported
[  711.642583][T21627] kvm: pic: single mode not supported
[  711.646678][T21627] kvm: pic: single mode not supported
[  711.849370][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'.
[  711.864700][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'.
[  712.064267][T21644] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  713.789630][T21689] fuse: fd is not a fuse device
[  715.689389][T21757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  717.408949][T21802] fuse: fd is not a fuse device
[  718.411471][ T4933] Bluetooth: hci7: command tx timeout
[  718.597774][T21819] fuse: fd is not a fuse device
[  719.368639][T21836] fuse: fd is not a fuse device
[  719.819902][ T4933] Bluetooth: hci7: Invalid connection link type handle 0x00c8
[  720.126182][T21862] fuse: fd is not a fuse device
[  720.888568][T21883] jffs2: notice: (21883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  721.029591][T21887] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  721.231797][T21895] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  721.247309][T21895] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5187'.
[  721.261440][T21895] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  721.480811][  T122] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  721.642132][  T122] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  721.652131][  T122] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  721.652183][  T122] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  721.652206][  T122] usb 7-1: config 220 has no interface number 2
[  721.652400][  T122] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  721.652488][  T122] usb 7-1: config 220 interface 0 has no altsetting 0
[  721.652540][  T122] usb 7-1: config 220 interface 76 has no altsetting 0
[  721.652592][  T122] usb 7-1: config 220 interface 1 has no altsetting 0
[  721.669845][  T122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.669910][  T122] usb 7-1: Product: syz
[  721.669943][  T122] usb 7-1: Manufacturer: syz
[  721.669973][  T122] usb 7-1: SerialNumber: syz
[  721.914241][  T122] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  721.914301][  T122] uvcvideo 7-1:220.0: No valid video chain found.
[  721.914517][  T122] usb 7-1: selecting invalid altsetting 0
[  721.947491][  T122] usb 7-1: selecting invalid altsetting 0
[  721.947550][  T122] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  721.998522][  T122] usb 7-1: USB disconnect, device number 8
[  723.120897][  T191] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  723.271437][  T191] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  723.281840][  T191] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  723.281950][  T191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.282047][  T191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.282128][  T191] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  723.282242][  T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.312520][  T191] usb 7-1: config 0 descriptor??
[  723.820474][T21917] jffs2: notice: (21917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  723.838223][  T191] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd
[  723.889024][  T191] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  723.982065][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.998180][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.158223][  T191] usb 7-1: USB disconnect, device number 9
[  725.060694][  T122] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  725.222977][  T122] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  725.233906][  T122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.245647][  T122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.260701][  T122] usb 7-1: config 0 descriptor??
[  725.487769][  T122] usbhid 7-1:0.0: can't add hid device: -71
[  725.487877][  T122] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  725.506711][  T122] usb 7-1: USB disconnect, device number 10
[  725.515459][T21941] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  725.684659][T21945] fuse: fd is not a fuse device
[  725.950746][  T122] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  726.102352][  T122] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  726.113126][  T122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.113199][  T122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.135317][  T122] usb 7-1: config 0 descriptor??
[  726.329346][T21954] tipc: Enabled bearer <udp:syz2>, priority 10
[  726.348745][T21954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5203'.
[  726.359730][T21954] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  726.370840][T21954] tipc: Enabled bearer <udp:syz0>, priority 10
[  726.951765][  T122] aiptek 7-1:0.0: Aiptek using 400 ms programming speed
[  726.963380][  T122] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input39
[  727.285146][  T122] usb 7-1: USB disconnect, device number 11
[  727.285322][    C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  727.876034][T21965] fuse: fd is not a fuse device
[  727.879486][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'.
[  728.230719][  T191] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  728.329195][T21971] fuse: fd is not a fuse device
[  728.380923][  T191] usb 7-1: Using ep0 maxpacket: 32
[  728.388394][  T191] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  728.400826][  T191] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  728.409321][  T191] usb 7-1: config 0 has no interface number 0
[  728.416899][  T191] usb 7-1: config 0 interface 12 has no altsetting 0
[  728.428998][  T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.429035][  T191] usb 7-1: Product: syz
[  728.429062][  T191] usb 7-1: Manufacturer: syz
[  728.429079][  T191] usb 7-1: SerialNumber: syz
[  728.458167][  T191] usb 7-1: config 0 descriptor??
