last executing test programs:

18.850997787s ago: executing program 2 (id=107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$vga_arbiter(r2, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb)
setpriority(0x1, 0x0, 0x80000000)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
write(r4, 0x0, 0x0)
futex_waitv(&(0x7f0000000a40)=[{0xfc, &(0x7f0000000080)=0x100000001, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x6, 0x186}, {0x3736, &(0x7f0000000540)=0x5, 0x2}, {0xa6, &(0x7f0000000580)=0x5, 0x2}, {0x7, &(0x7f00000005c0)=0x3, 0x2}, {0xb38, &(0x7f0000000640)=0x101, 0x82}, {0x7, &(0x7f0000000680)=0x8000, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x2}, {0x1000, &(0x7f0000000700)=0x2, 0x82}, {0x2, &(0x7f0000000740)=0x100, 0x2}, {0x33c0000000000000, &(0x7f0000000780)=0xa6, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x6, &(0x7f0000000800)=0x2, 0x2}, {0x5, &(0x7f0000000880)=0x7, 0x2}, {0x7000000000000, &(0x7f00000008c0)=0xfffffffffffffff7, 0x2}, {0x200, &(0x7f0000000900)=0x52, 0x82}, {0x0, &(0x7f0000000940)=0x6b, 0x82}, {0x94, &(0x7f0000000980)=0x2d328a0f, 0x82}, {0xfffffffffffffffe, &(0x7f00000009c0)=0xb385, 0x82}, {0x6, &(0x7f0000000a00)=0x8, 0x82}], 0x14, 0x0, 0x0, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)

16.92812647s ago: executing program 1 (id=112):
r0 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})

16.173019426s ago: executing program 2 (id=113):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x1}, 0x0)
write(r0, &(0x7f0000000900), 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$BLKTRACESETUP(r6, 0x80186803, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_open_procfs$userns(r2, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

14.268007475s ago: executing program 3 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)

14.201433304s ago: executing program 2 (id=116):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x7f, 0x20, 0x2})

13.15058855s ago: executing program 3 (id=117):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
listen(0xffffffffffffffff, 0x0)
r5 = syz_usbip_server_init(0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20)
write$usbip_server(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46ee6c5456902a3cfafbc39b7eff6e4f0b77a82deb80000"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0xffff0000, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

13.040967778s ago: executing program 1 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
poll(&(0x7f0000000140)=[{r7, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)

10.451228464s ago: executing program 0 (id=119):
mkdir(&(0x7f0000000700)='./file0\x00', 0x117)
syz_emit_ethernet(0x1c0, &(0x7f0000000740)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "6bda99", 0x182, 0x21, 0xff, @remote, @private1, {[@routing={0x33, 0x6, 0x1, 0xbe, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @routing={0x2, 0x4, 0x0, 0x3, 0x0, [@remote, @mcast1]}, @srh={0x6, 0x14, 0x4, 0xa, 0x0, 0x0, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @empty, @mcast2, @mcast2, @private1, @mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x0, 0x9, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x4, 0x19, "dbe8fce92c64c2dfa6a8056574b37f9fd5af0c84c7098f20fb"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x15}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xb, 0x0, 0x0, 0x7, 0x1, "887770", 0xe8, "1a3284"}, "9f90407aabc043198123d88224f8d8400d5f"}}}}}}, 0x0)
mount$9p_virtio(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x4f, &(0x7f0000001000)={'trans=virtio,', {[{@noxattr}]}})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x4, 0x0)
openat(r3, &(0x7f0000000340)='./file0\x00', 0x200000, 0x171)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x4)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
utimes(&(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setuid(0xee01)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})

9.058539229s ago: executing program 2 (id=120):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1410, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x146c)
read$char_usb(r1, 0x0, 0xb3)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r6 = socket(0x1e, 0x1, 0x0)
connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a)
recvmmsg$unix(r6, &(0x7f00000021c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000440)=""/10, 0xa}, {0x0}], 0x6}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)=""/238, 0xee}], 0x5, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}], 0x3c}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/180, 0xb4}, {&(0x7f0000000d40)}], 0x2, &(0x7f0000000dc0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/178, 0xb2}, {&(0x7f0000000f40)=""/255, 0xff}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/128, 0x80}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/22, 0x16}], 0x7}}], 0x4, 0x40012021, 0x0)
fcntl$addseals(r7, 0x409, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

8.973304814s ago: executing program 0 (id=121):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804)
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write(r7, &(0x7f0000000240)="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", 0x17e)

8.880239487s ago: executing program 1 (id=122):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
sendmmsg$sock(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d0d38cd6", 0x4}], 0x1, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x80000001}}], 0x14}}], 0x1, 0x20000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f00000000c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x3c}}, 0x0)
r7 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_INPUT(r7, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xdf9, &(0x7f00000000c0)})
lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f00000000c0)=0xb0, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x82)
ioctl$VIDIOC_CROPCAP(r10, 0xc02c563a, &(0x7f00000000c0)={0x9, {0x6, 0x86a, 0x8, 0x2}, {0x60000000, 0x800, 0x8, 0x8}, {0x4, 0x200}})

8.494716834s ago: executing program 1 (id=123):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x3e, <r5=>r3, 0x2})
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x549903)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r8, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r9, &(0x7f0000000200), 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)
mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

6.21379983s ago: executing program 0 (id=124):
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, <r1=>0x0})
ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000600)={&(0x7f0000000500)})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r2, {0xfffff5d4}}, './file0\x00'})
ioctl$TIOCSTI(r4, 0x5412, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000006000000"], 0x60}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="5500000020007fafb73ea30e1d5fa124c6a305a356812d13b2a4a2719302000000030b43026c26040000000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100fbe4e583de0dd7d83104000000fda542e718f94b929ade02dc2d9f5aa55782ee58", 0x55}], 0x200000000000008c}, 0x20048000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

6.160258535s ago: executing program 1 (id=125):
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000003780)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x9, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x81, 0x4)
syz_ublk_setup_io_uring(0x1022, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x2, 0x1db}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0))
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}, {0x0}], 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000240)="0000000000000002", 0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r4, r5)
sendto$inet6(r5, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)

5.962537631s ago: executing program 3 (id=126):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0)
mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil)
getsockname$packet(r6, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x1, 0xe0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, 0x0, 0x24000000)

5.067434651s ago: executing program 0 (id=127):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)

3.638241048s ago: executing program 2 (id=128):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}})
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}})
r8 = semget$private(0x0, 0x2, 0x10)
semctl$SETVAL(r8, 0x1, 0x8, 0x0)
semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200))
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096)
ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0})
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})

3.519214521s ago: executing program 0 (id=129):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)={0x5, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x4, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0)
read(r5, &(0x7f0000000500), 0x400)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3.403237075s ago: executing program 1 (id=130):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040))
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x5555555555553bb, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x200400}}]})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c0001000400"], 0x114}], 0x1, 0x0, 0x0, 0x20044080}, 0x4000000)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
write(r7, &(0x7f0000000140)='1\x00', 0x1)
openat(r7, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188)

3.108286822s ago: executing program 3 (id=131):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x55}, 0x5d1}], 0x1, 0x4002, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sendfile(r2, r6, 0x0, 0x20000023896)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
socket$inet(0x2, 0x2, 0x20000006)
r8 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

