last executing test programs:

1m23.372686678s ago: executing program 1 (id=533):
memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\x87\t9\xa9L\xfd\x8c\x9b\xfa\n!U\xa4HM\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98>\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @irqchip={0xc964, 0x5}}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40000000000, 0x0, 0x0, 0xe4, 0x40, 0x0, 0x76, 0x2})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m23.046443016s ago: executing program 1 (id=535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) (async)
write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="00006019bbbbbbbbbbbbaaaaaaaaaabcffc5fa8945f4000800012001000000000000000000c0e45fc4f0340000000000fe80000000000000000008db00c65f9f0000"], 0x42) (async)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, 0xfffffffffffffffe, 0x0)

1m21.762856092s ago: executing program 1 (id=541):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000140)={0x0, 0x3f, 0xa1, {0xa1, 0x5, "b440a65f4e0bc8da9cf9b392ee579a13dbd8f05c6074e3097542d4e6192781b1cd91fa89c84dd3027b95568a0fe48dc93cc50730bf5cf475edba0d116766609bae6eb008229edb41af15f6081a206574d6a18749fa0fbcef094ac584408bd87aa1d3d073fc000e8956f3e705e89ea38d47260bc1eb68c3ffb2dcaddceb3c8455e9aec0e5a6b867b79a7634488277865db0a712a694b278269d8e610f33b259"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1)

1m19.813038871s ago: executing program 1 (id=549):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x19109b, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28b5281, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn'])

1m19.64571015s ago: executing program 1 (id=550):
syz_usb_connect(0x5, 0xe4, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYRES64=0x0], 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x70, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x28, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x5, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x2, 0x40}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x5, 0x8, 0x20, 0x1}, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f19efffffff7f00ff00000944b7cd8e916c8f000403100b639aa5a6456896139d5f5aae4cc31c5a4fcb40375e24d24aaa9fc6495250c1f355e9cb58b67df87b3485dfb1282f52cc8bbe447a72bf9e6b947c8668c076e8ed98a5e487d3af8111"], 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c23}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x422}}, {0x6d, &(0x7f0000000140)=@string={0x6d, 0x3, "5c6258e4691e3ecc1dce2aa82c6f114a4b8419ae12ebb25fd5ba507210ef92461813cd4e957c22aa6b280d4cb6023dee4c93ea44855d51a6b88afcfcc193bc2603c33dc73e30d7f0825f447cc47f3af6ecdfdafd45b51056a73e00ba9ef6e51cae5e2d73c4f69e0823c76a"}}, {0x93, &(0x7f00000002c0)=ANY=[@ANYBLOB="9303d454d2ea0238ef02948ace8c037040d612b9fa300bbfe40759e9c5da327961874d14253e3704df6840ca0d4704f19d9b4773eb76f1c2a4e6f19d2102b430c86bffcc6f2d5034bd870af06827c7ea7a63c37e3c7b387916b89abd85f6723e1a03ab330965e71b79eacab56518daaa827c20eeec513edacf9ee4d74560c62ea3c42b00000000000000000000000000000200"]}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000280)="00000000020001000003be8c5e687a8a", 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8d4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x2)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0xffffff19)
listen(r2, 0x0)
sendto$inet6(r1, &(0x7f0000000380)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, "8b673ce5", {0x3, 0x1, 0x0, 0x8, 0x8, 0x6, 0x7f}})

1m19.381239796s ago: executing program 1 (id=551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20)
sendfile(r2, r1, 0x0, 0xbc44) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)

1m19.089376056s ago: executing program 32 (id=551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20)
sendfile(r2, r1, 0x0, 0xbc44) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)

