last executing test programs:

4m11.662996894s ago: executing program 0 (id=140):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4m11.509848203s ago: executing program 0 (id=141):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(r0)
socket$netlink(0x10, 0x3, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r4}, 0x38)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r7 = syz_open_pts(r6, 0x141601)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r5, 0xffffffffffffffff, 0x0)

4m9.592097638s ago: executing program 0 (id=145):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x44080)

4m9.557204448s ago: executing program 0 (id=147):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000180), 0x3, 0x42f, &(0x7f0000000940)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
creat(0x0, 0x0)
socket(0xa, 0x801, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x15180)

4m9.204166287s ago: executing program 0 (id=152):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4m5.068005586s ago: executing program 0 (id=164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x10000, 0x6, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4m4.912903475s ago: executing program 32 (id=164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x10000, 0x6, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3m23.765635204s ago: executing program 3 (id=291):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

3m21.399641667s ago: executing program 3 (id=299):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x10, 0x6, 0x5, 0x3, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x4}]}, 0x18}}, 0x20)

3m17.942563918s ago: executing program 3 (id=305):
mkdir(&(0x7f0000000380)='./file0\x00', 0x85)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, 0x0, 0x89901)

3m17.900460158s ago: executing program 3 (id=308):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006)
setrlimit(0x3, 0xffffffffffffffff)
chdir(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x3)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")

3m16.901366635s ago: executing program 3 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'syzkaller0\x00', 0x600})
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

3m16.052311093s ago: executing program 3 (id=317):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000440)='<', 0x1, 0x0)
getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', 0x0, 0x0)

3m15.2505265s ago: executing program 33 (id=317):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000440)='<', 0x1, 0x0)
getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', 0x0, 0x0)

16.949135996s ago: executing program 5 (id=967):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port1\x00', 0x511e3659902362b, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1})
r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x243, &(0x7f0000000540)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000080000000b000000c1010000c7ec8535fbe07e8fa1c3dd4a36f44619e443d0c3c12567e1c4742b953b8e832823fc7a988e179af46aceca9f5b440f5d6392e9e843ffc4c5ae23714f260e4cd899d7289f7caf258fdfff152d0727e6e4aa504b71a181c9446afa9f4cf29201c1", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10010, r2, 0xa6700000)
r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f00000039c0)={0x2020}, 0x2020)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16.015463974s ago: executing program 5 (id=982):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x3000000)
prlimit64(r0, 0x4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)

14.279138199s ago: executing program 5 (id=976):
r0 = openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0x3)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x8, 0x80000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x2510, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
unshare(0x2040600)
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

12.839957525s ago: executing program 5 (id=979):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f00000004c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

12.223956664s ago: executing program 5 (id=983):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab3", 0x2c}], 0x1, 0x8)
r2 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

9.979620317s ago: executing program 5 (id=994):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

9.977032908s ago: executing program 2 (id=995):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

9.594386477s ago: executing program 2 (id=998):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r7 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

8.401444703s ago: executing program 2 (id=1000):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="b8401bbc6f03d5aacfd44ebe757f5083fac30073349b3443ff2f4af79fa30c5fc759bf33399b3f4164ff2b74b27233e2e5d4e9a0a9b7fb898d1a3b7a9249cbb109f927aef4fe1156d0402d5da2127915f2099890d3b5f8f07289184fe17ee8e0b58297a743517b65f810be77079a629d0fbfdd54455c42bf04300a1b", @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bcef3ab754c3b730034e20162", @ANYRES32, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$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")
read$msr(r1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

8.153857143s ago: executing program 2 (id=1001):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = fanotify_init(0x0, 0x0)
dup(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.724726579s ago: executing program 2 (id=1003):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@i_version}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000001080)="$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")
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
lseek(r0, 0x7fff, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ftruncate(r0, 0x1f)
write$P9_RLERROR(r0, &(0x7f0000000340)=ANY=[], 0xa)
write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003)

6.174477567s ago: executing program 6 (id=1006):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008010, &(0x7f0000000340), 0x1, 0x5f0, &(0x7f00000011c0)="$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")
setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [], {}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x0)

5.616130386s ago: executing program 6 (id=1011):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="b8401bbc6f03d5aacfd44ebe757f5083fac30073349b3443ff2f4af79fa30c5fc759bf33399b3f4164ff2b74b27233e2e5d4e9a0a9b7fb898d1a3b7a9249cbb109f927aef4fe1156d0402d5da2127915f2099890d3b5f8f07289184fe17ee8e0b58297a743517b65f810be77079a629d0fbfdd54455c42bf04300a1b", @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bcef3ab754c3b730034e20162", @ANYRES32, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$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")
read$msr(r1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4.460637462s ago: executing program 6 (id=1014):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)

4.284221112s ago: executing program 4 (id=1015):
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
ptrace$cont(0x9, 0x0, 0x10000, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
pipe2$9p(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))

4.103863631s ago: executing program 1 (id=1016):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000008000000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)

3.922307051s ago: executing program 1 (id=1017):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syncfs(r0)

1.785875555s ago: executing program 4 (id=1018):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0)
readahead(r2, 0x5, 0x80000000)

1.784950455s ago: executing program 1 (id=1028):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.784483945s ago: executing program 2 (id=1019):
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil)
r0 = io_uring_setup(0x2e0d, &(0x7f0000000140)={0x0, 0x821b, 0x40, 0x2, 0x2a7})
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x2, 0x7ff}]}, 0xfffffffffffffeac, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000080)={&(0x7f0000001000)={[{&(0x7f00000001c0)="221e5460dd4a40e1408802832350e1662488e9121229f14791a11208e8f565546982a7d709fd28e102ec785b5f3c9f9f2e5eb233c8bb721a579c9883489bb9cc4e4484ed74956dba43a297f20ddca7a62dc52886092af21cfd0f0441e36f7dbddbe04541cd17e32980bd865362fe8789329c230e52083d452d4856ac0860ffd19c12d4695904c49a8ffb4a0007b7a4179d9ab6b0b94d97109c721ee553403e76f924b325869bdb5dea202ad64b8be91b23d8769486a2aab3a7b864d4151b5a75cd5a67264ceec2f004b50d0e8b66578907bccd17feac1083e58b87d5cece2d9e77a0", 0xe2, 0x1}, {&(0x7f00000003c0)="ca384e403aeb23639f5d762e7b914a876b40679e7e0cb6a5dcf4a978ee9cf3683043f3c4c4a733f7b28061be244c80bba4039aa30a97b40cd94cf0760b36dc548a3440e1159b5395107d2eb0507b01935edeee63daecf5c0829c1b45960a1f112e2035c6bebe78ce63d24c75f044236785878baa6298c00259bfd6948c6ababac9142dddd94e47c8b877994b1b63992cce6853398a5eb4dc19f6a050", 0x9c, 0x2}, {&(0x7f00000004c0)="8aca5d554db8666830270d2f20fc3fcaedfe21d9adfa0ffb2d81f4b0583c0159cb8de72ffcca51ca2387b7f4b73e3563d356e789252b396d6038413162d889c99e03c39848d388ad8f2ef2a68002e69e3c161fa562f4a0fcc0a8e8a452fb930cdf1caeb6fc7edaf209709a6ad136216a4b1e55970a02c3c7fa305b9c67c3b707037ceb2fac37052cc5c4d2c183ec85114fdfbdba2a7850cac9078c3edf6ffd00356a26600db9bf96925ca6682c0bc192", 0xb0, 0x2}]}, 0x3, 0x3}, 0x1)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0xa14, 0x6}})
syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@mbim_extended={0x3, 0x24, 0x1c, 0xec, 0x9, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x8e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0)

1.784255765s ago: executing program 6 (id=1020):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r1, 0x16, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.693657835s ago: executing program 6 (id=1021):
r0 = syz_open_dev$evdev(&(0x7f00000019c0), 0x7621, 0x101200)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/86)

1.670927975s ago: executing program 1 (id=1022):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
sendfile(r1, r0, 0x0, 0x7ffffffd)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x73d014, 0x0)

1.444242615s ago: executing program 6 (id=1023):
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r3, 0x10000, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
pipe2$9p(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
socket$netlink(0x10, 0x3, 0x0)

1.420341374s ago: executing program 4 (id=1024):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8054)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f00000145c0)={0x2020}, 0x2020)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
r5 = dup(r3)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.124605733s ago: executing program 1 (id=1025):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1adde}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)

793.521233ms ago: executing program 4 (id=1026):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3})
r3 = userfaultfd(0x1)
io_setup(0x205, 0x0)
io_submit(0x0, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x90}])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0xc, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x10, 0xf8, 0x9}, {0x6, 0x9, 0x3, 0xd, 0xae, 0x5, 0x2, 0xf9, 0xfe, 0x8, 0xfd, 0x17, 0x3c}, {0xa20000, 0x5, 0x4, 0x7, 0x2, 0x77, 0x1, 0x9, 0x2, 0x1, 0x8, 0x54, 0x18bb}], 0xd9})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000b40)="f30f09ba6100b8c400ef66b9eb0a00000f3266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f0066b98004000066b8532ebe1866ba0bffd3710f3066b9830500000f32", 0x53}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

680.299982ms ago: executing program 1 (id=1027):
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff}, 0x80000)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0)

312.767111ms ago: executing program 4 (id=1029):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8880000, 0x0, 0xffffff83, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x80045300, 0x0)
tkill(r1, 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

0s ago: executing program 4 (id=1030):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
write$rfkill(r6, &(0x7f0000000100)={0x5, 0x2, 0x3, 0x1}, 0x8)
write$rfkill(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffb}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000008, 0x0, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r10, 0x0)

kernel console output (not intermixed with test programs):