1.81840095s ago: executing program 2 (id=132):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x10, 0x2, 0x35e}, &(0x7f0000000740)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x58, 0x180800)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x1c6}], 0x1, 0x0, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0xff00, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000010010000004"], 0x48)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_80211_inject_frame(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x305)
get_mempolicy(&(0x7f00000005c0), 0x0, 0x10001, &(0x7f0000fff000/0x1000)=nil, 0x0)

1.673623529s ago: executing program 0 (id=133):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r2, r2, 0x0, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
write$binfmt_script(r0, &(0x7f0000000440)={'#! ', 'dir0/tracing_on/file0', [], 0xa, "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"}, 0xfd7)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0x5)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000080))
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
read$FUSE(r6, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905", @ANYRES16, @ANYRESHEX], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r7, 0x541b, 0x0)

1.441905699s ago: executing program 3 (id=134):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xb00)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)

0s ago: executing program 3 (id=135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5000000}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45)
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4)
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x2}}, 0x1c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfffffffffffffd46)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfe}}}, 0x1e)
connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e)
r7 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="d7aa0008000000000000000000000000e36490813fd113323b55e666c14f95dc343a46120f37bf33678cf3b781b3a2680ef6d228f5b0ebfcab7db96892cacef769dae5962a98", 0x46}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="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", 0x1c8}, {&(0x7f0000000280)="ad7819e403068856bc8ead459fd6fae9a612f74c36f68b7be5a7c3701c0cea5c79cf8576d255f5d2ea0527af47f03cfbae06dc47800061e626fce8e717b02f82505ae5142ce53ee7ce960a465a5fe8d2649170738b", 0x55}], 0x4, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r8)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
unshare(0x22020400)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)
sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df53349", 0x4}], 0x1, 0x0, 0x0, 0x9080}, 0x885)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0xf4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe0, 0x1, [@m_ife={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0xf}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46221' (ED25519) to the list of known hosts.
[   45.326966][ T5729] cgroup: Unknown subsys name 'net'
[   45.485169][ T5729] cgroup: Unknown subsys name 'cpuset'
[   45.498536][ T5729] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   47.911209][ T5729] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.126137][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.133284][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.134294][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.134733][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.135530][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.136502][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.174674][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.179045][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.182027][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.182444][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.183413][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.183942][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.192535][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.230974][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.235232][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.238078][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.258012][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.262046][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.287376][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.288907][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.780168][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.781337][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.781465][ T5751] bridge_slave_0: entered allmulticast mode
[   61.786299][ T5751] bridge_slave_0: entered promiscuous mode
[   61.790790][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.790962][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.791068][ T5751] bridge_slave_1: entered allmulticast mode
[   61.792420][ T5751] bridge_slave_1: entered promiscuous mode
[   62.046036][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.080537][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.128015][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.128101][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.128219][ T5747] bridge_slave_0: entered allmulticast mode
[   62.130156][ T5747] bridge_slave_0: entered promiscuous mode
[   62.133430][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.133547][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.133650][ T5747] bridge_slave_1: entered allmulticast mode
[   62.134969][ T5747] bridge_slave_1: entered promiscuous mode
[   62.256817][ T5755] Bluetooth: hci1: command tx timeout
[   62.310933][ T5755] Bluetooth: hci2: command tx timeout
[   62.317292][ T5755] Bluetooth: hci0: command tx timeout
[   62.416777][ T5755] Bluetooth: hci3: command tx timeout
[   62.448551][ T5751] team0: Port device team_slave_0 added
[   62.455519][ T5751] team0: Port device team_slave_1 added
[   62.482965][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.498587][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.498743][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.498862][ T5752] bridge_slave_0: entered allmulticast mode
[   62.501036][ T5752] bridge_slave_0: entered promiscuous mode
[   62.503723][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.503793][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.503893][ T5752] bridge_slave_1: entered allmulticast mode
[   62.505591][ T5752] bridge_slave_1: entered promiscuous mode
[   62.548735][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.615359][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.615380][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.615405][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.656345][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.656362][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.656381][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.670614][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.672524][ T5747] team0: Port device team_slave_0 added
[   62.686622][ T5747] team0: Port device team_slave_1 added
[   62.721728][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.721841][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.721933][ T5757] bridge_slave_0: entered allmulticast mode
[   62.722988][ T5757] bridge_slave_0: entered promiscuous mode
[   62.725952][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.726011][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.726095][ T5757] bridge_slave_1: entered allmulticast mode
[   62.727804][ T5757] bridge_slave_1: entered promiscuous mode
[   62.741678][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.769047][ T5752] team0: Port device team_slave_0 added
[   62.772100][ T5752] team0: Port device team_slave_1 added
[   62.860775][ T5751] hsr_slave_0: entered promiscuous mode
[   62.861930][ T5751] hsr_slave_1: entered promiscuous mode
[   62.882287][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.882973][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.882986][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.883006][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.887049][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.900597][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.900616][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.900638][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.921914][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.921930][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.921949][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.922931][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.922943][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.922963][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.007154][ T5757] team0: Port device team_slave_0 added
[   63.023286][ T5757] team0: Port device team_slave_1 added
[   63.120718][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.120734][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.120756][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.155414][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.155432][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.155520][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.172137][ T5747] hsr_slave_0: entered promiscuous mode
[   63.172895][ T5747] hsr_slave_1: entered promiscuous mode
[   63.173568][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[   63.173658][ T5747] Cannot create hsr debugfs directory
[   63.285558][ T5752] hsr_slave_0: entered promiscuous mode
[   63.286500][ T5752] hsr_slave_1: entered promiscuous mode
[   63.287178][ T5752] debugfs: 'hsr0' already exists in 'hsr'
[   63.287198][ T5752] Cannot create hsr debugfs directory
[   63.425171][ T5757] hsr_slave_0: entered promiscuous mode
[   63.426976][ T5757] hsr_slave_1: entered promiscuous mode
[   63.427616][ T5757] debugfs: 'hsr0' already exists in 'hsr'