12.644733025s ago: executing program 4 (id=881):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000700)="440f20c0663503000000440f22c036f30fc7fe0f01cb3ef30f2d5700f20fc21ec2b400b862058ed00f01c20f01cb66660f7ef4832a42", 0x36}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000080)={0xfffffffffffffbff, 0x38, [0x9, 0x0, 0x2, 0x2], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x400200, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)
recvfrom$rxrpc(r4, &(0x7f0000002100)=""/4096, 0x1000, 0x0, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x6, @broadcast}}, 0x24)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r6, 0x0, &(0x7f0000000280)="c1", 0x1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r6, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r6, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x2, 0xfffffffffffffffa, 0x3fff}) (async)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x2, r6, 0x0, &(0x7f0000000440)="41b062", 0x3, 0x5})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r6, @ANYRES64=r3, @ANYBLOB=',rootmodE=00000000000000000100000,user_id=', @ANYRES32=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fchdir(r9)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r10 = gettid()
r11 = syz_open_procfs(r10, &(0x7f00000000c0)='coredump_filter\x00') (async)
exit(0xd4)
read$msr(r11, 0x0, 0x0) (async)
read$FUSE(r8, &(0x7f00000083c0)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r12, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, r12, {0xd0820b2}}, 0x18) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.493119994s ago: executing program 4 (id=882):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0xc201})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x0, 0x1, 0x5ea5c858})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={<r5=>0x0, @in6={{0xa, 0x4e20, 0xf6, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}, 0x3ff, 0x5, 0x8, 0x6, 0x140}, &(0x7f0000000040)=0x98)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={r5, 0x4, 0x7, 0xffffffff, 0x2, 0x8}, &(0x7f00000003c0)=0x14)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYRES16=r7], 0xd)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
r8 = socket$kcm(0x2, 0x7, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd120000000000140000006030030003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

11.520447829s ago: executing program 4 (id=884):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x4, 0x4)
listen(r1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x3, 0x7ff, 0x0, @mcast2, @empty, 0x8000, 0x7800, 0x92, 0xfffff5f0}})
r3 = socket(0x10, 0x803, 0x0)
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010026bd706e6e24139e07"], 0x40}}, 0x90)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r4, 0x3)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="203000000000c302bd20978b2c166c0000665a8ed38d"], 0x0, &(0x7f0000000b80)={0x0, 0x8, 0x1}, 0x0, 0x0})
r5 = syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109028d0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0400040008042402081524120800a317a88b045e4f01a607c0ffcb7e392a04240204052401010407241401018f0f090581030002000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)

8.387663826s ago: executing program 4 (id=899):
r0 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2081)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ab02c1cf3b", 0x5}], 0x1)
syz_usb_connect(0x1, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000099473089911216859980000000109023f0001000020000904030005375dd200090506034000070e0509050700000004020309050800000404fe0709050400ff0303020409050a1cf70301ac0880e41abdd6ccbc73ad8e6d970b64481b157ef8962a9d5c43943b42ee"], 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="430f789004461a730f01bc0f00000000b9800000c00f3235002000000f30c463796adf00b805000000b9c73600000f01d9c4c17d10d048b800000100000000000f23c80f21f835040050000f23f83e460f01d10fc79b06000000c442e500e9", 0x5f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

8.048912505s ago: executing program 0 (id=905):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x230d}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB])
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee01)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)='>n', 0x20)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)