[  728.907798][   T30] audit: type=1804 audit(1787590473.972:136): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5217" name="/newroot/148/file1" dev="fuse" ino=1 res=1 errno=0
[  728.931779][   T30] audit: type=1800 audit(1787590474.002:137): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5217" name="/" dev="fuse" ino=1 res=0 errno=0
[  730.547396][  T191] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  730.547617][  T191] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  730.547709][  T191] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  730.547958][  T191] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  730.587812][  T191] usb 7-1: USB disconnect, device number 12
[  731.157690][T21988] tipc: Started in network mode
[  731.157747][T21988] tipc: Node identity 7f000001, cluster identity 4711
[  731.172921][T21988] tipc: Enabled bearer <udp:syz2>, priority 10
[  731.207376][T21988] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5220'.
[  731.226589][T21988] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  731.255697][T21988] tipc: Enabled bearer <udp:syz0>, priority 10
[  732.270639][T13134] tipc: Node number set to 2130706433
[  732.373046][   T45] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  732.545516][   T45] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  732.558462][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.567305][   T45] usb 7-1: Product: syz
[  732.567325][   T45] usb 7-1: Manufacturer: syz
[  732.567339][   T45] usb 7-1: SerialNumber: syz
[  732.586467][   T45] usb 7-1: config 0 descriptor??
[  732.822062][   T45] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  732.844115][T22024] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  732.860100][T22024] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5237'.
[  732.877070][T22024] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  734.267491][   T45] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  734.284205][   T45] usb 7-1: USB disconnect, device number 13
[  735.084732][T22047] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  735.084753][T22047] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  735.095064][T22047] vhci_hcd vhci_hcd.0: Device attached
[  735.111154][T22048] vhci_hcd: connection closed
[  735.116350][ T6933] vhci_hcd vhci_hcd.6: stop threads
[  735.116388][ T6933] vhci_hcd vhci_hcd.6: release socket
[  735.116408][ T6933] vhci_hcd vhci_hcd.6: disconnect device
[  735.920841][   T45] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  736.081118][   T45] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  736.089396][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.089468][   T45] usb 7-1: Product: syz
[  736.089520][   T45] usb 7-1: Manufacturer: syz
[  736.089571][   T45] usb 7-1: SerialNumber: syz
[  736.122334][   T45] usb 7-1: config 0 descriptor??
[  736.129684][   T45] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  736.490102][   T30] audit: type=1326 audit(1787590481.552:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22069 comm="syz.5.5252" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0a099e0d9 code=0x0
[  738.347074][   T45] gspca_stk1135: reg_w 0x2ff err -71
[  738.348176][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348206][   T45] gspca_stk1135: Sensor write failed
[  738.348278][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348303][   T45] gspca_stk1135: Sensor write failed
[  738.348377][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348397][   T45] gspca_stk1135: Sensor read failed
[  738.348466][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348486][   T45] gspca_stk1135: Sensor read failed
[  738.348503][   T45] gspca_stk1135: Detected sensor type unknown (0x0)
[  738.348595][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348849][   T45] gspca_stk1135: Sensor read failed
[  738.348951][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.348982][   T45] gspca_stk1135: Sensor read failed
[  738.349055][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.349074][   T45] gspca_stk1135: Sensor write failed
[  738.349139][   T45] gspca_stk1135: serial bus timeout: status=0x00
[  738.349165][   T45] gspca_stk1135: Sensor write failed
[  738.349331][   T45] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  738.393953][   T45] usb 7-1: USB disconnect, device number 14
[  739.085433][T22083] gadgetfs: bound to dummy_udc driver
[  739.269716][T22090] CIFS: Attempting to mount //127.0.0.1/share
[  739.320809][T13134] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  739.321103][    C0] gadgetfs: connected
[  739.330145][T13134] gadgetfs: disconnected
[  739.419073][T22081] gadgetfs: suspended from state 2
[  739.680724][T13134] usb 2-1: device not accepting address 4, error -71
[  739.990629][ T5765] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  740.043727][T22090] CIFS: VFS: Error connecting to socket. Aborting operation.