506225][ T5001] EXT4-fs (loop4): can't mount with commit=12, fs mounted w/o journal
[  123.368818][    T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  123.393689][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  123.407602][    T7] usb 4-1: SerialNumber: syz
[  123.595547][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.650747][    T7] usb 4-1: 0:2 : does not exist
[  123.655732][    T7] usb 4-1: unit 255 not found!
[  123.674975][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.683931][ T5046] loop4: detected capacity change from 0 to 512
[  123.743675][  T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.774025][  T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.787151][ T5048] loop1: detected capacity change from 0 to 8
[  123.824558][  T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.838948][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.954242][ T5048] SQUASHFS error: Failed to read block 0x260685: -5
[  123.961053][ T5048] SQUASHFS error: Unable to read metadata cache entry [260685]
[  123.968800][ T5048] SQUASHFS error: Unable to read directory block [260685:0]
[  124.021390][ T5046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  124.176145][ T5046] EXT4-fs (loop4): 1 truncate cleaned up
[  124.230113][ T5046] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback.
[  127.502462][ T5075] loop5: detected capacity change from 0 to 2048
[  127.512050][ T5076] loop1: detected capacity change from 0 to 164
[  127.696445][ T5080] loop2: detected capacity change from 0 to 256
[  128.138194][    T7] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  128.148858][ T5080] UDF-fs: bad mount option "sho^ta�ͧ0000000002147483452" or missing value
[  128.205778][ T5075] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none.
[  128.338172][    T7] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  128.376589][    T7] usb 4-1: USB disconnect, device number 6
[  128.481498][ T5080] loop2: detected capacity change from 0 to 512
[  128.651185][ T5080] loop2: detected capacity change from 0 to 128
[  128.654182][ T1110] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  128.688976][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.748458][ T5109] loop4: detected capacity change from 0 to 8
[  129.022592][ T5115] loop3: detected capacity change from 0 to 512
[  129.457235][ T5116] SQUASHFS error: Failed to read block 0x260685: -5
[  129.464007][ T5116] SQUASHFS error: Unable to read metadata cache entry [260685]
[  129.471750][ T5116] SQUASHFS error: Unable to read directory block [260685:0]
[  129.768208][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.809078][ T1110] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.114141][ T1110] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  130.472987][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.644617][ T1110] usb 2-1: SerialNumber: syz
[  133.328739][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  133.335093][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  133.398121][ T1110] usb 2-1: can't set config #1, error -71
[  133.419857][ T1110] usb 2-1: USB disconnect, device number 4
[  133.794846][ T5148] loop5: detected capacity change from 0 to 164
[  134.654268][ T5155] loop2: detected capacity change from 0 to 8
[  135.178546][ T5140] loop3: detected capacity change from 0 to 512
[  135.338299][ T5167] SQUASHFS error: Failed to read block 0x260685: -5
[  135.345025][ T5167] SQUASHFS error: Unable to read metadata cache entry [260685]
[  135.352735][ T5167] SQUASHFS error: Unable to read directory block [260685:0]
[  135.625979][ T5140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.743143][ T5140] EXT4-fs (loop3): 1 truncate cleaned up
[  135.751629][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback.
[  138.788864][ T5202] loop3: detected capacity change from 0 to 512
[  138.935719][ T5202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  139.024994][ T5216] loop5: detected capacity change from 0 to 8
[  139.101760][ T5202] EXT4-fs (loop3): 1 orphan inode deleted
[  139.107536][ T5202] EXT4-fs (loop3): 1 truncate cleaned up
[  139.183221][ T5202] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[  139.235277][ T5221] SQUASHFS error: Failed to read block 0x260685: -5
[  139.242375][ T5221] SQUASHFS error: Unable to read metadata cache entry [260685]
[  139.250077][ T5221] SQUASHFS error: Unable to read directory block [260685:0]
[  141.034354][ T5236] loop5: detected capacity change from 0 to 8
[  141.177690][ T5240] SQUASHFS error: Failed to read block 0x260685: -5
[  141.184535][ T5240] SQUASHFS error: Unable to read metadata cache entry [260685]
[  141.192246][ T5240] SQUASHFS error: Unable to read directory block [260685:0]
[  144.224285][   T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  144.225190][ T5268] loop5: detected capacity change from 0 to 2048
[  144.336634][ T5268] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.347830][ T5268] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.644570][ T5282] loop3: detected capacity change from 0 to 1024
[  144.662448][ T5283] loop5: detected capacity change from 0 to 512
[  144.770272][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.006799][ T5283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  145.145870][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.314349][ T5283] EXT4-fs (loop5): 1 truncate cleaned up
[  145.320988][ T5283] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback.
[  145.498450][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  145.541649][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  145.581711][   T13] usb 2-1: SerialNumber: syz
[  146.184344][   T13] usb 2-1: 0:2 : does not exist
[  146.286740][ T4178] syz-executor (4178) used greatest stack depth: 19576 bytes left
[  146.304150][   T13] usb 2-1: unit 255 not found!
[  146.381363][ T4381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.825826][ T4381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.836687][   T13] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  146.875492][ T5283] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  146.951436][ T4381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.976589][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  147.048150][   T13] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  147.064112][ T4381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.094775][   T13] usb 2-1: USB disconnect, device number 5
[  148.748278][    T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.772060][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.859157][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.897820][    T7] usb 5-1: config 0 descriptor??
[  149.029837][    T7] cp210x 5-1:0.0: cp210x converter detected
[  149.472263][    T7] usb 5-1: cp210x converter now attached to ttyUSB0
[  149.676218][ T4158] usb 5-1: USB disconnect, device number 6
[  149.751532][ T4158] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.788535][ T4245] udevd[4245]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  149.865783][ T4158] cp210x 5-1:0.0: device disconnected
[  151.647740][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[  151.906948][ T5367] loop1: detected capacity change from 0 to 512
[  151.997718][ T5367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.135722][ T5367] EXT4-fs (loop1): 1 truncate cleaned up
[  152.154997][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback.
[  152.191086][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  152.221627][ T5338] chnl_net:caif_netlink_parms(): no params data found
[  152.654320][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.038126][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.118376][    T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  153.127466][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  153.143187][    T7] usb 5-1: SerialNumber: syz
[  153.293363][ T5367] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  153.390660][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.470557][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.487546][ T5338] device bridge_slave_0 entered promiscuous mode
[  153.496924][    T7] usb 5-1: 0:2 : does not exist
[  153.507952][    T7] usb 5-1: unit 255 not found!
[  153.568629][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.718331][ T4212] Bluetooth: hci4: command 0x041b tx timeout
[  153.818656][    T7] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  153.841202][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.969404][ T5338] device bridge_slave_1 entered promiscuous mode
[  154.017268][    T7] usb 5-1: USB disconnect, device number 7
[  154.469337][ T4381] device hsr_slave_0 left promiscuous mode
[  154.548332][ T4381] device hsr_slave_1 left promiscuous mode
[  154.589606][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.597067][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.747231][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.809238][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.834131][ T5399] loop5: detected capacity change from 0 to 128
[  154.872311][ T4381] device bridge_slave_1 left promiscuous mode
[  154.928563][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.134565][ T4381] device bridge_slave_0 left promiscuous mode
[  155.159140][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.693472][ T5399] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.208232][ T5399] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.222870][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  156.377901][ T4381] device veth1_macvtap left promiscuous mode
[  156.407380][ T5410] loop4: detected capacity change from 0 to 512
[  156.414656][ T4381] device veth0_macvtap left promiscuous mode
[  156.445277][ T4381] device veth1_vlan left promiscuous mode
[  156.486260][ T4381] device veth0_vlan left promiscuous mode
[  157.396069][ T5417] loop2: detected capacity change from 0 to 8
[  157.540146][ T4381] team0 (unregistering): Port device team_slave_1 removed
[  157.574139][ T4381] team0 (unregistering): Port device team_slave_0 removed
[  157.626505][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.680030][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.970855][ T4381] bond0 (unregistering): Released all slaves
[  158.063633][ T5415] SQUASHFS error: Failed to read block 0x260685: -5
[  158.072014][ T5415] SQUASHFS error: Unable to read metadata cache entry [260685]
[  158.079627][ T5415] SQUASHFS error: Unable to read directory block [260685:0]
[  158.116864][ T5410] EXT4-fs error (device loop4): __ext4_iget:4872: inode #14: block 1886221359: comm syz.4.341: invalid block
[  158.199386][ T5410] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.341: couldn't read orphan inode 14 (err -117)
[  158.278291][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[  158.294143][ T5410] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,noblock_validity,nouid32,lazytime,init_itable=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  158.304557][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.358216][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  158.377135][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.416634][ T5410] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.657198][ T5338] team0: Port device team_slave_0 added
[  158.713888][ T5338] team0: Port device team_slave_1 added
[  158.720859][    T7] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.737216][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.755989][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.767260][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.774866][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.777587][    T7] usb 6-1: config 0 descriptor??
[  158.786908][ T5436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  158.862454][    T7] cp210x 6-1:0.0: cp210x converter detected
[  158.916312][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.940204][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.999076][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.019266][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.036461][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.088483][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.245359][ T5338] device hsr_slave_0 entered promiscuous mode
[  159.258255][ T4212] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  159.269173][ T5338] device hsr_slave_1 entered promiscuous mode
[  159.296214][    T7] usb 6-1: cp210x converter now attached to ttyUSB0
[  159.531906][    T7] usb 6-1: USB disconnect, device number 2
[  159.552874][    T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  159.601755][    T7] cp210x 6-1:0.0: device disconnected
[  159.628339][ T4212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.671435][ T4212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.768330][ T4212] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  159.793828][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.828121][ T4212] usb 5-1: SerialNumber: syz
[  159.919654][ T5338] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  159.984480][ T5338] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  160.015998][ T5338] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  160.079988][ T5338] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  160.821384][ T4212] usb 5-1: 0:2 : does not exist
[  160.826348][ T4212] usb 5-1: unit 5: unexpected type 0x03
[  160.928170][ T4212] usb 5-1: unit 4 not found!
[  161.016982][ T5467] loop1: detected capacity change from 0 to 1024
[  161.052847][ T4212] usb 5-1: USB disconnect, device number 8
[  161.416072][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.052164][ T5463] ODEBUG: Out of memory. ODEBUG disabled
[  162.144530][ T5338] 8021q: adding VLAN 0 to HW filter on device team0
[  162.183156][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.193745][ T5481] loop4: detected capacity change from 0 to 8
[  162.482406][ T5467] EXT4-fs (loop1): Ignoring removed orlov option
[  162.640336][ T5467] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  162.664680][ T5481] SQUASHFS error: Failed to read block 0x260685: -5
[  162.671482][ T5481] SQUASHFS error: Unable to read metadata cache entry [260685]
[  162.679126][ T5481] SQUASHFS error: Unable to read directory block [260685:0]
[  162.887891][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.014860][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.258989][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  163.309624][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.330575][ T5496] loop2: detected capacity change from 0 to 16
[  163.374140][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.410287][ T5496] erofs: (device loop2): mounted with root inode @ nid 36.
[  163.434536][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.441776][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.498171][ T5326] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  163.521392][ T5496] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.552864][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.605986][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.616126][ T5496] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851]
[  163.674431][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.681578][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.698405][ T5496] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  163.768623][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.867528][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.924215][ T5326] usb 6-1: config 160 has an invalid interface number: 200 but max is 0
[  163.961900][ T5326] usb 6-1: config 160 has no interface number 0
[  163.987392][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.002057][ T5326] usb 6-1: config 160 interface 200 has no altsetting 0
[  164.030800][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.065471][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.084473][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.248347][ T5326] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  164.271878][ T5326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.291960][ T5326] usb 6-1: Product: syz
[  164.296240][ T5326] usb 6-1: Manufacturer: syz