[   63.427634][ T5757] Cannot create hsr debugfs directory
[   63.865069][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.885575][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.886830][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.919133][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.959244][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.981684][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.039987][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.047135][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.286214][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.289529][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.316799][ T5755] Bluetooth: hci1: command tx timeout
[   64.317132][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.322107][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.322931][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.349837][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.369693][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.377522][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.409312][ T5755] Bluetooth: hci0: command tx timeout
[   64.409347][ T5755] Bluetooth: hci2: command tx timeout
[   64.476366][ T5753] Bluetooth: hci3: command tx timeout
[   64.516015][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.582651][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[   64.585304][ T5757] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.629732][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.630488][ T5757] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.643596][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.715089][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.715218][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.748919][ T5757] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.758225][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.827328][ T5757] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.831278][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.835705][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.835896][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.108236][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.116789][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.117572][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.155861][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.156918][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.176236][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.183100][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.187624][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.303805][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.429467][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[   65.474347][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.474431][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.551853][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.551942][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.636074][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.719262][ T5757] 8021q: adding VLAN 0 to HW filter on device team0
[   65.727576][  T730] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.727674][  T730] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.778141][  T730] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.778246][  T730] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.861530][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.988570][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.022423][ T5752] 8021q: adding VLAN 0 to HW filter on device team0
[   66.034528][  T730] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.034625][  T730] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.055774][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.055858][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.391529][ T5753] Bluetooth: hci1: command tx timeout
[   66.474447][ T5753] Bluetooth: hci2: command tx timeout
[   66.474483][ T5753] Bluetooth: hci0: command tx timeout
[   66.488798][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.556749][ T5755] Bluetooth: hci3: command tx timeout
[   66.564033][ T5751] veth0_vlan: entered promiscuous mode
[   66.638862][ T5751] veth1_vlan: entered promiscuous mode
[   66.715195][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.734065][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.843770][ T5751] veth0_macvtap: entered promiscuous mode
[   66.848757][ T5751] veth1_macvtap: entered promiscuous mode
[   66.925634][ T5747] veth0_vlan: entered promiscuous mode
[   66.930900][ T5757] veth0_vlan: entered promiscuous mode
[   66.984781][ T5747] veth1_vlan: entered promiscuous mode
[   67.003865][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.015810][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.019900][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.095517][ T5757] veth1_vlan: entered promiscuous mode
[   67.107652][ T5578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.107975][ T5578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.108033][ T5578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.108074][ T5578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.249236][ T5757] veth0_macvtap: entered promiscuous mode
[   67.285789][ T5757] veth1_macvtap: entered promiscuous mode
[   67.334579][  T730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.334599][  T730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.351911][ T5747] veth0_macvtap: entered promiscuous mode
[   67.355282][ T5747] veth1_macvtap: entered promiscuous mode
[   67.422051][ T5752] veth0_vlan: entered promiscuous mode
[   67.450125][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.455340][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.602647][ T5752] veth1_vlan: entered promiscuous mode
[   67.604884][ T5578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.835280][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.867424][  T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.867444][  T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.946495][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.947437][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.948005][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.962645][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.987491][ T5752] veth0_macvtap: entered promiscuous mode
[   67.998773][ T5752] veth1_macvtap: entered promiscuous mode
[   68.003123][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.003182][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.003224][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.003267][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.131233][ T5751] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.170308][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.180770][ T5751] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   68.201380][ T5751] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   68.219590][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.239580][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   68.303366][ T5751] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   68.366520][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.366905][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.367644][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.367893][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.384625][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.384645][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.422980][  T730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.423004][  T730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.508799][ T5755] Bluetooth: hci1: command tx timeout
[   68.573981][ T5755] Bluetooth: hci0: command tx timeout
[   68.574017][ T5755] Bluetooth: hci2: command tx timeout
[   68.593961][  T730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.593986][  T730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.667463][ T5753] Bluetooth: hci3: command tx timeout
[   68.685874][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.685892][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.766013][ T5898] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   68.808204][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.808225][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.081933][  T730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.081954][  T730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.523857][ T5905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   69.523887][ T5905] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   69.524783][ T5905] vhci_hcd vhci_hcd.0: Device attached
[   69.693647][ T5907] vhci_hcd: cannot find the pending unlink 3
[   69.772797][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056935c00: rx timeout, send abort
[   70.065911][ T5857] usb 44-1: SetAddress Request (2) to port 0
[   70.065968][ T5857] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   70.268846][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056935800: rx timeout, send abort
[   70.273612][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056935c00: abort rx timeout. Force session deactivation
[   70.638596][ T5915] FAULT_INJECTION: forcing a failure.
[   70.638596][ T5915] name fail_futex, interval 1, probability 0, space 0, times 1
[   70.638631][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) 
[   70.638653][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.638663][ T5915] Call Trace:
[   70.638670][ T5915]  <TASK>
[   70.638678][ T5915]  dump_stack_lvl+0x100/0x190
[   70.638709][ T5915]  should_fail_ex.cold+0x5/0xa
[   70.638731][ T5915]  get_futex_key+0x1d0/0x14f0
[   70.638760][ T5915]  ? __pfx_get_futex_key+0x10/0x10
[   70.638785][ T5915]  ? find_held_lock+0x2b/0x80
[   70.638803][ T5915]  ? futex_wake+0x4ea/0x5e0