[  740.043822][T22090] CIFS: VFS: cifs_mount failed w/return code = -4
[  740.167955][ T5765] usb 7-1: Using ep0 maxpacket: 8
[  740.433742][ T5765] usb 7-1: unable to get BOS descriptor or descriptor too short
[  740.433806][ T5765] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  740.435254][ T5765] usb 7-1: unable to read config index 0 descriptor/start: -71
[  740.435338][ T5765] usb 7-1: can't read configurations, error -71
[  740.502564][   T30] audit: type=1326 audit(1787590485.572:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.2.5266" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaa459e0d9 code=0x0
[  740.554861][   T30] audit: type=1326 audit(1787590485.622:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.2.5266" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7faaa459e0d9 code=0x0
[  742.276595][T22134] gadgetfs: bound to dummy_udc driver
[  742.520643][ T5721] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  742.528371][    C1] gadgetfs: connected
[  742.528680][ T5721] gadgetfs: disconnected
[  742.602694][T22132] gadgetfs: suspended from state 2
[  742.741369][T22147] fuse: fd is not a fuse device
[  742.873011][ T5721] usb 2-1: device not accepting address 6, error -71
[  742.953127][T22159] fuse: fd is not a fuse device
[  743.500665][   T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  743.650605][   T25] usb 7-1: Using ep0 maxpacket: 8
[  743.656506][   T25] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  743.670398][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.680305][   T25] usb 7-1: Product: syz
[  743.680377][   T25] usb 7-1: Manufacturer: syz
[  743.680399][   T25] usb 7-1: SerialNumber: syz
[  743.700880][   T25] usb 7-1: config 0 descriptor??
[  743.917836][   T25] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  744.748046][   T25] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  744.758609][   T25] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  744.760014][   T25] usb 7-1: media controller created
[  744.786205][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  744.835389][   T25] i2c i2c-1: Added multiplexed i2c bus 2
[  744.835434][   T25] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  744.838531][   T25] usb 7-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  744.854008][   T25] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  744.895265][   T25] DVB: Unable to find symbol mxl5005s_attach()
[  744.976148][   T25] usb 7-1: USB disconnect, device number 17
[  745.750360][T22196] jffs2: notice: (22196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  745.935973][T22201] orangefs: client-core tried to read wrong size
[  747.295939][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  747.395740][ T9089] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.487909][ T9089] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.553518][ T9089] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.720184][ T9089] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.745981][T22232] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  747.793452][T22235] fuse: fd is not a fuse device
[  747.990391][ T9089] bridge_slave_1: left allmulticast mode
[  747.990438][ T9089] bridge_slave_1: left promiscuous mode
[  747.997262][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.015789][ T9089] bridge_slave_0: left allmulticast mode
[  748.015833][ T9089] bridge_slave_0: left promiscuous mode
[  748.016474][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.278791][ T9089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.295042][ T9089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.299348][ T9089] bond0 (unregistering): Released all slaves
[  748.387470][ T9089] tipc: Left network mode
[  748.577002][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  748.619098][ T9089] hsr_slave_0: left promiscuous mode
[  748.627833][ T9089] hsr_slave_1: left promiscuous mode
[  748.628654][ T9089] batman_adv: batadv0: Removing interface: batadv_slave_0
[  748.642354][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  748.649854][ T9089] batman_adv: batadv0: Removing interface: batadv_slave_1
[  748.672552][ T9089] veth1_macvtap: left promiscuous mode
[  748.678257][ T9089] veth0_macvtap: left promiscuous mode
[  748.683978][ T9089] veth1_vlan: left promiscuous mode
[  748.689411][ T9089] veth0_vlan: left promiscuous mode
[  749.025092][ T9089] team0 (unregistering): Port device team_slave_1 removed
[  749.048689][ T9089] team0 (unregistering): Port device team_slave_0 removed
[  749.248869][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  749.739362][T22279] orangefs: client-core tried to read wrong size
[  750.269110][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3