[  164.331204][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.385334][ T5326] usb 6-1: SerialNumber: syz
[  164.393647][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.482867][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  164.546324][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.568363][ T5338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.600070][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.666935][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  164.685363][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.738452][ T4211] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  164.878269][ T5326] usb 6-1: MIDIStreaming interface descriptor not found
[  164.923330][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.941321][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.969079][ T5326] usb 6-1: USB disconnect, device number 3
[  164.984696][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.138253][ T4211] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  165.156763][ T4211] usb 3-1: config 0 has no interface number 0
[  165.180202][ T4211] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  165.211568][ T4211] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  165.338238][ T4247] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  165.404447][ T4211] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  165.423795][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.452695][ T4211] usb 3-1: Product: syz
[  165.474551][ T4211] usb 3-1: Manufacturer: syz
[  165.486730][ T4211] usb 3-1: SerialNumber: syz
[  165.516737][ T4211] usb 3-1: config 0 descriptor??
[  165.519462][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.548346][ T5498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.554828][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.556161][ T5498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.602597][ T4211] smsc95xx v2.0.0
[  165.633466][ T5338] device veth0_vlan entered promiscuous mode
[  165.671734][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.688785][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.710410][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.724161][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.848472][ T5498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.855565][ T5498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.858327][ T5338] device veth1_vlan entered promiscuous mode
[  165.892866][ T4247] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.911566][ T4247] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.059597][ T4247] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  166.107633][  T631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.171426][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  166.245705][  T631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.305301][ T4247] usb 2-1: SerialNumber: syz
[  166.386554][  T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.683752][  T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.699104][ T5338] device veth0_macvtap entered promiscuous mode
[  166.759692][ T5338] device veth1_macvtap entered promiscuous mode
[  166.832505][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.883929][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.933850][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.960363][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.993155][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.024738][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.057785][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.087395][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.127394][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.150431][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.184075][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.216523][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.242104][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.279224][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.315523][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.356921][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.394255][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.421131][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.461147][ T5338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.487708][ T5338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.514765][ T5338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.534046][ T5338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.734016][  T631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.764797][  T631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.949881][  T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.976462][  T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.008138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.008131][ T4211] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  168.030784][ T4211] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  168.047183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.058358][ T4211] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  168.078478][ T4211] smsc95xx: probe of 3-1:0.67 failed with error -71
[  168.091153][ T4247] usb 2-1: 0:2 : does not exist
[  168.096102][ T4247] usb 2-1: unit 255 not found!
[  168.112739][ T4211] usb 3-1: USB disconnect, device number 4
[  168.125510][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.168864][ T5559] loop4: detected capacity change from 0 to 2048
[  168.302223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.324038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.334100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.342108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.365276][ T4247] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  169.152365][ T4247] usb 2-1: USB disconnect, device number 6
[  169.313503][ T5559] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.363: bad orphan inode 8192
[  169.488178][ T5573] loop2: detected capacity change from 0 to 1024
[  169.497711][ T5576] loop5: detected capacity change from 0 to 1024
[  169.537152][ T5559] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.568758][ T4247] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  170.468865][ T5581] loop6: detected capacity change from 0 to 8
[  170.548705][ T5576] EXT4-fs (loop5): Ignoring removed orlov option
[  170.579773][ T5581] SQUASHFS error: Failed to read block 0x260685: -5
[  170.587258][ T5581] SQUASHFS error: Unable to read metadata cache entry [260685]
[  170.594964][ T5581] SQUASHFS error: Unable to read directory block [260685:0]
[  170.630621][ T5576] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  170.774787][ T5576] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  170.832110][ T4247] usb 2-1: unable to read config index 0 descriptor/all
[  170.839323][ T4247] usb 2-1: can't read configurations, error -71
[  171.297623][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  171.678428][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.721385][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.908344][    T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.963898][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.980376][ T5607] loop5: detected capacity change from 0 to 512
[  172.007125][    T7] usb 3-1: SerialNumber: syz
[  172.193565][ T5607] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.208489][ T5607] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.228298][ T4211] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  172.385947][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.708366][ T4211] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  172.780013][ T4211] usb 5-1: config 0 has no interface number 0
[  173.012368][    T7] usb 3-1: 0:2 : does not exist
[  173.017337][    T7] usb 3-1: unit 255 not found!
[  173.288247][    T7] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  173.349015][    T7] usb 3-1: USB disconnect, device number 5
[  174.300327][ T5633] loop2: detected capacity change from 0 to 8
[  174.323089][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.492601][ T5633] SQUASHFS error: Failed to read block 0x260685: -5
[  174.499276][ T5633] SQUASHFS error: Unable to read metadata cache entry [260685]
[  174.506843][ T5633] SQUASHFS error: Unable to read directory block [260685:0]
[  174.533659][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  174.563436][ T4211] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  174.574488][ T4211] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  174.639323][ T4211] usb 5-1: string descriptor 0 read error: -71
[  174.645620][ T4211] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  174.695550][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.808038][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  174.899686][ T4211] usb 5-1: config 0 descriptor??
[  174.918230][ T4211] usb 5-1: can't set config #0, error -71
[  174.926704][ T4211] usb 5-1: USB disconnect, device number 9
[  174.928280][ T1108] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  175.273936][ T5649] loop6: detected capacity change from 0 to 2048
[  175.348356][ T4211] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  175.748151][ T4211] usb 5-1: Using ep0 maxpacket: 32
[  175.758886][ T1108] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 3
[  175.868306][ T4211] usb 5-1: unable to get BOS descriptor or descriptor too short
[  175.918287][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.927370][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.948023][ T1108] usb 2-1: Product: syz
[  175.952232][ T1108] usb 2-1: Manufacturer: syz
[  175.956848][ T1108] usb 2-1: SerialNumber: syz
[  175.968165][ T4211] usb 5-1: unable to read config index 0 descriptor/start: -71
[  175.977154][ T4211] usb 5-1: can't read configurations, error -71
[  176.348196][ T1108] usb 2-1: 0:2 : does not exist
[  176.395936][ T1108] usb 2-1: USB disconnect, device number 9
[  178.478184][ T4247] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  179.578512][ T4214] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  179.818788][ T4247] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  179.849804][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.948514][ T4247] usb 3-1: config 0 descriptor??
[  180.008572][ T4214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.018075][ T4212] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  180.024572][ T4214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.037112][ T4247] cp210x 3-1:0.0: cp210x converter detected
[  180.101922][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[  180.148288][ T4214] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  180.157380][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  180.188094][ T4214] usb 7-1: SerialNumber: syz
[  180.248350][ T4247] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  180.255904][ T4247] cp210x 3-1:0.0: querying part number failed
[  180.283260][ T4247] usb 3-1: cp210x converter now attached to ttyUSB0
[  180.286472][ T5710] loop1: detected capacity change from 0 to 512
[  180.308326][ T4247] usb 3-1: USB disconnect, device number 6
[  180.353878][ T4247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  180.384853][ T4247] cp210x 3-1:0.0: device disconnected
[  180.388492][ T4212] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  180.409670][ T4212] usb 6-1: config 0 has no interface number 0
[  180.430230][ T4212] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  180.452194][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  180.473816][ T5710] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.477383][ T4214] usb 7-1: 0:2 : does not exist
[  180.485198][ T4212] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  180.489749][ T4214] usb 7-1: unit 255 not found!
[  180.572046][   T26] audit: type=1804 audit(1734729375.587:6): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.397" name="/newroot/91/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  180.627747][   T26] audit: type=1804 audit(1734729375.617:7): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.397" name="/newroot/91/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  180.680833][ T5710] Quota error (device loop1): write_blk: dquota write failed
[  180.707778][ T5710] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  180.727507][ T5710] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.397: Failed to acquire dquot type 1
[  180.739992][ T4212] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  180.748199][ T4214] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  180.753853][ T4212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.779699][ T4212] usb 6-1: Product: syz
[  180.783908][ T4212] usb 6-1: Manufacturer: syz
[  180.801060][ T4214] usb 7-1: USB disconnect, device number 2
[  180.819219][ T4212] usb 6-1: SerialNumber: syz
[  180.867098][ T5724] loop2: detected capacity change from 0 to 1024
[  180.891869][ T4212] usb 6-1: config 0 descriptor??
[  180.918770][ T5695] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  180.925861][ T5695] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  180.964350][ T5724] EXT4-fs (loop2): Ignoring removed orlov option
[  180.973474][ T5724] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  180.986324][ T4212] smsc95xx v2.0.0
[  181.049185][ T5724] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  181.119269][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.223277][ T5695] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  181.319741][ T5695] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  181.352402][ T5737] loop1: detected capacity change from 0 to 2048
[  182.710822][ T5748] loop6: detected capacity change from 0 to 256
[  182.728206][ T4212] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  182.767912][ T4212] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  184.437587][ T5748] exfat: Deprecated parameter 'utf8'
[  184.447301][ T5748] exfat: Deprecated parameter 'namecase'
[  184.453388][ T5748] exfat: Bad value for 'namecase'
[  184.483545][ T5737] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1.
[  184.518210][ T4212] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71
[  184.548176][ T4212] smsc95xx: probe of 6-1:0.67 failed with error -71
[  184.569961][ T4212] usb 6-1: USB disconnect, device number 4
[  184.777095][ T5787] loop2: detected capacity change from 0 to 128
[  185.038503][ T1108] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  185.158737][ T4212] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  185.507131][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'.
[  185.532266][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'.
[  185.689260][ T1108] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  185.759816][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.779481][ T4212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.907340][ T4212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.265268][ T4246] Bluetooth: hci0: command 0x0406 tx timeout
[  186.278673][ T4246] Bluetooth: hci3: command 0x0406 tx timeout
[  186.284872][ T4246] Bluetooth: hci2: command 0x0406 tx timeout
[  186.565124][ T5811] loop2: detected capacity change from 0 to 256
[  187.948212][ T4212] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  187.963801][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  187.981099][ T4212] usb 2-1: SerialNumber: syz
[  187.999049][ T1108] usb 7-1: config 0 descriptor??
[  188.058269][ T1108] usb 7-1: can't set config #0, error -71
[  188.075355][ T1108] usb 7-1: USB disconnect, device number 3
[  188.125958][ T5819] loop5: detected capacity change from 0 to 8
[  188.297199][ T5821] loop6: detected capacity change from 0 to 1024
[  189.136686][ T4212] usb 2-1: can't set config #1, error -71
[  189.149729][ T4212] usb 2-1: USB disconnect, device number 10
[  189.195640][ T5821] EXT4-fs (loop6): Ignoring removed orlov option
[  189.274931][ T5854] SQUASHFS error: Failed to read block 0x260685: -5
[  189.281727][ T5854] SQUASHFS error: Unable to read metadata cache entry [260685]
[  189.281816][ T5821] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  189.289394][ T5854] SQUASHFS error: Unable to read directory block [260685:0]