[   70.638828][ T5915]  futex_wake+0xf4/0x5e0
[   70.638845][ T5915]  ? futex_wait+0x11e/0x370
[   70.638868][ T5915]  ? __pfx_futex_wake+0x10/0x10
[   70.638888][ T5915]  ? lock_acquire+0x1d1/0x380
[   70.638912][ T5915]  ? find_held_lock+0x2b/0x80
[   70.638929][ T5915]  ? __fget_files+0x215/0x3d0
[   70.638949][ T5915]  ? __fget_files+0x215/0x3d0
[   70.638970][ T5915]  do_futex+0x2b2/0x440
[   70.638988][ T5915]  ? __pfx_do_futex+0x10/0x10
[   70.639007][ T5915]  ? fdget+0x18b/0x210
[   70.639026][ T5915]  __ia32_sys_futex_time32+0x2f4/0x470
[   70.639046][ T5915]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[   70.639074][ T5915]  __do_fast_syscall_32+0x13a/0x8b0
[   70.639104][ T5915]  do_fast_syscall_32+0x32/0x70
[   70.639131][ T5915]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   70.639154][ T5915] RIP: 0023:0xf6feefec
[   70.639175][ T5915] Code: Unable to access opcode bytes at 0xf6feefc2.
[   70.639184][ T5915] RSP: 002b:00000000f539b5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[   70.639203][ T5915] RAX: ffffffffffffffda RBX: 00000000f73e50bc RCX: 0000000000000081
[   70.639215][ T5915] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[   70.639226][ T5915] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[   70.639236][ T5915] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   70.639246][ T5915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   70.639267][ T5915]  </TASK>
[   70.732051][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056936400: rx timeout, send abort
[   70.732319][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056936400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[   70.769458][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056935800: abort rx timeout. Force session deactivation
[   70.890990][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.891613][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.892035][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.924751][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.926727][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.927148][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.927503][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.927860][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.928209][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.928578][ T5920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   71.031075][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[   71.031138][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[   71.139227][ T5923] jffs2: notice: (5923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   71.276615][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   72.187142][ T5931] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   72.210909][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[   72.220982][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   72.692714][ T5907] vhci_hcd: connection reset by peer
[   72.695344][ T5824] vhci_hcd vhci_hcd.3: stop threads
[   72.695537][ T5824] vhci_hcd vhci_hcd.3: release socket
[   72.696133][ T5824] vhci_hcd vhci_hcd.3: disconnect device
[   73.100774][ T5939] Console: switching to colour dummy device 80x25
[   75.085786][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.725379][ T5857] usb 44-1: device descriptor read/8, error -110
[   76.267785][ T3272] cfg80211: failed to load regulatory.db
[   76.301983][ T5857] usb usb44-port1: attempt power cycle
[   76.396636][ T5941] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   76.469388][ T5941] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   76.469517][ T5941] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   76.469740][ T5941] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   76.501564][ T5941] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   76.501595][ T5941] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 30703 usecs
[   76.677509][ T5941] pci 0000:00:01.0: Adding to iommu group 1
[   76.687570][ T5941] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   76.687597][ T5941] pci 0000:00:01.0: vgaarb: bridge control possible
[   76.687612][ T5941] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   76.720878][ T5962] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET)
[   76.762462][ T5941] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   76.775484][ T5941] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   76.815066][ T5941] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   76.821445][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.909099][ T5941] [drm] Found bochs VGA, ID 0xb0c5.
[   76.909116][ T5941] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   76.926407][ T5941] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[   76.965474][ T5857] usb usb44-port1: unable to enumerate USB device
[   77.159251][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   77.243366][ T5970] jffs2: notice: (5970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   78.134383][ T5981] LUN: removable file: (no medium)
[   78.142780][ T5981] mass_storage.0/lun.0: unable to open backing file: fi
[   78.179720][ T5962] netlink: 'syz.3.11': attribute type 2 has an invalid length.
[   78.570354][ T5982] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   78.570382][ T5982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   78.570461][ T5982] vhci_hcd vhci_hcd.0: Device attached
[   78.881134][   T57] usb 40-1: SetAddress Request (2) to port 0
[   78.881195][   T57] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[   79.478284][ T5983] vhci_hcd: connection reset by peer
[   79.478613][ T5824] vhci_hcd vhci_hcd.1: stop threads
[   79.478637][ T5824] vhci_hcd vhci_hcd.1: release socket
[   79.478681][ T5824] vhci_hcd vhci_hcd.1: disconnect device
[   80.358443][ T5993] process 'syz.0.16' launched './file2' with NULL argv: empty string added
[   80.379700][ T5993] =======================================================
[   80.379700][ T5993] WARNING: The mand mount option has been deprecated and
[   80.379700][ T5993]          and is ignored by this kernel. Remove the mand
[   80.379700][ T5993]          option from the mount to silence this warning.
[   80.379700][ T5993] =======================================================
[   80.833959][ T6001] Zero length message leads to an empty skb
[   82.322937][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   82.473211][ T5857] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   82.473256][ T5857] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   82.475612][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.475654][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.475674][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.507375][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.507419][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.507440][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.529235][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.529278][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.529300][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.530201][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.530235][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.530256][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.540007][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.540069][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.540094][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.542964][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.543021][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.543048][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.544574][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.544635][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.544666][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.546141][ T5857] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.546195][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.546226][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.557004][ T5857] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   82.557034][ T5857] usb 6-1: Product: syz
[   82.557046][ T5857] usb 6-1: Manufacturer: syz
[   82.557058][ T5857] usb 6-1: SerialNumber: syz
[   82.620699][ T5857] usb 6-1: config 0 descriptor??
[   82.731744][ T5857] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[   83.674229][ T5857] usb 6-1: USB disconnect, device number 2
[   83.682401][ T5857] yurex 6-1:0.0: USB YUREX #0 now disconnected
[   83.998309][   T57] usb 40-1: device descriptor read/8, error -110
[   84.058987][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.060448][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.319780][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.331842][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.473494][   T57] usb usb40-port1: attempt power cycle
[   85.021373][ T6021] smc: net device vlan1 applied user defined pnetid SYZ2
[   85.023131][ T5578] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.023178][ T5578] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.023210][ T5578] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.023241][ T5578] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.104786][   T57] usb usb40-port1: unable to enumerate USB device
[   86.145436][ T6018] Process accounting resumed
[   87.081041][   T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.231959][   T35] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[   87.232614][   T35] usb 5-1: Dual-Role OTG device on HNP port
[   87.232880][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.293543][   T35] gspca_main: spca501-2.14.0 probing 0000:0000
[   87.297070][   T35] gspca_spca501: reg write: error -32
[   87.297084][   T35] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   87.297144][   T35] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[   88.834819][ T6065] bond1 (unregistering): Released all slaves