[  750.732858][T22317] fuse: fd is not a fuse device
[  751.445891][T22341] fuse: fd is not a fuse device
[  751.479724][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4
[  753.314653][T22382] jffs2: notice: (22382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  753.439202][  T191] libceph: connect (1)127.0.0.1:6789 error -22
[  753.439388][  T191] libceph: mon0 (1)127.0.0.1:6789 connect error
[  753.459071][  T191] libceph: connect (2)127.0.0.1:6789 error -22
[  753.459234][  T191] libceph: ceph_tcp_connect failed: -22
[  753.459267][  T191] libceph: mon0 (2)127.0.0.1:6789 connect error
[  753.484886][ T5721] libceph: connect (2)127.0.0.1:6789 error -22
[  753.485025][ T5721] libceph: ceph_tcp_connect failed: -22
[  753.485041][ T5721] libceph: mon0 (2)127.0.0.1:6789 connect error
[  753.690902][ T6318] libceph: connect (1)127.0.0.1:6789 error -22
[  753.691328][ T6318] libceph: mon0 (1)127.0.0.1:6789 connect error
[  753.711642][ T6318] libceph: connect (2)127.0.0.1:6789 error -22
[  753.712082][ T6318] libceph: ceph_tcp_connect failed: -22
[  753.712131][ T6318] libceph: mon0 (2)127.0.0.1:6789 connect error
[  753.740865][   T25] libceph: connect (2)127.0.0.1:6789 error -22
[  753.748021][   T25] libceph: ceph_tcp_connect failed: -22
[  753.753875][   T25] libceph: mon0 (2)127.0.0.1:6789 connect error
[  753.857995][T22399] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  753.864900][T22399] tipc: Bearer <eth:dummy0>: already 2 bearers with priority 10
[  753.864944][T22399] tipc: Bearer <eth:dummy0>: trying with adjusted priority
[  753.865836][T22399] tipc: Enabled bearer <eth:dummy0>, priority 9
[  753.875027][T22399] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  754.211625][ T5765] libceph: connect (1)127.0.0.1:6789 error -22
[  754.212095][ T5765] libceph: mon0 (1)127.0.0.1:6789 connect error
[  754.231168][ T5765] libceph: connect (2)127.0.0.1:6789 error -22
[  754.231549][ T5765] libceph: ceph_tcp_connect failed: -22
[  754.231596][ T5765] libceph: mon0 (2)127.0.0.1:6789 connect error
[  754.238738][T22389] ceph: No mds server is up or the cluster is laggy
[  754.245375][T22385] ceph: No mds server is up or the cluster is laggy
[  754.260326][T22386] ceph: No mds server is up or the cluster is laggy
[  754.272941][   T25] libceph: connect (2)127.0.0.1:6789 error -22
[  754.273120][   T25] libceph: ceph_tcp_connect failed: -22
[  754.273153][   T25] libceph: mon0 (2)127.0.0.1:6789 connect error
[  754.492246][T22370] Bluetooth: hci4: command 0x0406 tx timeout
[  756.529209][T22410] openvswitch: netlink: Missing key (keys=40, expected=100)
[  756.736358][T22418] MTD: Couldn't look up './dev/mtdblock0': -2
[  756.980695][ T5721] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  757.131075][ T5721] usb 7-1: Using ep0 maxpacket: 16
[  757.133026][ T5721] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  757.135877][ T5721] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  757.135934][ T5721] usb 7-1: config 0 has no interface number 0
[  757.136176][ T5721] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  757.136256][ T5721] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  757.142724][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.142794][ T5721] usb 7-1: Product: syz
[  757.142838][ T5721] usb 7-1: Manufacturer: syz
[  757.142893][ T5721] usb 7-1: SerialNumber: syz
[  757.167001][ T5721] usb 7-1: config 0 descriptor??
[  757.172193][T22420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  757.172336][T22420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  757.379169][T22420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  757.379369][T22420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  757.587840][ T5721] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  757.849057][T22438] openvswitch: netlink: Missing key (keys=40, expected=100)
[  757.921120][T22440] wlan0 speed is unknown, defaulting to 1000
[  759.613635][ T5721] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  759.614117][ T5721] asix 7-1:0.34: probe with driver asix failed with error -71
[  759.624438][ T5721] usb 7-1: USB disconnect, device number 18
[  760.278363][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5364'.
[  760.410752][ T5721] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  760.562152][ T5721] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  760.580428][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.580467][ T5721] usb 7-1: Product: syz
[  760.580851][ T5721] usb 7-1: Manufacturer: syz
[  760.580900][ T5721] usb 7-1: SerialNumber: syz
[  760.740710][ T5721] usb 7-1: reset high-speed USB device number 19 using dummy_hcd
[  760.945306][ T5721] usb 7-1: unsupported firmware.