[  189.624286][ T5821] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  189.748108][ T4214] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  190.308381][ T4214] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  190.317250][ T4214] usb 2-1: config 0 has no interface number 0
[  190.323736][ T4214] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  190.335456][ T4214] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  190.505633][ T5874] loop5: detected capacity change from 0 to 2048
[  190.653269][ T5879] loop6: detected capacity change from 0 to 512
[  190.730844][ T4214] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  190.741529][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.749707][ T4214] usb 2-1: Product: syz
[  190.753881][ T4214] usb 2-1: Manufacturer: syz
[  190.778151][ T4214] usb 2-1: SerialNumber: syz
[  191.266508][ T4214] usb 2-1: config 0 descriptor??
[  191.748874][ T5879] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.761242][ T5874] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.422: bad orphan inode 8192
[  192.270604][ T5856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  192.277789][ T5856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  192.285827][ T5879] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.777624][ T5874] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.970473][ T4214] usb 2-1: can't set config #0, error -71
[  193.006446][ T4214] usb 2-1: USB disconnect, device number 11
[  193.033241][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  193.045939][   T26] audit: type=1804 audit(1734729388.057:8): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.425" name="/newroot/10/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  193.109740][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  193.294779][ T5879] Quota error (device loop6): write_blk: dquota write failed
[  193.645554][ T5879] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  193.943867][ T5879] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.425: Failed to acquire dquot type 1
[  193.958261][   T26] audit: type=1804 audit(1734729388.267:9): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.425" name="/newroot/10/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  194.201249][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.207598][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.218063][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  194.588628][ T1108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.636011][ T1108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.938892][ T1108] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  195.267946][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  195.277820][ T1108] usb 6-1: SerialNumber: syz
[  195.709059][ T1108] usb 6-1: 0:2 : does not exist
[  195.882378][ T1108] usb 6-1: unit 255 not found!
[  196.090962][ T5947] loop6: detected capacity change from 0 to 512
[  196.098341][ T1108] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  196.128731][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'.
[  196.158686][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'.
[  196.194321][ T5947] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  196.243344][ T1108] usb 6-1: USB disconnect, device number 5
[  196.258675][ T5947] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.686270][ T5969] loop2: detected capacity change from 0 to 512
[  197.809603][ T5973] loop6: detected capacity change from 0 to 16
[  197.827843][ T5969] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  197.841373][ T5969] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.882915][ T5973] erofs: (device loop6): mounted with root inode @ nid 36.
[  198.448404][ T5973] attempt to access beyond end of device
[  198.448404][ T5973] loop6: rw=0, want=34359738368, limit=16
[  198.958087][   T26] audit: type=1804 audit(1734729393.957:10): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.448" name="/newroot/88/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  199.091108][   T26] audit: type=1804 audit(1734729393.967:11): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.448" name="/newroot/88/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  199.252232][ T5987] kvm: emulating exchange as write
[  199.553282][ T6010] loop1: detected capacity change from 0 to 8
[  199.580961][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'.
[  199.748065][ T6012] SQUASHFS error: Failed to read block 0x260685: -5
[  199.754791][ T6012] SQUASHFS error: Unable to read metadata cache entry [260685]
[  199.762515][ T6012] SQUASHFS error: Unable to read directory block [260685:0]
[  200.067360][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'.
[  202.105979][   T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  202.482271][ T6048] loop1: detected capacity change from 0 to 512
[  202.538263][   T13] usb 5-1: device not accepting address 12, error -71
[  202.665396][ T6059] loop6: detected capacity change from 0 to 128
[  204.468525][ T6048] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  204.488022][ T1108] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  204.579329][ T6048] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.138922][ T1108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.194005][ T1108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.510239][ T1108] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  205.689479][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  205.740091][ T1108] usb 6-1: SerialNumber: syz
[  205.828671][ T1108] usb 6-1: can't set config #1, error -71
[  205.877755][ T1108] usb 6-1: USB disconnect, device number 6
[  206.201220][ T5326] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  206.362772][ T6108] loop6: detected capacity change from 0 to 8
[  208.618043][ T5326] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  208.878792][ T6129] loop1: detected capacity change from 0 to 128
[  209.208688][ T5326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.230186][ T5326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.348491][ T5326] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  209.371462][ T5326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  209.470147][ T5326] usb 5-1: SerialNumber: syz
[  209.841407][ T5326] usb 5-1: 0:2 : does not exist
[  209.846374][ T5326] usb 5-1: unit 255 not found!
[  210.078553][ T5326] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  210.140572][ T5326] usb 5-1: USB disconnect, device number 14
[  210.201806][ T6162] loop2: detected capacity change from 0 to 256
[  210.340514][ T6162] FAT-fs (loop2): Directory bread(block 64) failed
[  210.378531][ T6162] FAT-fs (loop2): Directory bread(block 65) failed
[  210.396060][ T6162] FAT-fs (loop2): Directory bread(block 66) failed
[  210.425858][ T6162] FAT-fs (loop2): Directory bread(block 67) failed
[  210.455740][ T6162] FAT-fs (loop2): Directory bread(block 68) failed
[  210.488097][ T6162] FAT-fs (loop2): Directory bread(block 69) failed
[  210.544274][ T6162] FAT-fs (loop2): Directory bread(block 70) failed
[  210.602998][ T6162] FAT-fs (loop2): Directory bread(block 71) failed
[  210.735984][ T6162] FAT-fs (loop2): Directory bread(block 72) failed
[  210.921115][ T6162] FAT-fs (loop2): Directory bread(block 73) failed
[  212.953308][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.316723][ T6212] loop6: detected capacity change from 0 to 8
[  213.336201][ T6213] loop2: detected capacity change from 0 to 512
[  213.467217][ T6219] SQUASHFS error: Failed to read block 0x260685: -5
[  213.474171][ T6219] SQUASHFS error: Unable to read metadata cache entry [260685]
[  213.482098][ T6219] SQUASHFS error: Unable to read directory block [260685:0]
[  213.997460][ T6213] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  214.259075][ T6213] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.469595][   T13] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  216.298221][ T4216] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  216.401412][ T6237] loop1: detected capacity change from 0 to 2048
[  216.534676][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.509'.
[  216.668321][ T4216] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  216.676534][ T4216] usb 5-1: config 0 has no interface number 0
[  216.681890][ T6237] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  216.685860][ T4216] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  216.714035][ T4216] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  216.723556][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.740375][ T4216] usb 5-1: config 0 descriptor??
[  216.781989][ T4216] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input6
[  216.986673][ T4216] usb 5-1: USB disconnect, device number 15
[  217.135725][ T6270] loop2: detected capacity change from 0 to 764
[  217.168360][ T5326] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  218.004503][ T6281] loop1: detected capacity change from 0 to 8
[  218.028259][ T5326] usb 6-1: Using ep0 maxpacket: 16
[  218.048896][ T4214] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  218.178371][ T5326] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  218.188179][ T5326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.200271][ T5326] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.648538][ T4214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.659592][ T4214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.669769][ T5326] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  218.677266][ T6289] SQUASHFS error: Failed to read block 0x260685: -5
[  218.679077][ T5326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.737378][ T6289] SQUASHFS error: Unable to read metadata cache entry [260685]
[  218.764411][ T5326] usb 6-1: Product: syz
[  218.768751][ T5326] usb 6-1: Manufacturer: syz
[  218.773458][ T5326] usb 6-1: SerialNumber: syz
[  218.786675][ T6289] SQUASHFS error: Unable to read directory block [260685:0]
[  218.808218][ T4214] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  218.843198][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  218.879930][ T4214] usb 7-1: SerialNumber: syz
[  219.343544][ T5326] usb 6-1: 0:2 : does not exist
[  220.484778][ T1110] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  220.529248][ T6328] loop2: detected capacity change from 0 to 128
[  221.480633][ T1110] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  221.761777][ T4214] usb 7-1: 0:2 : does not exist
[  221.767679][ T4214] usb 7-1: unit 255 not found!
[  221.860620][ T5326] usb 6-1: USB disconnect, device number 7
[  221.948644][ T4247] Bluetooth: hci1: command 0x0406 tx timeout
[  222.344481][ T1110] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  222.368570][ T4214] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  222.388654][ T1110] usb 2-1: config 0 has no interface number 0
[  222.394790][ T1110] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  222.582801][ T4214] usb 7-1: USB disconnect, device number 4
[  223.056023][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.121374][ T1110] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  223.188004][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.241820][ T1110] usb 2-1: config 0 descriptor??
[  223.321061][ T1110] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input7
[  223.488156][ T4214] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  223.534517][ T1110] usb 2-1: USB disconnect, device number 12
[  223.558178][ T5326] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  223.838381][ T5326] usb 3-1: Using ep0 maxpacket: 8
[  223.908589][ T4214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.923014][ T4214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.999419][ T5326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.017111][ T5326] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  224.032914][ T4214] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  224.046379][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  224.055834][ T4214] usb 7-1: SerialNumber: syz
[  224.208493][ T5326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  224.227256][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  224.288192][ T5326] usb 3-1: SerialNumber: syz
[  224.378694][ T5326] cdc_ether: probe of 3-1:1.0 failed with error -22
[  224.400969][ T4214] usb 7-1: 0:2 : does not exist
[  224.406012][ T4214] usb 7-1: unit 255 not found!
[  224.600546][   T13] usb 3-1: USB disconnect, device number 7
[  224.623096][ T6381] loop1: detected capacity change from 0 to 512
[  224.649354][ T4214] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  224.733003][ T6381] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none.
[  224.740550][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  224.762483][ T6381] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  224.765983][ T4214] usb 7-1: USB disconnect, device number 5
[  225.385798][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.301730][ T6401] loop1: detected capacity change from 0 to 8
[  226.487664][ T6408] SQUASHFS error: Failed to read block 0x260685: -5
[  226.798063][ T6408] SQUASHFS error: Unable to read metadata cache entry [260685]
[  226.910888][ T6408] SQUASHFS error: Unable to read directory block [260685:0]
[  227.138197][ T1110] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  227.548520][ T1110] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  227.565321][ T6423] capability: warning: `syz.6.557' uses deprecated v2 capabilities in a way that may be insecure
[  227.571670][ T1110] usb 3-1: config 0 has no interface number 0
[  227.691753][ T1110] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  227.761811][ T1110] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  227.781795][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.848233][ T1110] usb 3-1: config 0 descriptor??
[  227.901039][ T1110] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input8
[  227.964735][ T6424] loop6: detected capacity change from 0 to 4096
[  228.208640][ T6424] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  228.218939][ T1110] usb 3-1: USB disconnect, device number 8
[  228.231353][ T6424] UDF-fs: Scanning with blocksize 512 failed
[  228.248109][ T4214] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  228.289457][ T6424] UDF-fs: warning (device loop6): udf_fill_super: No fileset found
[  228.617273][ T6434] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  228.626891][ T6434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  228.652593][ T4214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.665355][ T4214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.748317][ T4214] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  228.876702][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.895416][ T4214] usb 6-1: SerialNumber: syz
[  229.991339][ T4214] usb 6-1: 0:2 : does not exist
[  229.997795][ T4214] usb 6-1: unit 255 not found!
[  230.700104][ T6453] loop2: detected capacity change from 0 to 8
[  230.799824][ T6459] SQUASHFS error: Failed to read block 0x260685: -5
[  230.827119][ T6459] SQUASHFS error: Unable to read metadata cache entry [260685]
[  230.896083][ T6459] SQUASHFS error: Unable to read directory block [260685:0]
[  230.960487][ T4214] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  231.012027][ T6460] futex_wake_op: syz.1.569 tries to shift op by -1; fix this program
[  231.278625][ T4214] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  231.387855][ T4214] usb 6-1: USB disconnect, device number 8
[  231.819436][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.058052][ T4214] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  233.448955][ T4214] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[  233.457433][ T4214] usb 6-1: config 0 has no interface number 0
[  233.465550][ T4214] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  233.476346][ T4214] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  233.487491][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.526172][ T4214] usb 6-1: config 0 descriptor??
[  233.671344][ T4214] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input9
[  233.917541][ T4214] usb 6-1: USB disconnect, device number 9