[   90.276845][ T6076] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.301965][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.303554][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.306163][ T6084] comedi comedi3: pcmda12: I/O base address or length out of range
[   90.312992][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.314664][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.328430][ T6082] Bluetooth: MGMT ver 1.23
[   91.213504][ T6091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[   91.269221][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'.
[   91.269296][ T6094] bridge_slave_1: left allmulticast mode
[   91.269317][ T6094] bridge_slave_1: left promiscuous mode
[   91.269520][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.418307][ T6094] bridge_slave_0: left allmulticast mode
[   91.418334][ T6094] bridge_slave_0: left promiscuous mode
[   91.418524][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.698226][ T5857] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   91.881860][ T5857] usb 8-1: Using ep0 maxpacket: 16
[   91.883464][ T5857] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   91.895521][ T5857] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.895599][ T5857] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   91.895619][ T5857] usb 8-1: config 0 interface 0 has no altsetting 0
[   91.895644][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.928219][ T5857] usb 8-1: config 0 descriptor??
[   91.942626][ T5857] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[   92.466048][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   92.632585][    T9] usb 7-1: Using ep0 maxpacket: 8
[   92.633411][    T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   92.635094][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.635114][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   92.635147][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   92.635168][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   92.635199][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.682615][    T9] hub 7-1:1.0: bad descriptor, ignoring hub
[   92.682639][    T9] hub 7-1:1.0: probe with driver hub failed with error -5
[   92.683110][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   92.683123][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   92.795310][    T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   92.795333][    T9] cdc_wdm 7-1:1.0: Unknown control protocol
[   94.334732][   T57] usb 8-1: USB disconnect, device number 2
[   94.437872][ T6122] null_blk: disk nullb1 created
[   94.856234][   T43] usb 7-1: USB disconnect, device number 2
[   95.225182][ T6119] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[   95.976481][ T6131] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   97.012893][ T6132] can0: slcan on ttyS3.
[   97.203259][ T6134] netlink: 'syz.3.40': attribute type 4 has an invalid length.
[   98.033799][ T6137] can0 (unregistered): slcan off ttyS3.
[   98.480166][ T6155] binder: 6154:6155 ioctl c0306201 0 returned -14
[   98.493487][ T6155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.46'.
[   98.989279][ T6156] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   99.117644][ T6156] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   99.117817][ T6156] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   99.118124][ T6156] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   99.119170][ T6156] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   99.185260][ T6156] pci 0000:00:01.0: Adding to iommu group 1
[   99.205113][ T6156] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   99.205135][ T6156] pci 0000:00:01.0: vgaarb: bridge control possible
[   99.205148][ T6156] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   99.246524][ T6161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   99.246556][ T6161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   99.246659][ T6161] vhci_hcd vhci_hcd.0: Device attached
[   99.351225][ T6156] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   99.361749][ T6156] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   99.376716][ T6156] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  100.062611][   T57] usb 42-1: SetAddress Request (2) to port 0
[  100.062982][   T57] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  100.175907][ T6156] [drm] Found bochs VGA, ID 0xb0c5.
[  100.175927][ T6156] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  100.180026][ T6156] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  100.371998][ T6162] vhci_hcd: connection reset by peer
[  100.372537][ T5824] vhci_hcd vhci_hcd.2: stop threads
[  100.372561][ T5824] vhci_hcd vhci_hcd.2: release socket
[  100.372676][ T5824] vhci_hcd vhci_hcd.2: disconnect device
[  101.100691][ T6176] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  101.100719][ T6176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  101.101475][ T6176] vhci_hcd vhci_hcd.0: Device attached
[  101.293780][   T63] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  101.360997][   T63] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  105.152581][   T57] usb 42-1: device descriptor read/8, error -110
[  105.304528][ T6177] vhci_hcd: connection reset by peer
[  105.309915][ T5824] vhci_hcd vhci_hcd.0: stop threads
[  105.309941][ T5824] vhci_hcd vhci_hcd.0: release socket
[  105.310032][ T5824] vhci_hcd vhci_hcd.0: disconnect device
[  105.727771][   T57] usb usb42-port1: attempt power cycle
[  106.034108][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.53'.
[  106.418096][ T6236] syz.1.53 (6236) used greatest stack depth: 19256 bytes left
[  106.419670][   T57] usb usb42-port1: unable to enumerate USB device
[  106.712684][   T63] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  110.667535][ T6260] CacheFiles: Failed to register: -95
[  110.711944][ T6259] AppArmor: change_hat: Invalid input 'š—files'
[  111.305082][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.305423][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.393044][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.396750][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.397102][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.778132][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.57'.
[  111.779025][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'.
[  111.780033][ T6251] cgroup: Invalid name
[  112.148374][ T6272] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  112.423775][ T6272] kAFS: No cell specified
[  115.341754][ T6286] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd3": -EINTR
[  118.534453][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.535196][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.101328][ T3272] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  119.321135][ T3272] usb 7-1: Using ep0 maxpacket: 8
[  119.322456][ T3272] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  119.385660][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'.
[  119.431546][ T5896] e1000 0000:00:06.0 eth0: Reset adapter
[  119.449042][ T3272] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  119.449073][ T3272] usb 7-1: config 179 has no interface number 0
[  119.449114][ T3272] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  119.449199][ T3272] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  119.449228][ T3272] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  119.449253][ T3272] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  119.449279][ T3272] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  119.449379][ T3272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.486102][ T6314] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  119.675841][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[  119.732119][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  119.842235][ T3272] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7
[  120.074592][   T25] usb 7-1: USB disconnect, device number 3
[  120.095275][    C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  120.095331][    C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  120.671684][ T6304] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  120.968231][   T57] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[  121.138640][ T5896] e1000 0000:00:06.0 eth0: Reset adapter
[  121.281433][ T5896] e1000 0000:00:06.0 eth0: Reset adapter
[  121.506766][ T6343] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  121.811466][ T5896] e1000 0000:00:06.0 eth0: Reset adapter
[  121.997307][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  122.176049][ T6353] qrtr: Invalid version 0
[  122.637160][ T6357] wlan0 speed is unknown, defaulting to 1000
[  122.637230][ T6357] wlan0 speed is unknown, defaulting to 1000
[  123.526635][ T6357] wlan0 speed is unknown, defaulting to 1000
[  123.605134][ T6357] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  123.605183][ T6357] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  123.605221][ T6357] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  123.698857][ T6357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.754977][ T6375] sctp_transport_update_pmtu: 48 callbacks suppressed
[  123.754999][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.755375][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.755784][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.756307][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.764568][ T6357] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  123.822030][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.822575][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.828797][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.829374][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.829872][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  123.830258][ T6375] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  124.285394][ T6357] wlan0 speed is unknown, defaulting to 1000