[  762.012084][ T5721] usb 7-1: kill pending tx urbs.
[  762.159229][T22506] fuse: fd is not a fuse device
[  762.453485][T22521] jffs2: notice: (22521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  763.199588][ T5694] usb 7-1: USB disconnect, device number 19
[  763.263053][   T30] audit: type=1326 audit(1787590508.322:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.263133][   T30] audit: type=1326 audit(1787590508.332:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.263545][   T30] audit: type=1326 audit(1787590508.332:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.263695][   T30] audit: type=1326 audit(1787590508.332:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.263821][   T30] audit: type=1326 audit(1787590508.332:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.263948][   T30] audit: type=1326 audit(1787590508.332:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.264076][   T30] audit: type=1326 audit(1787590508.332:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.264200][   T30] audit: type=1326 audit(1787590508.332:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.264320][   T30] audit: type=1326 audit(1787590508.332:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  763.264469][   T30] audit: type=1326 audit(1787590508.332:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22543 comm="syz.1.5380" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc82d39e0d9 code=0x7ffc0000
[  764.752876][T22595] kvm: pic: non byte write
[  766.213881][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'.
[  766.213939][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'.
[  766.232528][   T25] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  766.332450][T22648] fuse: fd is not a fuse device
[  766.390886][   T25] usb 7-1: Using ep0 maxpacket: 8
[  766.392406][   T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  766.395051][   T25] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[  766.395123][   T25] usb 7-1: config 0 has no interface number 0
[  766.395214][   T25] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  766.395287][   T25] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  766.395368][   T25] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  766.395440][   T25] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  766.395513][   T25] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  766.401806][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.401882][   T25] usb 7-1: Product: syz
[  766.401925][   T25] usb 7-1: Manufacturer: syz
[  766.401966][   T25] usb 7-1: SerialNumber: syz
[  766.421978][   T25] usb 7-1: config 0 descriptor??
[  766.560176][T22650] fuse: fd is not a fuse device
[  766.631836][T22654] fuse: fd is not a fuse device
[  766.663274][   T25] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  767.811101][   T25] usb 7-1: USB disconnect, device number 20
[  767.811238][    C0] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19
[  769.413046][T22704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5429'.
[  769.550084][T22706] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5431'.
[  769.688548][T22714] netlink: 'syz.5.5433': attribute type 1 has an invalid length.
[  769.688596][T22714] netlink: 'syz.5.5433': attribute type 2 has an invalid length.
[  769.991242][T22723] fuse: fd is not a fuse device
[  770.615087][T22734] fuse: fd is not a fuse device
[  770.855328][T22745] wlan0 speed is unknown, defaulting to 1000
[  772.278506][T22773] netlink: 'syz.6.5455': attribute type 4 has an invalid length.
[  772.327039][T22773] netlink: 'syz.6.5455': attribute type 4 has an invalid length.
[  772.796094][T22787] r8a66597_hcd serial8250: platform_get_resource error.
[  773.286087][T22797] overlayfs: upper fs does not support tmpfile.
[  773.533024][   T31] INFO: task syz.3.4459:19389 blocked for more than 143 seconds.