[  234.835867][   T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  234.869842][ T6496] loop2: detected capacity change from 0 to 8
[  234.885187][ T6499] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  234.894908][ T6499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  235.208724][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.245681][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  235.348942][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  235.363557][ T6508] SQUASHFS error: Failed to read block 0x260685: -5
[  235.376073][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  235.396716][ T6508] SQUASHFS error: Unable to read metadata cache entry [260685]
[  235.416343][   T13] usb 2-1: SerialNumber: syz
[  235.431947][ T6508] SQUASHFS error: Unable to read directory block [260685:0]
[  235.664899][    C0] hrtimer: interrupt took 722472 ns
[  235.788628][   T13] usb 2-1: 0:2 : does not exist
[  235.812614][   T13] usb 2-1: unit 255 not found!
[  236.038404][   T13] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  236.378366][   T13] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[  236.565604][   T13] usb 2-1: USB disconnect, device number 13
[  237.163015][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.842805][ T6545] loop1: detected capacity change from 0 to 8
[  237.963475][ T6549] SQUASHFS error: Failed to read block 0x260685: -5
[  237.997710][ T6549] SQUASHFS error: Unable to read metadata cache entry [260685]
[  238.229850][ T6549] SQUASHFS error: Unable to read directory block [260685:0]
[  238.579610][ T6554] netlink: 'syz.6.600': attribute type 3 has an invalid length.
[  238.664447][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.600'.
[  238.918141][   T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  238.940302][ T6559] loop6: detected capacity change from 0 to 128
[  239.066421][ T6565] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  239.075146][ T6565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  239.301954][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.339787][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  239.514703][   T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  239.602186][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  239.637317][   T13] usb 5-1: SerialNumber: syz
[  239.951367][   T13] usb 5-1: 0:2 : does not exist
[  239.957047][   T13] usb 5-1: unit 255 not found!
[  240.178223][   T13] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  240.282202][ T6580] loop1: detected capacity change from 0 to 8
[  240.388586][   T13] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5)
[  240.559004][ T6583] SQUASHFS error: Failed to read block 0x260685: -5
[  240.565868][ T6583] SQUASHFS error: Unable to read metadata cache entry [260685]
[  240.569806][   T13] usb 5-1: USB disconnect, device number 16
[  240.573839][ T6583] SQUASHFS error: Unable to read directory block [260685:0]
[  240.942828][ T6591] netlink: 'syz.5.613': attribute type 3 has an invalid length.
[  240.952412][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.008067][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.613'.
[  241.452191][ T6606] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  241.468217][ T6606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  241.858153][ T4212] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  241.996136][ T6619] loop1: detected capacity change from 0 to 128
[  242.758357][ T4212] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.788296][ T4212] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  242.898263][ T4212] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  242.916821][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  242.935436][ T4212] usb 7-1: SerialNumber: syz
[  242.967255][ T6635] loop2: detected capacity change from 0 to 512
[  243.039741][ T6638] netlink: 'syz.1.629': attribute type 3 has an invalid length.
[  243.053718][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'.
[  243.173005][ T6635] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[  243.261678][ T4212] usb 7-1: 0:2 : does not exist
[  243.276960][ T4212] usb 7-1: unit 255 not found!
[  243.293079][ T6635] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.437847][ T6649] loop1: detected capacity change from 0 to 256
[  243.478299][ T4212] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  243.511087][ T6649] exfat: Unknown parameter '��S�h_�&�a���^��@RY���cayr��FzQ>P߁��*ٹ�V��8��d|�C��p�I��7�7�"�T�U��T��CH{W��.H K;�^�j�_�]�7�5�q�Y�b�Y���F'
[  243.678356][ T4212] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[  243.734624][ T4212] usb 7-1: USB disconnect, device number 6
[  243.770813][ T6658] loop2: detected capacity change from 0 to 1024
[  243.821791][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.924404][ T6660] loop6: detected capacity change from 0 to 512
[  244.048278][ T6660] EXT4-fs (loop6): Test dummy encryption mode enabled
[  244.097506][ T6660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee01d, mo2=0002]
[  244.113435][ T6658] loop2: detected capacity change from 0 to 1024
[  244.262396][ T6660] System zones: 1-12
[  244.267434][ T6660] EXT4-fs (loop6): orphan cleanup on readonly fs
[  244.298353][ T6660] EXT4-fs error (device loop6): __ext4_iget:4872: inode #11: block 393240: comm syz.6.637: invalid block
[  244.375612][ T6660] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.637: couldn't read orphan inode 11 (err -117)
[  244.435437][ T4316] hfsplus: b-tree write err: -5, ino 4
[  244.466017][ T6660] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodiscard,nombcache,test_dummy_encryption=v1,inode_readahead_blks=0x0000000000000002,errors=continue. Quota mode: writeback.
[  245.115167][ T6673] loop2: detected capacity change from 0 to 128
[  245.994193][ T6687] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  246.015345][ T6687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  246.166951][ T6692] netlink: 'syz.2.644': attribute type 3 has an invalid length.
[  246.224532][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'.
[  246.698306][   T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  247.098174][   T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.131899][   T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.258376][   T21] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  247.296128][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  247.384377][   T21] usb 5-1: SerialNumber: syz
[  247.399294][ T6713] loop6: detected capacity change from 0 to 128
[  247.727371][   T21] usb 5-1: 0:2 : does not exist
[  247.751109][   T21] usb 5-1: unit 255 not found!
[  247.982059][   T21] usb 5-1: USB disconnect, device number 17
[  248.279347][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.631232][ T4214] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  248.898156][ T4214] usb 7-1: Using ep0 maxpacket: 8
[  249.028564][ T4214] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  249.048020][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.081128][ T4214] usb 7-1: config 0 descriptor??
[  249.373886][ T6735] loop1: detected capacity change from 0 to 128
[  249.411777][ T6737] netlink: 'syz.4.662': attribute type 3 has an invalid length.
[  249.412016][ T6739] loop2: detected capacity change from 0 to 8
[  249.428728][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'.
[  249.618253][ T4212] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  249.631527][ T6746] SQUASHFS error: Failed to read block 0x260685: -5
[  249.638277][ T6746] SQUASHFS error: Unable to read metadata cache entry [260685]
[  249.645852][ T6746] SQUASHFS error: Unable to read directory block [260685:0]
[  249.817222][ T6750] loop1: detected capacity change from 0 to 2048
[  250.034031][ T6750] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback.
[  250.108171][ T6750] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.668: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  250.195060][ T6750] EXT4-fs (loop1): Remounting filesystem read-only
[  250.231053][ T6754] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.668: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  250.273813][ T6754] EXT4-fs (loop1): Remounting filesystem read-only
[  250.418180][ T4212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.457999][ T4212] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.569225][ T4212] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  250.619376][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  250.686346][ T4212] usb 6-1: SerialNumber: syz
[  250.879438][ T4214] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  250.898917][ T4214] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  251.021016][ T4212] usb 6-1: 0:2 : does not exist
[  251.049291][ T4212] usb 6-1: unit 255 not found!
[  251.065487][ T4214] asix: probe of 7-1:0.0 failed with error -71
[  251.096237][ T4214] usb 7-1: USB disconnect, device number 7
[  251.120635][ T4212] usb 6-1: USB disconnect, device number 10
[  251.360063][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.833376][ T6791] loop6: detected capacity change from 0 to 512
[  253.242981][ T6791] EXT4-fs (loop6): 1 orphan inode deleted
[  253.270349][ T6791] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,usrjquota=,nobarrier,,errors=continue. Quota mode: none.
[  253.548201][ T4211] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  253.556478][ T4214] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  253.683820][ T6813] loop6: detected capacity change from 0 to 128
[  253.848226][ T4214] usb 2-1: Using ep0 maxpacket: 8
[  253.999086][ T4211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.999174][ T4214] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  254.018994][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.040041][ T4214] usb 2-1: config 0 descriptor??
[  254.161870][ T4211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.318588][ T4211] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  254.338014][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  254.373144][ T4211] usb 5-1: SerialNumber: syz
[  254.701626][ T4211] usb 5-1: 0:2 : does not exist
[  254.706577][ T4211] usb 5-1: unit 255 not found!
[  254.760285][ T4211] usb 5-1: USB disconnect, device number 18
[  254.772575][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.640144][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.646633][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.654998][ T4214] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  255.671547][ T4214] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  255.688689][ T4214] asix: probe of 2-1:0.0 failed with error -71
[  255.712260][ T4214] usb 2-1: USB disconnect, device number 14
[  256.974521][ T6854] loop1: detected capacity change from 0 to 128
[  258.218033][ T4211] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  258.618991][ T4211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.658155][ T4211] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.693730][   T26] audit: type=1326 audit(1734729453.707:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4add73d29 code=0x0
[  258.778431][ T4211] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  258.812354][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  258.828018][ T4211] usb 3-1: SerialNumber: syz
[  259.069836][   T13] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  259.308087][   T13] usb 6-1: Using ep0 maxpacket: 8
[  259.438372][   T13] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  259.507563][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.785905][   T13] usb 6-1: config 0 descriptor??
[  259.930882][ T4211] usb 3-1: 0:2 : does not exist
[  259.968015][ T4211] usb 3-1: unit 5 not found!
[  260.019853][ T4211] usb 3-1: USB disconnect, device number 9
[  260.752187][ T6908] loop1: detected capacity change from 0 to 128
[  260.787727][ T6904] loop6: detected capacity change from 0 to 8
[  260.796517][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.997165][ T6915] SQUASHFS error: Failed to read block 0x260685: -5
[  261.120703][ T6915] SQUASHFS error: Unable to read metadata cache entry [260685]
[  261.158236][ T4211] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  261.301407][ T6915] SQUASHFS error: Unable to read directory block [260685:0]
[  261.943079][   T13] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  261.966736][   T13] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  261.978071][ T4211] usb 2-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config
[  262.004871][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.028637][   T13] asix: probe of 6-1:0.0 failed with error -71
[  262.082906][   T13] usb 6-1: USB disconnect, device number 11
[  262.126266][ T4211] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  262.150193][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  262.177979][ T4211] usb 2-1: SerialNumber: syz
[  262.348120][ T4246] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  262.470884][ T4211] usb 2-1: 0:2 : does not exist
[  262.486126][ T4211] usb 2-1: unit 255 not found!
[  263.548088][ T4211] usb 2-1: 5:0: cannot get min/max values for control 17 (id 5)
[  263.568187][ T4246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.578535][ T4246] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  263.627176][ T4211] usb 2-1: USB disconnect, device number 15
[  263.686616][ T4246] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  263.710074][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  263.719983][ T4246] usb 5-1: SerialNumber: syz
[  263.949065][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.040942][ T4246] usb 5-1: 0:2 : does not exist
[  264.049089][ T4246] usb 5-1: unit 5 not found!
[  264.091065][ T4246] usb 5-1: USB disconnect, device number 19
[  264.402462][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.638327][ T4211] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  265.787764][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  266.078083][ T4211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.108009][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.198251][ T4211] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  266.217844][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  266.338174][ T1108] usb 3-1: Using ep0 maxpacket: 8
[  266.460950][ T1108] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  266.486918][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.601325][ T1108] usb 3-1: config 0 descriptor??
[  267.064632][ T4211] usb 2-1: SerialNumber: syz
[  267.402133][ T4211] usb 2-1: 0:2 : does not exist
[  267.407071][ T4211] usb 2-1: unit 5 not found!
[  267.523608][ T4211] usb 2-1: USB disconnect, device number 16
[  267.819541][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  267.971520][ T6992] loop6: detected capacity change from 0 to 8
[  268.004634][ T6994] loop1: detected capacity change from 0 to 128
[  268.061216][ T6992] SQUASHFS error: Failed to read block 0x260685: -5
[  268.150117][ T6992] SQUASHFS error: Unable to read metadata cache entry [260685]
[  268.228409][ T6992] SQUASHFS error: Unable to read directory block [260685:0]
[  268.358135][ T1108] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  268.394306][ T1108] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  268.451685][ T1108] asix: probe of 3-1:0.0 failed with error -71
[  268.538903][ T1108] usb 3-1: USB disconnect, device number 10
[  269.618046][ T4211] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  269.827395][ T1108] kernel write not supported for file /vcs1 (pid: 1108 comm: kworker/0:2)
[  269.918020][ T4211] usb 2-1: Using ep0 maxpacket: 16
[  270.058503][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.169223][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.425216][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  270.689161][ T4211] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  270.878256][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.920239][ T4211] usb 2-1: config 0 descriptor??
[  271.218163][ T4214] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  271.459917][ T4211] HID 045e:07da: Invalid code 65791 type 1
[  271.504763][ T4211] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input10
[  271.697530][ T4211] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  271.719070][ T4211] usb 2-1: USB disconnect, device number 17