[  124.287593][ T6357] wlan0 speed is unknown, defaulting to 1000
[  124.345907][ T5837] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  124.918516][ T6357] wlan0 speed is unknown, defaulting to 1000
[  124.949430][ T6357] wlan0 speed is unknown, defaulting to 1000
[  125.637783][ T6398] binder_alloc: 6397: binder_alloc_buf, no vma
[  125.642825][ T6398] tmpfs: Unknown parameter 'grpquota_boc½#Teżąō’’’’’’_'
[  128.543611][ T6421] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  128.543636][ T6421] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  128.543712][ T6421] vhci_hcd vhci_hcd.0: Device attached
[  128.585755][ T6422] vhci_hcd: cannot find the pending unlink 3
[  128.892444][   T25] usb 42-1: SetAddress Request (6) to port 0
[  128.892500][   T25] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  128.996907][ T6429] sctp_transport_update_pmtu: 48 callbacks suppressed
[  128.996989][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.018410][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.019246][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.020072][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.113635][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.114509][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.115238][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.115905][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.116619][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.117272][ T6429] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  129.701529][ T6438] IPVS: ip_vs_add_dest(): server weight less than zero
[  130.031872][   T44] audit: type=1326 audit(1789175273.953:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  130.031920][   T44] audit: type=1326 audit(1789175273.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  130.091126][ T1159] IPVS: starting estimator thread 0...
[  130.300960][ T6443] IPVS: using max 25 ests per chain, 60000 per kthread
[  130.510975][ T5856] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  130.673192][ T5856] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  130.675032][ T5856] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  130.675064][ T5856] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  130.675092][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  130.675112][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  130.675131][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  130.675151][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  130.675171][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  130.675192][ T5856] usb 6-1: config 168 interface 0 has no altsetting 0
[  130.676254][ T5856] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  130.676280][ T5856] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  130.676310][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  130.676330][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  130.676348][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  130.676366][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  130.676384][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  130.676401][ T5856] usb 6-1: config 168 interface 0 has no altsetting 0
[  130.677379][ T5856] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  130.677407][ T5856] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  130.677435][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  130.677456][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  130.677476][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  130.677496][ T5856] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  130.677517][ T5856] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  130.677537][ T5856] usb 6-1: config 168 interface 0 has no altsetting 0
[  130.733929][ T5856] usb 6-1: string descriptor 0 read error: -22
[  130.734037][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.917765][ T5856] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  131.725541][ T6422] vhci_hcd: connection reset by peer
[  131.725958][   T12] vhci_hcd vhci_hcd.2: stop threads
[  131.725985][   T12] vhci_hcd vhci_hcd.2: release socket
[  131.726038][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  132.401493][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[  132.401658][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[  133.890236][    T9] usb 6-1: USB disconnect, device number 3
[  133.993942][   T25] usb 42-1: device descriptor read/8, error -110
[  134.391965][   T25] usb usb42-port1: attempt power cycle
[  134.953433][   T25] usb usb42-port1: unable to enumerate USB device
[  145.414988][ T5857] usb 5-1: USB disconnect, device number 2
[  146.501920][ T6533] input: syz0 as /devices/virtual/input/input8
[  146.720125][ T6543] mmap: syz.0.92 (6543) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  149.538207][ T6561] netlink: 96 bytes leftover after parsing attributes in process `syz.3.95'.
[  150.191711][ T6578] overlayfs: failed to resolve '/ile0': -2
[  150.208244][   T44] audit: type=1800 audit(1789175294.133:4): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.96" name="blkio.bfq.time_recursive" dev="tmpfs" ino=152 res=0 errno=0
[  150.247185][ T6572] netlink: 'syz.0.96': attribute type 8 has an invalid length.
[  150.247204][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[  150.252354][ T6572] bond0: entered promiscuous mode
[  150.252376][ T6572] bond_slave_0: entered promiscuous mode
[  150.252528][ T6572] bond_slave_1: entered promiscuous mode
[  150.256725][ T6572] gretap0: entered promiscuous mode
[  150.258892][ T6572] team0: entered promiscuous mode
[  150.258916][ T6572] team_slave_0: entered promiscuous mode
[  150.259103][ T6572] team_slave_1: entered promiscuous mode
[  150.464261][ T6572] hsr1: entered promiscuous mode
[  151.272859][ T6585] netlink: 'syz.2.99': attribute type 11 has an invalid length.
[  151.721243][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[  151.721472][ T6586] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  151.990007][ T6585] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  151.990036][ T6585] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  153.223463][ T6600] atomic_op ffff8880258909e0 conn xmit_atomic 0000000000000000
[  153.226053][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'.
[  153.226091][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'.
[  153.945121][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[  154.064268][ T6609] jffs2: notice: (6609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  154.720871][   T44] audit: type=1326 audit(1789175298.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.105" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0
[  157.663347][ T6629] gadgetfs: bound to dummy_udc driver
[  157.856259][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[  158.025519][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  158.036918][    C0] gadgetfs: connected
[  158.081663][    T9] gadgetfs: disconnected
[  158.116971][ T6633] hsr_slave_1 (unregistering): left promiscuous mode
[  158.305430][    C0] gadgetfs: connected
[  158.309897][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  158.312630][    T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  158.312667][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.315762][    C0] gadgetfs: configuration #1
[  159.188903][ T6634] gadgetfs: suspended from state 3
[  159.189010][ T6634] gadgetfs: disconnected
[  159.207258][  T854] usb 5-1: USB disconnect, device number 3
[  163.625933][ T5911] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  163.739867][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'.
[  163.868525][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  163.869958][ T5911] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  163.938066][ T6726] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  163.938097][ T6726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.938168][ T6726] vhci_hcd vhci_hcd.0: Device attached
[  163.962118][ T5911] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.962142][ T5911] usb 7-1: config 0 has no interfaces?
[  163.964057][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  163.964078][ T5911] usb 7-1: Product: syz
[  163.964091][ T5911] usb 7-1: Manufacturer: syz
[  163.964102][ T5911] usb 7-1: SerialNumber: syz
[  163.966287][ T5911] usb 7-1: config 0 descriptor??
[  164.185501][ T3272] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  165.955632][ T6740] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[  166.012257][ T6742] 9pnet_virtio: no channels available for device syz
[  166.252033][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.433098][ T6731] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[  166.437039][   T12] vhci_hcd vhci_hcd.3: stop threads
[  166.437059][   T12] vhci_hcd vhci_hcd.3: release socket
[  166.437101][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  166.452877][   T63] usb 7-1: USB disconnect, device number 4
[  166.826260][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'.
[  167.368087][ T6747] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[  167.390989][ T6747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.454164][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  167.665743][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  167.684538][    T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  167.684562][    T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  167.684578][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  167.684612][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  167.684632][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  167.686034][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  167.686054][    T9] usb 7-1: Product: syz
[  167.686066][    T9] usb 7-1: Manufacturer: syz