[  773.533068][   T31]       Tainted: G             L      syzkaller #0
[  773.533094][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  773.533138][   T31] task:syz.3.4459      state:D stack:26520 pid:19389 tgid:19386 ppid:15248  task_flags:0x400140 flags:0x00080002
[  773.533354][   T31] Call Trace:
[  773.533454][   T31]  <TASK>
[  773.533535][   T31]  __schedule+0x17d4/0x5820
[  773.533849][   T31]  ? __lock_acquire+0x6df/0x2e50
[  773.534081][   T31]  ? __pfx___schedule+0x10/0x10
[  773.534147][   T31]  ? lock_acquire+0x115/0x350
[  773.534246][   T31]  ? schedule+0x90/0x2b0
[  773.534495][   T31]  schedule+0x164/0x2b0
[  773.534584][   T31]  cgroup_lock_and_drain_offline+0x51a/0x650
[  773.534738][   T31]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[  773.534810][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  773.534869][   T31]  ? bpf_lsm_capable+0x9/0x20
[  773.534949][   T31]  ? security_capable+0x7e/0x2c0
[  773.535153][   T31]  cgroup1_get_tree+0x9d/0x890
[  773.535210][   T31]  ? apparmor_capable+0x126/0x170
[  773.535296][   T31]  ? bpf_lsm_capable+0x9/0x20
[  773.535371][   T31]  vfs_get_tree+0x92/0x2a0
[  773.535472][   T31]  do_new_mount+0x319/0xdc0
[  773.535560][   T31]  ? __pfx_do_new_mount+0x10/0x10
[  773.535631][   T31]  ? ns_capable+0x89/0xe0
[  773.535723][   T31]  ? path_mount+0x647/0x1050
[  773.535786][   T31]  ? user_path_at+0xd4/0x160
[  773.535843][   T31]  __se_sys_mount+0x31d/0x420
[  773.536032][   T31]  ? __pfx___se_sys_mount+0x10/0x10
[  773.536117][   T31]  ? __x64_sys_mount+0x20/0xc0
[  773.536180][   T31]  do_syscall_64+0x166/0x520
[  773.536246][   T31]  ? trace_irq_disable+0x3b/0x140
[  773.536339][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.536418][   T31]  ? clear_bhb_loop+0x70/0xc0
[  773.536486][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.536535][   T31] RIP: 0033:0x7fd913d9e0d9
[  773.536610][   T31] RSP: 002b:00007fd914c49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  773.536700][   T31] RAX: ffffffffffffffda RBX: 00007fd914025fa0 RCX: 00007fd913d9e0d9
[  773.536740][   T31] RDX: 0000200000000cc0 RSI: 0000200000000c80 RDI: 0000000000000000
[  773.536777][   T31] RBP: 00007fd913e35024 R08: 0000200000000d00 R09: 0000000000000000
[  773.536808][   T31] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  773.536834][   T31] R13: 00007fd914026038 R14: 00007fd914025fa0 R15: 00007fffe1afccb8
[  773.536923][   T31]  </TASK>
[  773.537058][   T31] 
[  773.537058][   T31] Showing all locks held in the system:
[  773.537087][   T31] locks held by pr/ttyS0/16: 2, last CPU#0:
[  773.537173][   T31]  #0: ffffffff8ee362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  773.537469][   T31]  #1: ffffffff9af811b8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  773.537742][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  773.537782][   T31]  #0: ffffffff8ef5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  773.538001][   T31] locks held by getty/5373: 2, on CPU#0:
[  773.538040][   T31]  #0: ffff888030ef50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  773.538232][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  773.538473][   T31] locks held by syz.9.4774/20523: 3, on CPU#1:
[  773.538511][   T31]  #0: ffff8880787722b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  773.538655][   T31]  #1: ffff888035142460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  773.538819][   T31]  #2: ffff88803459f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  773.538987][   T31] locks held by syz.4.4956/21096: 3, on CPU#0:
[  773.539018][   T31]  #0: ffff8880679940f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  773.539140][   T31]  #1: ffff888035142460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  773.539282][   T31]  #2: ffff888082e66080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  773.539414][   T31] locks held by syz.6.5465/22802: 1, last CPU#1:
[  773.539453][   T31]  #0: ffffffff8ef5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  773.539600][   T31] 
[  773.539617][   T31] =============================================
[  773.539617][   T31] 
[  773.539666][   T31] NMI backtrace for cpu 1
[  773.539710][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  773.539769][   T31] Tainted: [L]=SOFTLOCKUP
[  773.539788][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  773.539816][   T31] Call Trace:
[  773.539829][   T31]  <TASK>
[  773.539842][   T31]  dump_stack_lvl+0xe8/0x150
[  773.539907][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  773.540009][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  773.540076][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  773.540149][   T31]  sys_info+0x135/0x170