[  271.828665][ T4214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.853539][ T4214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.978335][ T4214] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  271.987463][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  272.009607][ T4214] usb 7-1: SerialNumber: syz
[  272.310762][ T4214] usb 7-1: 0:2 : does not exist
[  272.315711][ T4214] usb 7-1: unit 5: unexpected type 0x03
[  272.328425][ T4214] usb 7-1: unit 4 not found!
[  272.409490][ T4214] usb 7-1: USB disconnect, device number 8
[  272.659510][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.078079][ T4214] Bluetooth: hci4: command 0x0406 tx timeout
[  273.288429][ T7069] loop6: detected capacity change from 0 to 128
[  273.538971][ T7069] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  273.661117][ T7069] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.298581][ T7088] loop2: detected capacity change from 0 to 128
[  274.778791][ T4317] attempt to access beyond end of device
[  274.778791][ T4317] loop2: rw=1, want=337, limit=128
[  274.807022][   T13] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  275.068018][   T13] usb 7-1: Using ep0 maxpacket: 16
[  275.188208][   T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.228249][   T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.248547][   T13] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  275.273911][   T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  275.282625][   T13] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  275.307463][   T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.337526][   T13] usb 7-1: config 0 descriptor??
[  275.344855][ T7091] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  275.830862][   T13] HID 045e:07da: Invalid code 65791 type 1
[  275.868200][   T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.869606][   T13] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input11
[  275.889211][   T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  275.957046][   T13] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  275.998384][   T21] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  276.007559][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  276.783650][   T13] usb 7-1: USB disconnect, device number 9
[  276.848036][   T21] usb 3-1: SerialNumber: syz
[  277.159399][   T21] usb 3-1: 0:2 : does not exist
[  277.174777][   T21] usb 3-1: unit 5: unexpected type 0x03
[  277.213159][   T21] usb 3-1: unit 4 not found!
[  277.278207][   T21] usb 3-1: USB disconnect, device number 11
[  277.469217][ T7129] loop6: detected capacity change from 0 to 128
[  277.563729][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.263885][ T7142] loop6: detected capacity change from 0 to 128
[  278.559365][ T7148] loop2: detected capacity change from 0 to 1024
[  278.624883][ T4474] attempt to access beyond end of device
[  278.624883][ T4474] loop6: rw=1, want=561, limit=128
[  278.834460][ T7150] loop6: detected capacity change from 0 to 16
[  278.932644][ T7150] erofs: (device loop6): mounted with root inode @ nid 36.
[  280.678207][ T4246] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  280.804824][ T7169] loop1: detected capacity change from 0 to 512
[  280.917317][ T7169] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  280.954516][ T7169] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.966654][ T4246] usb 5-1: Using ep0 maxpacket: 16
[  281.108289][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.158016][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.167878][ T4246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  281.191333][ T7177] loop2: detected capacity change from 0 to 128
[  281.218688][ T4246] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  281.254143][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.283631][ T4246] usb 5-1: config 0 descriptor??
[  281.498407][   T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  281.820998][ T4246] HID 045e:07da: Invalid code 65791 type 1
[  281.842217][ T4246] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input12
[  281.858353][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.868958][ T4246] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  281.898031][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.018316][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  282.037786][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  282.055583][   T13] usb 2-1: SerialNumber: syz
[  282.084980][ T4246] usb 5-1: USB disconnect, device number 20
[  282.360973][   T13] usb 2-1: 0:2 : does not exist
[  282.377385][   T13] usb 2-1: unit 5: unexpected type 0x03
[  282.383120][   T13] usb 2-1: unit 4 not found!
[  282.446292][   T13] usb 2-1: USB disconnect, device number 18
[  282.457248][ T7194] loop2: detected capacity change from 0 to 16
[  282.581258][ T7194] erofs: (device loop2): mounted with root inode @ nid 36.
[  282.699005][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  282.970807][ T7202] loop1: detected capacity change from 0 to 512
[  283.078043][   T13] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  283.137172][ T7202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  283.196327][ T7209] loop2: detected capacity change from 0 to 8
[  283.213980][ T7202] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.336277][   T13] usb 5-1: Using ep0 maxpacket: 16
[  283.341981][ T7211] SQUASHFS error: Failed to read block 0x260685: -5
[  283.348679][ T7211] SQUASHFS error: Unable to read metadata cache entry [260685]
[  283.356298][ T7211] SQUASHFS error: Unable to read directory block [260685:0]
[  283.530333][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[  283.596875][ T7213] loop1: detected capacity change from 0 to 128
[  283.628877][   T13] usb 5-1: config 1 interface 0 altsetting 71 endpoint 0x81 has invalid maxpacket 1552, setting to 1024
[  283.658424][   T13] usb 5-1: config 1 interface 0 has no altsetting 0
[  283.828782][   T13] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40
[  283.880461][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.968234][   T13] usb 5-1: Product: syz
[  284.000623][   T13] usb 5-1: Manufacturer: syz
[  284.067999][   T13] usb 5-1: SerialNumber: syz
[  284.118531][ T7199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  284.542692][ T7221] loop1: detected capacity change from 0 to 2048
[  284.578146][   T13] usbhid 5-1:1.0: can't add hid device: -71
[  284.584152][   T13] usbhid: probe of 5-1:1.0 failed with error -71
[  284.625904][   T13] usb 5-1: USB disconnect, device number 21
[  284.689044][ T7221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.536984][ T7235] loop6: detected capacity change from 0 to 128
[  285.608075][ T4247] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  285.693381][ T7235] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  285.734058][ T7235] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  285.883995][ T7235] syz.6.833 (pid 7235) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  285.908046][ T4247] usb 6-1: Using ep0 maxpacket: 16
[  286.028344][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.070825][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.134491][ T4247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  286.191466][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'.
[  286.225559][ T4247] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  286.277627][ T7235] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  286.296300][ T4247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.307522][ T1108] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  286.309754][ T7243] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes)
[  286.329659][ T7251] loop1: detected capacity change from 0 to 128
[  286.337152][ T4247] usb 6-1: config 0 descriptor??
[  286.709291][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.950885][ T4247] HID 045e:07da: Invalid code 65791 type 1
[  286.971668][ T4247] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input13
[  286.985428][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.013554][ T4247] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  287.119075][ T1108] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  287.142228][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  287.176254][ T1108] usb 3-1: SerialNumber: syz
[  287.295959][ T4158] usb 6-1: USB disconnect, device number 12
[  287.382127][ T7266] loop1: detected capacity change from 0 to 8
[  287.491015][ T1108] usb 3-1: 0:2 : does not exist
[  287.502408][ T7269] loop6: detected capacity change from 0 to 2048
[  287.518174][ T1108] usb 3-1: unit 5: unexpected type 0x03
[  287.523776][ T1108] usb 3-1: unit 4 not found!
[  287.572986][ T7270] SQUASHFS error: Failed to read block 0x260685: -5
[  287.579839][ T7270] SQUASHFS error: Unable to read metadata cache entry [260685]
[  287.583819][ T1108] usb 3-1: USB disconnect, device number 12
[  287.587458][ T7270] SQUASHFS error: Unable to read directory block [260685:0]
[  287.675591][ T7269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.197898][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.580527][ T7280] loop2: detected capacity change from 0 to 512
[  288.970367][ T7280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  289.050268][ T7280] EXT4-fs (loop2): 1 truncate cleaned up
[  289.055988][ T7280] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  290.410860][ T7291] fuse: Unknown parameter '0xffffffffffffffff'
[  290.415454][ T7288] loop2: detected capacity change from 0 to 128
[  290.502002][ T7288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  290.563613][ T7288] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  290.586725][   T26] audit: type=1326 audit(1734729485.597:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  290.641346][ T7297] loop1: detected capacity change from 0 to 16
[  290.678565][   T26] audit: type=1326 audit(1734729485.687:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  290.708484][ T4247] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  290.757316][   T26] audit: type=1326 audit(1734729485.687:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  290.771736][ T7297] erofs: (device loop1): mounted with root inode @ nid 36.
[  290.830099][ T7288] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes)
[  291.005262][   T26] audit: type=1326 audit(1734729485.687:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  291.178282][ T4247] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  291.197534][   T26] audit: type=1326 audit(1734729485.687:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  291.220175][ T4247] usb 7-1: config 1 has no interface number 0
[  291.220404][ T4247] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.220487][ T4247] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  291.220622][ T4247] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[  291.410381][ T4247] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.214571][ T4247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.247844][ T4247] usb 7-1: Product: syz
[  292.252359][ T4247] usb 7-1: Manufacturer: syz
[  292.256985][ T4247] usb 7-1: SerialNumber: syz
[  292.268074][   T26] audit: type=1326 audit(1734729485.687:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  292.294080][   T26] audit: type=1326 audit(1734729485.687:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  292.377058][   T26] audit: type=1326 audit(1734729485.687:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  292.419599][   T26] audit: type=1326 audit(1734729485.687:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  292.457244][   T26] audit: type=1326 audit(1734729485.687:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  293.219911][ T4247] cdc_ncm 7-1:1.1: bind() failure
[  293.438549][ T4247] usb 7-1: USB disconnect, device number 10
[  294.088006][ T4158] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  294.167995][   T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  294.328027][ T4158] usb 3-1: Using ep0 maxpacket: 16
[  294.448275][ T4158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.467987][ T4158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.477764][ T4158] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  294.497991][ T4158] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  294.507074][ T4158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.533732][ T4158] usb 3-1: config 0 descriptor??
[  294.548231][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.567995][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  294.649429][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  294.668184][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  294.676207][   T13] usb 2-1: SerialNumber: syz
[  295.901089][   T13] usb 2-1: 0:2 : does not exist
[  295.906045][   T13] usb 2-1: unit 5: unexpected type 0x03
[  295.928077][   T13] usb 2-1: unit 4 not found!
[  295.943234][   T13] usb 2-1: USB disconnect, device number 19
[  295.982348][ T4158] HID 045e:07da: Invalid code 65791 type 1
[  296.031121][ T4158] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input14
[  296.090688][ T4158] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  296.158264][ T4158] usb 3-1: USB disconnect, device number 13
[  296.199691][ T7347] loop2: detected capacity change from 0 to 128
[  296.208529][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.928207][   T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  300.318442][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.333507][ T7395] loop6: detected capacity change from 0 to 128
[  300.349396][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  300.468236][   T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  300.495770][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  300.504483][   T13] usb 5-1: SerialNumber: syz
[  300.795648][ T7399] loop6: detected capacity change from 0 to 1024
[  300.810529][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  300.810545][   T26] audit: type=1326 audit(1734729495.827:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4add73d29 code=0x0
[  300.821369][   T13] usb 5-1: 0:2 : does not exist
[  300.849985][   T13] usb 5-1: unit 5: unexpected type 0x03
[  300.855685][   T13] usb 5-1: unit 4 not found!
[  300.883961][   T13] usb 5-1: USB disconnect, device number 22
[  300.902085][ T7399] EXT4-fs (loop6): Ignoring removed nobh option
[  300.957097][ T7399] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,,errors=continue. Quota mode: none.
[  300.992111][ T7407] loop2: detected capacity change from 0 to 2048
[  301.009796][ T7399] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #14: comm syz.6.880: attempt to clear invalid blocks 1886221359 len 1
[  301.108172][ T7407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.129012][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.535835][ T7424] loop6: detected capacity change from 0 to 256
[  302.350483][ T7430] loop1: detected capacity change from 0 to 128
[  302.469076][ T7432] loop6: detected capacity change from 0 to 8
[  303.554010][ T7437] SQUASHFS error: Failed to read block 0x260685: -5
[  303.560763][ T7437] SQUASHFS error: Unable to read metadata cache entry [260685]
[  303.568444][ T7437] SQUASHFS error: Unable to read directory block [260685:0]
[  304.048091][ T7430] EXT4-fs (loop1): Ignoring removed nobh option
[  304.121908][ T7430] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  304.163833][ T7430] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  304.256904][ T7443] loop2: detected capacity change from 0 to 128
[  305.915225][   T21] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  306.338605][   T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.588738][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.928304][   T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  306.958227][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  307.524701][   T21] usb 2-1: SerialNumber: syz
[  307.554098][ T4180] Bluetooth: min 0 < 6
[  307.861512][   T21] usb 2-1: 0:2 : does not exist
[  307.902842][   T21] usb 2-1: unit 5 not found!
[  308.751859][   T26] audit: type=1326 audit(1734729503.767:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda35daed29 code=0x0