[  167.762303][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  167.762321][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  167.810614][    T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  167.813422][    T9] cdc_wdm 7-1:1.0: Unknown control protocol
[  168.595236][ T6762] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  169.288274][ T3272] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  169.488252][ T6767] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive'
[  169.707007][ T6755] xt_CT: No such helper "pptp"
[  171.706625][ T6784] tipc: Started in network mode
[  171.706750][ T6784] tipc: Node identity 0010000000000000002, cluster identity 1
[  171.755578][ T6784] Invalid ELF header magic: != ELF
[  171.797245][ T6784] overlayfs: overlapping lowerdir path
[  172.323448][    T9] usb 7-1: USB disconnect, device number 5
[  173.134174][ T6792] netlink: 'syz.1.130': attribute type 1 has an invalid length.
[  173.134196][ T6792] netlink: 244 bytes leftover after parsing attributes in process `syz.1.130'.
[  173.250548][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  173.281006][ T6792] e1000e 0000:00:02.0 eth1: removed PHC
[  173.427376][ T6796] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  173.854919][ T6792] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  174.879542][ T6817] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.273394][ T5837] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  175.438758][ T6811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.733804][ T5837] usb 5-1: Using ep0 maxpacket: 8
[  175.766518][ T5837] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  175.795769][ T5837] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  175.796018][ T5837] usb 5-1: config 0 has no interface number 0
[  175.796507][ T5837] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  175.796601][ T5837] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[  175.796708][ T5837] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  175.796910][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.859456][ T5837] usb 5-1: config 0 descriptor??
[  175.938025][ T5837] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  176.217892][    C2] ==================================================================
[  176.217910][    C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  176.218030][    C2] Read of size 1 at addr ffff88804b43e8e8 by task syz.0.133/6817
[  176.218045][    C2] 
[  176.218057][    C2] CPU: 2 UID: 0 PID: 6817 Comm: syz.0.133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.218083][    C2] Tainted: [L]=SOFTLOCKUP
[  176.218090][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.218101][    C2] Call Trace:
[  176.218107][    C2]  <IRQ>
[  176.218115][    C2]  dump_stack_lvl+0x100/0x190
[  176.218139][    C2]  print_report+0x13d/0x4b0
[  176.218168][    C2]  ? __virt_addr_valid+0x239/0x430
[  176.218193][    C2]  ? find_endpoint+0x2a3/0x2c0
[  176.218209][    C2]  kasan_report+0xdf/0x1c0
[  176.218260][    C2]  ? find_endpoint+0x2a3/0x2c0
[  176.218280][    C2]  find_endpoint+0x2a3/0x2c0
[  176.218299][    C2]  dummy_timer+0x500/0x3700
[  176.218327][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  176.218379][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  176.218405][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  176.218427][    C2]  ? mark_held_locks+0x40/0x70
[  176.218450][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  176.218476][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  176.218496][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  176.218522][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  176.218545][    C2]  handle_softirqs+0x1e6/0x9d0
[  176.218573][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  176.218608][    C2]  ? _raw_spin_unlock+0x28/0x50
[  176.218632][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  176.218658][    C2]  __irq_exit_rcu+0x16a/0x210
[  176.218683][    C2]  irq_exit_rcu+0x9/0x30
[  176.218710][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  176.218734][    C2]  </IRQ>
[  176.218739][    C2]  <TASK>
[  176.218745][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.218763][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  176.218785][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b
[  176.218801][    C2] RSP: 0000:ffffc90006cdf778 EFLAGS: 00000246
[  176.218816][    C2] RAX: 0000000000000006 RBX: ffff888021bcc000 RCX: 0000000000000040
[  176.218827][    C2] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  176.218838][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  176.218848][    C2] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000040000000
[  176.218858][    C2] R13: ffff88802444a478 R14: 0000000000000000 R15: ffff88802444a400
[  176.218874][    C2]  dummy_urb_enqueue+0x56c/0x880
[  176.218894][    C2]  usb_hcd_submit_urb+0x268/0x2150
[  176.218916][    C2]  usb_submit_urb+0x827/0x19b0
[  176.218943][    C2]  iowarrior_open+0x165/0x290
[  176.218964][    C2]  ? __pfx_iowarrior_open+0x10/0x10
[  176.218988][    C2]  usb_open+0x189/0x220
[  176.219010][    C2]  ? __pfx_usb_open+0x10/0x10
[  176.219030][    C2]  chrdev_open+0x234/0x6a0
[  176.219055][    C2]  ? __pfx_chrdev_open+0x10/0x10
[  176.219079][    C2]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  176.219110][    C2]  do_dentry_open+0x6ab/0x14d0
[  176.219129][    C2]  ? __pfx_chrdev_open+0x10/0x10
[  176.219150][    C2]  vfs_open+0x82/0x3f0
[  176.219176][    C2]  path_openat+0x19fa/0x2440
[  176.219200][    C2]  ? __pfx_path_openat+0x10/0x10
[  176.219227][    C2]  do_file_open+0x20e/0x430
[  176.219248][    C2]  ? __pfx_do_file_open+0x10/0x10
[  176.219278][    C2]  ? _raw_spin_unlock+0x28/0x50
[  176.219303][    C2]  ? alloc_fd+0x471/0x7a0
[  176.219329][    C2]  do_sys_openat2+0x10f/0x1e0
[  176.219356][    C2]  ? __pfx_do_sys_openat2+0x10/0x10
[  176.219386][    C2]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  176.219411][    C2]  __ia32_compat_sys_openat+0x12d/0x210
[  176.219442][    C2]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  176.219477][    C2]  do_int80_emulation+0x166/0x650
[  176.219512][    C2]  asm_int80_emulation+0x1a/0x20
[  176.219531][    C2] RIP: 0023:0xf71175ab
[  176.219546][    C2] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  176.219561][    C2] RSP: 002b:00000000f53cd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  176.219575][    C2] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cd100
[  176.219590][    C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  176.219599][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.219607][    C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  176.219617][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.219633][    C2]  </TASK>
[  176.219639][    C2] 
[  176.219644][    C2] Allocated by task 6795:
[  176.219654][    C2]  kasan_save_stack+0x30/0x50
[  176.219676][    C2]  kasan_save_track+0x14/0x30
[  176.219696][    C2]  __kasan_kmalloc+0xaa/0xb0
[  176.219716][    C2]  __kmalloc_noprof+0x32f/0x840
[  176.219733][    C2]  copy_splice_read+0x1a3/0xbb0
[  176.219755][    C2]  do_splice_read+0x285/0x370
[  176.219773][    C2]  splice_direct_to_actor+0x2a1/0xa30
[  176.219792][    C2]  do_splice_direct+0x174/0x240
[  176.219811][    C2]  do_sendfile+0xadc/0xe20
[  176.219826][    C2]  __ia32_compat_sys_sendfile+0x1e5/0x220
[  176.219847][    C2]  do_int80_emulation+0x166/0x650
[  176.219872][    C2]  asm_int80_emulation+0x1a/0x20
[  176.219888][    C2] 
[  176.219892][    C2] Freed by task 6795:
[  176.219901][    C2]  kasan_save_stack+0x30/0x50
[  176.219918][    C2]  kasan_save_track+0x14/0x30
[  176.219966][    C2]  kasan_save_free_info+0x3b/0x70
[  176.219993][    C2]  __kasan_slab_free+0x5f/0x80
[  176.220014][    C2]  kfree+0x22b/0x6d0
[  176.220035][    C2]  copy_splice_read+0x734/0xbb0
[  176.220050][    C2]  do_splice_read+0x285/0x370
[  176.220066][    C2]  splice_direct_to_actor+0x2a1/0xa30
[  176.220083][    C2]  do_splice_direct+0x174/0x240
[  176.220099][    C2]  do_sendfile+0xadc/0xe20
[  176.220111][    C2]  __ia32_compat_sys_sendfile+0x1e5/0x220
[  176.220128][    C2]  do_int80_emulation+0x166/0x650
[  176.220149][    C2]  asm_int80_emulation+0x1a/0x20
[  176.220162][    C2] 
[  176.220167][    C2] The buggy address belongs to the object at ffff88804b43e800
[  176.220167][    C2]  which belongs to the cache kmalloc-512 of size 512
[  176.220179][    C2] The buggy address is located 232 bytes inside of
[  176.220179][    C2]  freed 512-byte region [ffff88804b43e800, ffff88804b43ea00)
[  176.220194][    C2] 
[  176.220198][    C2] The buggy address belongs to the physical page:
[  176.220205][    C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b43c
[  176.220219][    C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  176.220231][    C2] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  176.220245][    C2] page_type: f5(slab)
[  176.220258][    C2] raw: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[  176.220272][    C2] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  176.220286][    C2] head: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[  176.220299][    C2] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  176.220312][    C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  176.220324][    C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  176.220332][    C2] page dumped because: kasan: bad access detected
[  176.220339][    C2] page_owner tracks the page as allocated
[  176.220343][    C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6046, tgid 6045 (syz.1.26), ts 86788477862
[  176.220367][    C2]  post_alloc_hook+0xfd/0x120
[  176.220386][    C2]  get_page_from_freelist+0x110d/0x35d0
[  176.220403][    C2]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  176.220416][    C2]  new_slab+0xa9/0x6e0
[  176.220427][    C2]  refill_objects+0xe3/0x410