[  773.540216][   T31]  watchdog+0xfd7/0x1030
[  773.540295][   T31]  ? watchdog+0x1c7/0x1030
[  773.540423][   T31]  kthread+0x38b/0x480
[  773.540526][   T31]  ? __pfx_watchdog+0x10/0x10
[  773.540588][   T31]  ? __pfx_kthread+0x10/0x10
[  773.540682][   T31]  ret_from_fork+0x514/0xb70
[  773.540775][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  773.540829][   T31]  ? __switch_to+0xc89/0x1420
[  773.540946][   T31]  ? __pfx_kthread+0x10/0x10
[  773.540975][   T31]  ret_from_fork_asm+0x1a/0x30
[  773.541013][   T31]  </TASK>
[  773.541285][   T31] Sending NMI from CPU 1 to CPUs 0:
[  773.541344][    C0] NMI backtrace for cpu 0
[  773.541360][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  773.541381][    C0] Tainted: [L]=SOFTLOCKUP
[  773.541387][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  773.541397][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  773.541424][    C0] Code: e8 de 1d 4c fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 11 bc fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  773.541478][    C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  773.541493][    C0] RAX: 1ffffffff35f0200 RBX: 00000000000003fd RCX: 0000000000000000
[  773.541503][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  773.541513][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  773.541524][    C0] R10: dffffc0000000000 R11: ffffffff857bb870 R12: dffffc0000000000
[  773.541536][    C0] R13: 0000000000000000 R14: ffffffff9af811e0 R15: 0000000000000000
[  773.541547][    C0] FS:  0000000000000000(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000
[  773.541560][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  773.541571][    C0] CR2: 0000001b2da1bff8 CR3: 0000000040028000 CR4: 00000000003526f0
[  773.541595][    C0] Call Trace:
[  773.541602][    C0]  <TASK>
[  773.541609][    C0]  wait_for_lsr+0x184/0x2f0
[  773.541656][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  773.541722][    C0]  serial8250_console_write+0xaa1/0x1200
[  773.541754][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  773.541780][    C0]  ? __schedule+0x17ea/0x5820
[  773.541817][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  773.541868][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  773.541900][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  773.541936][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  773.542005][    C0]  nbcon_kthread_func+0x679/0x880
[  773.542035][    C0]  ? nbcon_kthread_func+0x163/0x880
[  773.542062][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  773.542094][    C0]  ? __kthread_parkme+0x71/0x1f0
[  773.542118][    C0]  ? __kthread_parkme+0x199/0x1f0
[  773.542144][    C0]  kthread+0x38b/0x480
[  773.542170][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  773.542196][    C0]  ? __pfx_kthread+0x10/0x10
[  773.542223][    C0]  ret_from_fork+0x514/0xb70
[  773.542249][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  773.542275][    C0]  ? __switch_to+0xc89/0x1420
[  773.542298][    C0]  ? __pfx_kthread+0x10/0x10
[  773.542324][    C0]  ret_from_fork_asm+0x1a/0x30
[  773.542359][    C0]  </TASK>
[  773.556249][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  774.307149][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  774.317861][   T31] Tainted: [L]=SOFTLOCKUP
[  774.322206][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  774.332288][   T31] Call Trace:
[  774.335592][   T31]  <TASK>
[  774.338537][   T31]  vpanic+0x56d/0xa60
[  774.342553][   T31]  ? __pfx___schedule+0x10/0x10
[  774.347446][   T31]  ? __pfx_vpanic+0x10/0x10
[  774.351992][   T31]  panic+0xc5/0xd0
[  774.355761][   T31]  ? __pfx_panic+0x10/0x10
[  774.360216][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  774.365721][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  774.371153][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  774.377340][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  774.383525][   T31]  watchdog+0x1030/0x1030
[  774.387903][   T31]  ? watchdog+0x1c7/0x1030
[  774.392360][   T31]  kthread+0x38b/0x480
[  774.396467][   T31]  ? __pfx_watchdog+0x10/0x10
[  774.401192][   T31]  ? __pfx_kthread+0x10/0x10
[  774.405825][   T31]  ret_from_fork+0x514/0xb70
[  774.410453][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  774.415595][   T31]  ? __switch_to+0xc89/0x1420
[  774.420296][   T31]  ? __pfx_kthread+0x10/0x10
[  774.424957][   T31]  ret_from_fork_asm+0x1a/0x30
[  774.429764][   T31]  </TASK>
[  774.433428][   T31] Kernel Offset: disabled
[  774.437768][   T31] Rebooting in 86400 seconds..