[  308.770273][   T21] usb 2-1: USB disconnect, device number 20
[  309.138078][ T4211] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  309.164695][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.423939][ T4211] usb 3-1: Using ep0 maxpacket: 8
[  309.495418][ T7509] loop1: detected capacity change from 0 to 8
[  309.638208][ T4246] Bluetooth: hci1: command 0x2021 tx timeout
[  309.678555][ T4211] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.715727][ T7511] SQUASHFS error: Failed to read block 0x260685: -5
[  309.722503][ T7511] SQUASHFS error: Unable to read metadata cache entry [260685]
[  309.730230][ T7511] SQUASHFS error: Unable to read directory block [260685:0]
[  309.859310][ T4211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  310.104645][ T4211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  310.898115][ T4211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  310.907239][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.943907][ T4211] usb 3-1: Product: ᕎ䍫쪊嚒漸샼涌餜쫷킈秵䖺뒣埁㤷襔嚐䟛९㔏처䚥痍杴ꍠ鮌Ｃ으晁皚ꘅ喧ꔉ灃먭쀖俷ਈ뽯者臐瑃녏﷧廏榉杠祐띻啂斕ᑪ폆伆Ζ걪岂뻸䕹ᒀ㩶痴럼Ἆ끡乄ӵ撨쟑씟㔑碙跲䒒迧㋘룅뙙㤠내ᗢዦÉ侸ォ䏯쓝፹≤
[  311.004462][ T4211] usb 3-1: Manufacturer: 㰁
[  311.010287][ T4211] usb 3-1: SerialNumber: 㱌
[  311.350599][ T7524] loop6: detected capacity change from 0 to 128
[  311.399105][ T7525] loop2: detected capacity change from 0 to 1024
[  311.453723][ T7525] EXT4-fs (loop2): Ignoring removed orlov option
[  311.534175][ T7525] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  313.131518][ T7525] EXT4-fs: error -4 creating inode table initialization thread
[  313.133113][ T7525] EXT4-fs (loop2): mount failed
[  313.291549][   T13] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  313.652274][   T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.652307][   T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.731909][   T13] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  313.731949][   T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  313.731974][   T13] usb 7-1: SerialNumber: syz
[  314.110881][   T13] usb 7-1: 0:2 : does not exist
[  314.115827][   T13] usb 7-1: unit 5 not found!
[  314.530125][ T4211] cdc_ncm 3-1:1.0: bind() failure
[  314.693149][ T4211] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  314.779950][ T4211] cdc_ncm 3-1:1.1: bind() failure
[  314.851142][ T4211] usb 3-1: USB disconnect, device number 14
[  315.639844][   T13] usb 7-1: USB disconnect, device number 11
[  317.159026][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  317.165352][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  317.468369][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.029075][ T5697] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  319.438361][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.504865][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.669490][ T7601] loop1: detected capacity change from 0 to 1024
[  319.688303][ T5697] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  319.710823][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  319.738082][ T5697] usb 3-1: SerialNumber: syz
[  319.889170][ T7601] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  320.797680][ T7618] loop6: detected capacity change from 0 to 1024
[  320.809017][ T5697] usb 3-1: 0:2 : does not exist
[  320.813947][ T5697] usb 3-1: unit 5 not found!
[  320.832134][ T5697] usb 3-1: USB disconnect, device number 15
[  321.142618][ T4314] hfsplus: b-tree write err: -5, ino 4
[  321.184150][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  321.327325][ T7631] loop2: detected capacity change from 0 to 128
[  321.386944][ T7634] loop6: detected capacity change from 0 to 8
[  322.235757][ T7639] SQUASHFS error: Failed to read block 0x260685: -5
[  322.243072][ T7639] SQUASHFS error: Unable to read metadata cache entry [260685]
[  322.251018][ T7639] SQUASHFS error: Unable to read directory block [260685:0]
[  322.473504][ T7631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  322.549387][ T7631] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  322.929282][ T7631] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.951: No space for directory leaf checksum. Please run e2fsck -D.
[  322.945736][ T7631] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.951: checksumming directory block 0
[  322.980012][ T7631] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.951: No space for directory leaf checksum. Please run e2fsck -D.
[  322.996497][ T7631] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.951: checksumming directory block 0
[  323.102638][ T7646] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.951: No space for directory leaf checksum. Please run e2fsck -D.
[  323.144736][ T7646] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.951: checksumming directory block 0
[  323.309383][ T7631] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.951: No space for directory leaf checksum. Please run e2fsck -D.
[  323.324308][ T7646] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.951: No space for directory leaf checksum. Please run e2fsck -D.
[  323.364365][ T7631] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.951: checksumming directory block 0
[  323.386265][ T7646] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.951: checksumming directory block 0
[  323.500291][ T7652] loop1: detected capacity change from 0 to 256
[  325.174135][ T7668] Cannot find del_set index 1 as target
[  325.725766][ T7684] loop2: detected capacity change from 0 to 2048
[  326.048854][ T7684] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none.
[  326.086919][   T26] audit: type=1326 audit(1734729521.097:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  326.131383][ T7684] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  326.158025][   T26] audit: type=1326 audit(1734729521.097:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  326.170280][ T7684] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  326.269874][ T7684] EXT4-fs (loop2): This should not happen!! Data will be lost
[  326.269874][ T7684] 
[  326.293361][   T26] audit: type=1326 audit(1734729521.147:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fda35daed29 code=0x7ffc0000
[  326.315953][ T7684] EXT4-fs (loop2): Total free blocks count 0
[  326.389308][ T7684] EXT4-fs (loop2): Free/Dirty block details
[  326.395527][   T26] audit: type=1326 audit(1734729521.147:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fda35daed63 code=0x7ffc0000
[  326.434187][ T7684] EXT4-fs (loop2): free_blocks=2415919104
[  326.453967][ T7684] EXT4-fs (loop2): dirty_blocks=16
[  326.474119][   T26] audit: type=1326 audit(1734729521.147:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda35dad7df code=0x7ffc0000
[  326.556698][ T7684] EXT4-fs (loop2): Block reservation details
[  326.848150][ T7684] EXT4-fs (loop2): i_reserved_data_blocks=1
[  326.904085][   T26] audit: type=1326 audit(1734729521.147:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fda35daedb7 code=0x7ffc0000
[  326.926775][   T26] audit: type=1326 audit(1734729521.147:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda35dad690 code=0x7ffc0000
[  327.940257][   T26] audit: type=1326 audit(1734729521.217:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda35dae92b code=0x7ffc0000
[  328.042960][   T26] audit: type=1326 audit(1734729521.217:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda35dae92b code=0x7ffc0000
[  328.114030][   T26] audit: type=1326 audit(1734729521.217:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda35de15e5 code=0x7ffc0000
[  330.427138][ T7738] loop6: detected capacity change from 0 to 8
[  330.884427][ T7743] loop1: detected capacity change from 0 to 2048
[  330.924116][ T7746] loop2: detected capacity change from 0 to 128
[  331.303886][ T7746] FAT-fs (loop2): Unrecognized mount option "0177777777777777777777700000000000000000003" or missing value
[  331.325439][ T7738] SQUASHFS error: Failed to read block 0x260685: -5
[  331.332401][ T7738] SQUASHFS error: Unable to read metadata cache entry [260685]
[  331.340068][ T7738] SQUASHFS error: Unable to read directory block [260685:0]
[  331.405695][ T7743] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none.
[  331.990353][ T7757] loop1: detected capacity change from 0 to 128
[  332.027438][ T4317] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.082451][ T7759] loop2: detected capacity change from 0 to 1024
[  332.145444][ T4317] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.245925][ T7759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  332.265525][ T4317] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.403034][ T4314] attempt to access beyond end of device
[  332.403034][ T4314] loop1: rw=1, want=649, limit=128
[  332.443363][ T4317] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.445751][ T4314] attempt to access beyond end of device
[  332.445751][ T4314] loop1: rw=1, want=1041, limit=128
[  332.543390][ T7768] loop2: detected capacity change from 0 to 128
[  332.553777][ T4314] attempt to access beyond end of device
[  332.553777][ T4314] loop1: rw=1, want=657, limit=128
[  332.880617][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  333.972779][ T7791] loop2: detected capacity change from 0 to 8
[  334.156909][ T7791] SQUASHFS error: Failed to read block 0x260685: -5
[  334.163658][ T7791] SQUASHFS error: Unable to read metadata cache entry [260685]
[  334.171354][ T7791] SQUASHFS error: Unable to read directory block [260685:0]
[  334.811090][ T7782] chnl_net:caif_netlink_parms(): no params data found
[  335.256030][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.264001][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.272855][ T7782] device bridge_slave_0 entered promiscuous mode
[  335.297595][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.318907][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.354676][ T7782] device bridge_slave_1 entered promiscuous mode
[  335.461156][ T4317] device hsr_slave_0 left promiscuous mode
[  335.488048][ T4317] device hsr_slave_1 left promiscuous mode
[  335.494578][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.508117][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.528694][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.536136][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.576986][ T4317] device bridge_slave_1 left promiscuous mode
[  335.603698][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.616720][ T4317] device bridge_slave_0 left promiscuous mode
[  335.628191][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.678351][ T7815] loop1: detected capacity change from 0 to 512
[  335.690720][ T4317] device veth1_macvtap left promiscuous mode
[  335.696782][ T4317] device veth0_macvtap left promiscuous mode
[  335.708761][ T7814] loop2: detected capacity change from 0 to 1024
[  335.729542][ T4317] device veth1_vlan left promiscuous mode
[  335.735476][ T4317] device veth0_vlan left promiscuous mode
[  335.774869][ T7817] loop6: detected capacity change from 0 to 2048
[  335.789605][ T7814] EXT4-fs (loop2): Ignoring removed bh option
[  335.795939][ T7814] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  335.867503][ T7814] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,i_version,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  335.906095][ T7815] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,user_xattr,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  335.958056][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  335.978748][ T7815] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.983699][ T7817] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none.
[  336.026472][ T7817] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  336.083851][ T7817] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  336.096382][ T7817] EXT4-fs (loop6): This should not happen!! Data will be lost
[  336.096382][ T7817] 
[  336.106246][ T7817] EXT4-fs (loop6): Total free blocks count 0
[  336.112524][ T7817] EXT4-fs (loop6): Free/Dirty block details
[  336.119256][ T7817] EXT4-fs (loop6): free_blocks=2415919104
[  336.125189][ T7817] EXT4-fs (loop6): dirty_blocks=16
[  336.130493][ T7817] EXT4-fs (loop6): Block reservation details
[  336.136656][ T7817] EXT4-fs (loop6): i_reserved_data_blocks=1
[  336.341056][ T7830] loop6: detected capacity change from 0 to 1024
[  336.385372][ T7832] loop1: detected capacity change from 0 to 764
[  336.435848][ T7830] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  336.439850][ T4317] team0 (unregistering): Port device team_slave_1 removed
[  336.579047][ T4317] team0 (unregistering): Port device team_slave_0 removed
[  336.641209][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.706523][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.020509][ T7846] fuse: Unknown parameter '0xffffffffffffffff'
[  338.055391][ T4247] Bluetooth: hci1: command 0x041b tx timeout
[  338.075397][ T7846] loop1: detected capacity change from 0 to 256
[  338.231733][ T4317] bond0 (unregistering): Released all slaves
[  338.381857][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.461009][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.650687][ T7782] team0: Port device team_slave_0 added
[  338.720651][ T7782] team0: Port device team_slave_1 added
[  338.836526][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.865029][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.900527][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.940984][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.955309][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.063015][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.146401][ T7782] device hsr_slave_0 entered promiscuous mode
[  339.180088][ T7782] device hsr_slave_1 entered promiscuous mode
[  339.202098][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.214538][ T7782] Cannot create hsr debugfs directory
[  339.943923][ T7782] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  339.979664][ T7782] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  339.990625][ T7782] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  340.013919][ T7782] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  340.118069][ T5697] Bluetooth: hci1: command 0x040f tx timeout
[  340.179887][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.228189][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  340.242290][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  340.253134][ T7782] 8021q: adding VLAN 0 to HW filter on device team0
[  340.294072][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  340.303406][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  340.330076][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.337170][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.368420][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  340.396374][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  340.417114][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  340.438726][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.445835][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.463992][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  340.484901][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  340.526072][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  340.544690][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  340.582155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  340.611201][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  340.641938][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  340.660573][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  340.687384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  340.752773][ T7782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.794187][ T7900] loop1: detected capacity change from 0 to 512
[  340.818551][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  340.846979][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  340.872109][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  340.981902][ T7900] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  341.010707][ T4212] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  341.065108][ T7900] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  341.158385][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  341.166774][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  341.191921][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.382759][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  341.438388][ T4212] usb 3-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config