[  176.220439][    C2]  __pcs_replace_empty_main+0x35e/0x650
[  176.220459][    C2]  __kmalloc_noprof+0x67c/0x840
[  176.220473][    C2]  usb_copy_descriptors+0xcd/0x320
[  176.220493][    C2]  f_midi2_bind+0x1d37/0x2770
[  176.220512][    C2]  usb_add_function+0x219/0x890
[  176.220524][    C2]  configfs_composite_bind+0xd83/0x1960
[  176.220537][    C2]  gadget_bind_driver+0x28c/0xbf0
[  176.220555][    C2]  really_probe+0x241/0xa60
[  176.220572][    C2]  __driver_probe_device+0x210/0x460
[  176.220594][    C2]  driver_probe_device+0x4a/0x140
[  176.220610][    C2]  __driver_attach+0x21f/0x5b0
[  176.220627][    C2] page last free pid 6012 tgid 6012 ts 84008214973 stack trace:
[  176.220637][    C2]  __free_frozen_pages+0x79f/0x10f0
[  176.220656][    C2]  free_devinfo+0x8b/0xb0
[  176.220675][    C2]  port_delete.isra.0+0x11e/0x210
[  176.220698][    C2]  snd_seq_delete_port+0x228/0x2c0
[  176.220718][    C2]  snd_seq_ioctl_delete_port+0xb6/0x200
[  176.220741][    C2]  call_seq_client_ctl+0xa3/0x130
[  176.220764][    C2]  snd_seq_kernel_client_ctl+0x35/0x50
[  176.220789][    C2]  snd_seq_event_port_detach+0xbb/0x100
[  176.220811][    C2]  snd_seq_oss_release+0x139/0x180
[  176.220834][    C2]  odev_release+0x4c/0x70
[  176.220852][    C2]  __fput+0x3ff/0xb50
[  176.220869][    C2]  task_work_run+0x150/0x240
[  176.220886][    C2]  exit_to_user_mode_loop+0x1d8/0x700
[  176.220909][    C2]  __do_fast_syscall_32+0x59f/0x8b0
[  176.220933][    C2]  do_fast_syscall_32+0x32/0x70
[  176.220956][    C2]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  176.220974][    C2] 
[  176.220977][    C2] Memory state around the buggy address:
[  176.220985][    C2]  ffff88804b43e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.220996][    C2]  ffff88804b43e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.221007][    C2] >ffff88804b43e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.221015][    C2]                                                           ^
[  176.221023][    C2]  ffff88804b43e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.221033][    C2]  ffff88804b43e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.221041][    C2] ==================================================================
[  176.221050][    C2] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  176.835112][    C2] CPU: 2 UID: 0 PID: 6817 Comm: syz.0.133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.841474][    C2] Tainted: [L]=SOFTLOCKUP
[  176.845022][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.851391][    C2] Call Trace:
[  176.853524][    C2]  <IRQ>
[  176.855261][    C2]  dump_stack_lvl+0x100/0x190
[  176.858312][    C2]  vpanic+0x553/0x970
[  176.861600][    C2]  ? __pfx_vpanic+0x10/0x10
[  176.865419][    C2]  ? __pfx_vprintk_emit+0x10/0x10
[  176.868477][    C2]  ? find_endpoint+0x2a3/0x2c0
[  176.871416][    C2]  panic+0xd1/0xe0
[  176.877699][    C2]  ? __pfx_panic+0x10/0x10
[  176.880474][    C2]  ? end_report.part.0+0x23/0x90
[  176.883695][    C2]  ? rcu_is_watching+0x13/0xc0
[  176.886783][    C2]  ? end_report.part.0+0x23/0x90
[  176.889863][    C2]  check_panic_on_warn.cold+0x19/0x34
[  176.893027][    C2]  end_report.part.0+0x3a/0x90
[  176.895450][    C2]  kasan_report.cold+0xe/0x18
[  176.898480][    C2]  ? find_endpoint+0x2a3/0x2c0
[  176.901514][    C2]  find_endpoint+0x2a3/0x2c0
[  176.904033][    C2]  dummy_timer+0x500/0x3700
[  176.906404][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  176.909448][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  176.912147][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  176.915034][    C2]  ? mark_held_locks+0x40/0x70
[  176.918020][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  176.921683][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  176.924844][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  176.927948][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  176.930936][    C2]  handle_softirqs+0x1e6/0x9d0
[  176.934078][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  176.938839][    C2]  ? _raw_spin_unlock+0x28/0x50
[  176.942300][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  176.945441][    C2]  __irq_exit_rcu+0x16a/0x210
[  176.948200][    C2]  irq_exit_rcu+0x9/0x30
[  176.950725][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  176.954115][    C2]  </IRQ>
[  176.955938][    C2]  <TASK>
[  176.957557][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.961921][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  176.965769][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b
[  176.975401][    C2] RSP: 0000:ffffc90006cdf778 EFLAGS: 00000246
[  176.979488][    C2] RAX: 0000000000000006 RBX: ffff888021bcc000 RCX: 0000000000000040
[  176.982960][    C2] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  176.989644][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  176.994504][    C2] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000040000000
[  177.001127][    C2] R13: ffff88802444a478 R14: 0000000000000000 R15: ffff88802444a400
[  177.006307][    C2]  dummy_urb_enqueue+0x56c/0x880
[  177.009532][    C2]  usb_hcd_submit_urb+0x268/0x2150
[  177.012989][    C2]  usb_submit_urb+0x827/0x19b0
[  177.016571][    C2]  iowarrior_open+0x165/0x290
[  177.021043][    C2]  ? __pfx_iowarrior_open+0x10/0x10
[  177.024905][    C2]  usb_open+0x189/0x220
[  177.027489][    C2]  ? __pfx_usb_open+0x10/0x10
[  177.030393][    C2]  chrdev_open+0x234/0x6a0
[  177.033293][    C2]  ? __pfx_chrdev_open+0x10/0x10
[  177.037120][    C2]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  177.049623][    C2]  do_dentry_open+0x6ab/0x14d0
[  177.052015][    C2]  ? __pfx_chrdev_open+0x10/0x10
[  177.054569][    C2]  vfs_open+0x82/0x3f0
[  177.056422][    C2]  path_openat+0x19fa/0x2440
[  177.062143][    C2]  ? __pfx_path_openat+0x10/0x10
[  177.077631][    C2]  do_file_open+0x20e/0x430
[  177.079323][    C2]  ? __pfx_do_file_open+0x10/0x10
[  177.081124][    C2]  ? _raw_spin_unlock+0x28/0x50
[  177.083507][    C2]  ? alloc_fd+0x471/0x7a0
[  177.085849][    C2]  do_sys_openat2+0x10f/0x1e0
[  177.088908][    C2]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.091674][    C2]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  177.101166][    C2]  __ia32_compat_sys_openat+0x12d/0x210
[  177.104319][    C2]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  177.107298][    C2]  do_int80_emulation+0x166/0x650
[  177.125487][    C2]  asm_int80_emulation+0x1a/0x20
[  177.127820][    C2] RIP: 0023:0xf71175ab
[  177.129808][    C2] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  177.140065][    C2] RSP: 002b:00000000f53cd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  177.158402][    C2] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cd100
[  177.161778][    C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  177.166787][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  177.171893][    C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  177.178825][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  177.183524][    C2]  </TASK>
[  177.193145][    C2] Kernel Offset: disabled
[  177.196604][    C2] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:08:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff8880223f8000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffff88802b341a40 RSP=ffffc90000bd7898
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed100447f2b3 R13=0000000000000003 R14=ffffed1005668349 R15=0000000000000001
RIP=ffffffff820b5c40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096960000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f155c0 CR3=0000000052642000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc90006df7b20 RCX=0000000000000000 RDX=ffff888023c2a580
RSI=ffffffff829740bc RDI=ffffc90006df7b20 RBP=ffffc90006df7ab0 RSP=ffffc90006df7a30
R8 =0000000000000005 R9 =0000000000000000 R10=00000000fffffffe R11=0000000000000001
R12=00000000fffffffe R13=dffffc0000000000 R14=ffffc90006df7b64 R15=ffffc90006df7b58
RIP=ffffffff82965c79 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f382b947c80 ffffffff 00c00000
GS =0000 ffff888096a60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f382bc63feb CR3=000000004da3a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fff400 Opmask01=0000000000000003 Opmask02=000000003f000bff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007273 752f3a6e6962732f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0f0e 0d0c0b0a09080706
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d4940f0 000000000000006c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f382baa8d48
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d48c7a0
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d4944b0 0000000000000000 000000008700666e 6f63766c6f736572
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d4944b0 0000000000000000 000000008700666e 6f63766c6f736572
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d49449f 0000000000000000 0000000087004941 404c5943405c4a5d
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20343031203d8120 3f812481205b8120 7c7c2031263e3220 6c6c756e2f766564
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055924d492b58 0000000000000000 000000000000000f 0000000000875d81
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc900005483c8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000031 R14=0000000000000003 R15=ffffc900005486e0
RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c3ad94d CR3=0000000060a72000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000001c238b RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00
R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00000000
FS =0000 0000000000000000 ffffffff 00000000
GS =0000 ffff888096c60000 ffffffff 00000000
LDT=0000 0000000000000000 ffffffff 00000000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000340feff8 CR3=0000000060a72000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000