[  341.460437][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  341.470920][ T4212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  341.489408][ T4212] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  341.521588][ T7924] device veth3 entered promiscuous mode
[  341.698268][ T4212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  341.713743][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.732142][ T4212] usb 3-1: Product: syz
[  341.750083][ T4212] usb 3-1: Manufacturer: syz
[  341.754723][ T4212] usb 3-1: SerialNumber: syz
[  341.849309][ T4212] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  341.868221][ T4212] cdc_ncm 3-1:1.0: bind() failure
[  341.882317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  341.915011][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  342.008229][ T4211] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  342.028617][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  342.056669][ T1108] usb 3-1: USB disconnect, device number 16
[  342.070681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  342.090246][ T7782] device veth0_vlan entered promiscuous mode
[  342.105026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  342.132439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  342.427682][ T5697] Bluetooth: hci1: command 0x0419 tx timeout
[  342.502235][ T7958] 
[  342.504692][ T7958] ======================================================
[  342.511720][ T7958] WARNING: possible circular locking dependency detected
[  342.518749][ T7958] 5.15.175-syzkaller #0 Not tainted
[  342.523954][ T7958] ------------------------------------------------------
[  342.531098][ T7958] syz.4.1030/7958 is trying to acquire lock:
[  342.537089][ T7958] ffff888025d5cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0
[  342.548199][ T7958] 
[  342.548199][ T7958] but task is already holding lock:
[  342.555576][ T7958] ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  342.565269][ T7958] 
[  342.565269][ T7958] which lock already depends on the new lock.
[  342.565269][ T7958] 
[  342.575688][ T7958] 
[  342.575688][ T7958] the existing dependency chain (in reverse order) is:
[  342.584760][ T7958] 
[  342.584760][ T7958] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  342.592778][ T7958]        lock_acquire+0x1db/0x4f0
[  342.597823][ T7958]        __mutex_lock_common+0x1da/0x25a0
[  342.603563][ T7958]        mutex_lock_nested+0x17/0x20
[  342.608960][ T7958]        rfkill_register+0x30/0x880
[  342.614177][ T7958]        hci_register_dev+0x4dd/0xa50
[  342.619566][ T7958]        vhci_create_device+0x310/0x590
[  342.625134][ T7958]        vhci_write+0x382/0x430
[  342.630013][ T7958]        vfs_write+0xacd/0xe50
[  342.634793][ T7958]        ksys_write+0x1a2/0x2c0
[  342.639660][ T7958]        do_syscall_64+0x3b/0xb0
[  342.644721][ T7958]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.651156][ T7958] 
[  342.651156][ T7958] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  342.659006][ T7958]        lock_acquire+0x1db/0x4f0
[  342.664049][ T7958]        __mutex_lock_common+0x1da/0x25a0
[  342.669872][ T7958]        mutex_lock_nested+0x17/0x20
[  342.675176][ T7958]        vhci_send_frame+0x8a/0xf0
[  342.680304][ T7958]        hci_send_frame+0x1af/0x2f0
[  342.685515][ T7958]        hci_tx_work+0xb2e/0x1a30
[  342.690550][ T7958]        process_one_work+0x8a1/0x10c0
[  342.696023][ T7958]        worker_thread+0xaca/0x1280
[  342.701235][ T7958]        kthread+0x3f6/0x4f0
[  342.705851][ T7958]        ret_from_fork+0x1f/0x30
[  342.710805][ T7958] 
[  342.710805][ T7958] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  342.720033][ T7958]        lock_acquire+0x1db/0x4f0
[  342.725085][ T7958]        __flush_work+0xeb/0x1a0
[  342.730053][ T7958]        hci_dev_do_close+0x20a/0x1070
[  342.735531][ T7958]        hci_unregister_dev+0x2d7/0x580
[  342.741091][ T7958]        vhci_release+0x73/0xc0
[  342.745965][ T7958]        __fput+0x3fe/0x8e0
[  342.750494][ T7958]        task_work_run+0x129/0x1a0
[  342.755633][ T7958]        do_exit+0x6a3/0x2480
[  342.760335][ T7958]        do_group_exit+0x144/0x310
[  342.765470][ T7958]        __x64_sys_exit_group+0x3b/0x40
[  342.771037][ T7958]        do_syscall_64+0x3b/0xb0
[  342.775989][ T7958]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.782427][ T7958] 
[  342.782427][ T7958] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  342.790108][ T7958]        lock_acquire+0x1db/0x4f0
[  342.795158][ T7958]        __mutex_lock_common+0x1da/0x25a0
[  342.800901][ T7958]        mutex_lock_nested+0x17/0x20
[  342.806207][ T7958]        bg_scan_update+0xa1/0x4a0
[  342.811431][ T7958]        process_one_work+0x8a1/0x10c0
[  342.817034][ T7958]        worker_thread+0xaca/0x1280
[  342.822260][ T7958]        kthread+0x3f6/0x4f0
[  342.826861][ T7958]        ret_from_fork+0x1f/0x30
[  342.831907][ T7958] 
[  342.831907][ T7958] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  342.841747][ T7958]        validate_chain+0x1649/0x5930
[  342.847142][ T7958]        __lock_acquire+0x1295/0x1ff0
[  342.852532][ T7958]        lock_acquire+0x1db/0x4f0
[  342.857579][ T7958]        __flush_work+0xeb/0x1a0
[  342.862533][ T7958]        __cancel_work_timer+0x519/0x6a0
[  342.868194][ T7958]        hci_request_cancel_all+0xcb/0x300
[  342.874043][ T7958]        hci_dev_do_close+0x51/0x1070
[  342.879451][ T7958]        hci_rfkill_set_block+0x114/0x1a0
[  342.885199][ T7958]        rfkill_set_block+0x1e7/0x430
[  342.890601][ T7958]        rfkill_fop_write+0x5b7/0x790
[  342.895986][ T7958]        vfs_write+0x30c/0xe50
[  342.900777][ T7958]        ksys_write+0x1a2/0x2c0
[  342.905649][ T7958]        do_syscall_64+0x3b/0xb0
[  342.910608][ T7958]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.917044][ T7958] 
[  342.917044][ T7958] other info that might help us debug this:
[  342.917044][ T7958] 
[  342.927279][ T7958] Chain exists of:
[  342.927279][ T7958]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  342.927279][ T7958] 
[  342.943045][ T7958]  Possible unsafe locking scenario:
[  342.943045][ T7958] 
[  342.950514][ T7958]        CPU0                    CPU1
[  342.955888][ T7958]        ----                    ----
[  342.961254][ T7958]   lock(rfkill_global_mutex);
[  342.966029][ T7958]                                lock(&data->open_mutex);
[  342.973144][ T7958]                                lock(rfkill_global_mutex);
[  342.980439][ T7958]   lock((work_completion)(&hdev->bg_scan_update));
[  342.987048][ T7958] 
[  342.987048][ T7958]  *** DEADLOCK ***
[  342.987048][ T7958] 
[  342.995193][ T7958] 1 lock held by syz.4.1030/7958:
[  343.000253][ T7958]  #0: ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  343.010397][ T7958] 
[  343.010397][ T7958] stack backtrace:
[  343.016285][ T7958] CPU: 1 PID: 7958 Comm: syz.4.1030 Not tainted 5.15.175-syzkaller #0
[  343.024451][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  343.034520][ T7958] Call Trace:
[  343.037803][ T7958]  <TASK>
[  343.040741][ T7958]  dump_stack_lvl+0x1e3/0x2d0
[  343.045437][ T7958]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  343.051101][ T7958]  ? print_circular_bug+0x12b/0x1a0
[  343.056314][ T7958]  check_noncircular+0x2f8/0x3b0
[  343.061353][ T7958]  ? add_chain_block+0x850/0x850
[  343.066302][ T7958]  ? lockdep_lock+0x11f/0x2a0
[  343.070989][ T7958]  ? lockdep_hardirqs_on+0x94/0x130
[  343.076199][ T7958]  ? finish_lock_switch+0x8f/0x100
[  343.081317][ T7958]  ? _find_first_zero_bit+0xcf/0xf0
[  343.086526][ T7958]  validate_chain+0x1649/0x5930
[  343.091386][ T7958]  ? __switch_to_asm+0x34/0x60
[  343.096169][ T7958]  ? __schedule+0x12cc/0x45b0
[  343.100860][ T7958]  ? mark_lock+0x98/0x340
[  343.105202][ T7958]  ? reacquire_held_locks+0x660/0x660
[  343.110601][ T7958]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  343.116607][ T7958]  ? release_firmware_map_entry+0x190/0x190
[  343.122532][ T7958]  ? look_up_lock_class+0x77/0x120
[  343.127683][ T7958]  ? register_lock_class+0x100/0x9a0
[  343.132986][ T7958]  ? mark_lock+0x98/0x340
[  343.137344][ T7958]  ? is_dynamic_key+0x1f0/0x1f0
[  343.142202][ T7958]  ? __lock_acquire+0x1295/0x1ff0
[  343.147259][ T7958]  ? mark_lock+0x98/0x340
[  343.151599][ T7958]  __lock_acquire+0x1295/0x1ff0
[  343.156820][ T7958]  lock_acquire+0x1db/0x4f0
[  343.161330][ T7958]  ? __flush_work+0xcf/0x1a0
[  343.165927][ T7958]  ? rcu_lock_release+0x5/0x20
[  343.170699][ T7958]  ? read_lock_is_recursive+0x10/0x10
[  343.176087][ T7958]  ? start_flush_work+0x776/0x820
[  343.181122][ T7958]  __flush_work+0xeb/0x1a0
[  343.185548][ T7958]  ? __flush_work+0xcf/0x1a0
[  343.190145][ T7958]  ? flush_work+0x20/0x20
[  343.194498][ T7958]  ? print_irqtrace_events+0x210/0x210
[  343.199966][ T7958]  ? lock_timer_base+0x260/0x260
[  343.204940][ T7958]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  343.210944][ T7958]  ? __cancel_work_timer+0x467/0x6a0
[  343.216256][ T7958]  __cancel_work_timer+0x519/0x6a0
[  343.218505][ T7782] device veth1_vlan entered promiscuous mode
[  343.221387][ T7958]  ? cancel_work_sync+0x20/0x20
[  343.232199][ T7958]  ? lockdep_hardirqs_on+0x94/0x130
[  343.237424][ T7958]  ? __cancel_work+0x2ef/0x380
[  343.242215][ T7958]  ? cancel_work+0x20/0x20
[  343.246652][ T7958]  ? print_irqtrace_events+0x210/0x210
[  343.252127][ T7958]  hci_request_cancel_all+0xcb/0x300
[  343.257435][ T7958]  hci_dev_do_close+0x51/0x1070
[  343.262301][ T7958]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  343.268202][ T7958]  ? _raw_spin_unlock+0x40/0x40
[  343.273076][ T7958]  hci_rfkill_set_block+0x114/0x1a0
[  343.278297][ T7958]  ? rcu_lock_release+0x20/0x20
[  343.283167][ T7958]  rfkill_set_block+0x1e7/0x430
[  343.288060][ T7958]  rfkill_fop_write+0x5b7/0x790
[  343.292933][ T7958]  ? rfkill_fop_read+0x470/0x470
[  343.297898][ T7958]  ? fsnotify_perm+0x64/0x590
[  343.302592][ T7958]  ? security_file_permission+0x75/0xa0
[  343.308164][ T7958]  ? rfkill_fop_read+0x470/0x470
[  343.313124][ T7958]  vfs_write+0x30c/0xe50
[  343.317392][ T7958]  ? file_end_write+0x250/0x250
[  343.322395][ T7958]  ? __fget_files+0x413/0x480
[  343.327131][ T7958]  ? __fdget_pos+0x1e9/0x380
[  343.331738][ T7958]  ? ksys_write+0x77/0x2c0
[  343.336228][ T7958]  ksys_write+0x1a2/0x2c0
[  343.340572][ T7958]  ? print_irqtrace_events+0x210/0x210
[  343.343538][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  343.346041][ T7958]  ? __ia32_sys_read+0x80/0x80
[  343.346070][ T7958]  ? syscall_enter_from_user_mode+0x2e/0x240
[  343.363713][ T7961] loop2: detected capacity change from 0 to 2048
[  343.364660][ T7958]  ? lockdep_hardirqs_on+0x94/0x130
[  343.364690][ T7958]  ? syscall_enter_from_user_mode+0x2e/0x240
[  343.382019][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  343.382254][ T7958]  do_syscall_64+0x3b/0xb0
[  343.394543][ T7958]  ? clear_bhb_loop+0x15/0x70
[  343.399238][ T7958]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  343.405155][ T7958] RIP: 0033:0x7fda35daed29
[  343.409585][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.418927][ T7782] device veth0_macvtap entered promiscuous mode
[  343.429211][ T7958] RSP: 002b:00007fda33bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  343.429238][ T7958] RAX: ffffffffffffffda RBX: 00007fda35f9f080 RCX: 00007fda35daed29
[  343.429254][ T7958] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000005
[  343.429267][ T7958] RBP: 00007fda35e2aaa8 R08: 0000000000000000 R09: 0000000000000000
[  343.429281][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.466273][ T7782] device veth1_macvtap entered promiscuous mode
[  343.467804][ T7958] R13: 0000000000000000 R14: 00007fda35f9f080 R15: 00007ffe6a6a6ee8
[  343.467833][ T7958]  </TASK>
[  343.548112][ T4211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.580365][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  343.595609][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.634112][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.650581][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.668120][ T4211] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  343.668191][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.684688][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  343.697751][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.708096][ T4211] usb 2-1: SerialNumber: syz
[  343.717091][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.728251][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.743370][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.755767][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.770220][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  343.780253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.790108][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.801081][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.818846][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.831378][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.841749][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.853047][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.863469][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.874120][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.884105][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.894625][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.905502][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.915355][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  343.924593][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  343.937982][ T7782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.951410][ T7782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.962783][ T7782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.971584][ T7782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.000366][ T4211] usb 2-1: 0:2 : does not exist
[  344.005789][ T4211] usb 2-1: unit 255 not found!
[  344.027238][ T4211] usb 2-1: USB disconnect, device number 21
[  344.533024][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  344.558804][ T7782] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  344.614375][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.615249][ T7782] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[  344.624657][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.642845][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.686626][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.698107][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.705657][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  346.792021][  T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.790381][  T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.843743][  T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.902496][  T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.701208][  T154] device hsr_slave_0 left promiscuous mode
[  348.715317][  T154] device hsr_slave_1 left promiscuous mode
[  348.722288][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.738993][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.758674][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.773850][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.784767][  T154] device bridge_slave_1 left promiscuous mode
[  348.793347][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.802061][  T154] device bridge_slave_0 left promiscuous mode
[  348.810615][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.828480][  T154] device veth1_macvtap left promiscuous mode
[  348.834537][  T154] device veth0_macvtap left promiscuous mode
[  348.861622][  T154] device veth1_vlan left promiscuous mode
[  348.868510][  T154] device veth0_vlan left promiscuous mode
[  349.053020][  T154] team0 (unregistering): Port device team_slave_1 removed
[  349.067625][  T154] team0 (unregistering): Port device team_slave_0 removed
[  349.086981][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.103728][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.174016][  T154] bond0 (unregistering): Released all slaves