5.608427812s ago: executing program 0 (id=916):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x5})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="2005000000768d1d5700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.514174673s ago: executing program 4 (id=917):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010049d69a62347d56ed82588f0000000109022d00010000000009040000070b08000009058d67c8002a000009050502"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b1a0100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYBLOB="982785469c77eb640e46b2e67494fcbb8bee4b449e85e3cd0dff39ac2be16a087d44ea3d9fd6769f3da1eba75041"])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x0, 0xae, {0xae, 0x22, "b5053bcf492ce011605ad11cc1afe0c05f5af60093c00cb75265f61eff787c912d283ce9959545a1e93964f56bbb03b3989bfc121fbfc9eab3caa9ae816699046f925a1516d8e8a7e1f3bc865e5347bd522f7dc5107ab485a25305da8d214dae5ae3da34a09a72a6809f33835366b05178c7423026bf48516367f05f0b07e34241fed746baea642237f3efe3cfa13ae00eba31f3de6b1f352c09ed1c9cc165e5fbbeb892438b9f82bc29f1e3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x21, @string={0x21, 0x3, "42b76c12ac67f550158050cdfe8e4f419502d31432342dc2083b5a297a8c7c"}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x12, 0xb6, "4cf017ccf7d4d54bfbae6b9079e5a10264a14fcfef8623c080a4ea6711ac578de9cbcb7ac038ffff93148954cf4806fe456ebce47348d64f509410515d5eeee5fcc4d79e4cca868ab620fd91ec75a3f033cfdaed11d8ba99840a42d3e96474e96c5e0ae8ae6a8b60e36b412045ccc5d1dbe2c1c2c8bb103636a759b1000dc18922702f3f45ecb6dbdf9bcc5471d2dea3295ea84ce67bf2c0f421eb5a2111d881bd1278cfc19883b2ff5d9153e40558d1e280251312f4"}, &(0x7f0000000300)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000200)={0x21, 0x0, 0x1, "d6"}})

5.279245368s ago: executing program 3 (id=918):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) (async, rerun: 32)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000300)=0x8) (rerun: 32)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
close(r3) (async)
execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x419b41)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async, rerun: 32)
r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 32)
r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1fe0800}) (rerun: 32)
fallocate(r8, 0x3, 0x100000000, 0x80000000)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x27c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_FLAGS={0x4, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x2a4}}, 0x4048010) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0)="3cd842ec7d29b5562fa281b45f9389125c1ad27ee4801f22380cf6216953f69db32d66d9efbcc4864871e14584c4ffd918b24774eb6acdd04a13d97dfed0260e3c25e78f22ad3cd926c3d30ae0c1e582199c3deff94ac22ac3f2e3789e563daf60d05dac5a912ef2eae8e82a20fbdc9e43f637154b1a4b3083ae2905d84e64e2dd8c4676ef184bb236f1ce4d7233525de9be80ad161c2277077131cbc75e9f11da7363232add5a07", 0xa8)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a039d9d1e863b5432da00070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000c40000000080800034000000110"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x400d0)

2.887504259s ago: executing program 3 (id=924):
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000540)={0x0})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d", 0x29, 0x2251197285d36a80, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585d1"], 0x0)

2.678652717s ago: executing program 0 (id=925):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0)

2.604058175s ago: executing program 0 (id=926):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, r0, 0xba4ac000)
fcntl$getflags(r0, 0x401)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0)

2.357541843s ago: executing program 4 (id=928):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4200)
readahead(r1, 0xb5, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.635722348s ago: executing program 0 (id=930):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
creat(&(0x7f0000000000)='./file0\x00', 0x60)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x4000, 0x11a3ce09}}, 0x50)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x7}})
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES8=r1], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc9a, 0x0, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x38}}, 0x4)

1.580052391s ago: executing program 2 (id=932):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff52}, 0x100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000402c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f00000028c0)=""/4059, 0xfdb}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000140)=""/114, 0x72}], 0x7}, 0x40002000)

1.573212471s ago: executing program 3 (id=933):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x48, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000) (async)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.44429057s ago: executing program 2 (id=934):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x2)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x3, 0x200, 0x10001})
connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x5, 0x6, 0x4, 0x8001, 0x7}})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10)

1.425439962s ago: executing program 2 (id=935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000))
r2 = eventfd2(0x0, 0x80001)
write$eventfd(r2, &(0x7f0000000100)=0x9, 0x8)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030005000500070000000000080009"], 0x5c}, 0x1, 0x6c}, 0x0)

792.359516ms ago: executing program 0 (id=936):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x214020, &(0x7f0000000140)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x8c69)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r3, 0x11})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r3, 0x5})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
lseek(r4, 0x9, 0x0)
socket$packet(0x11, 0x3, 0x300)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r8 = socket$inet6(0xa, 0x6, 0x618)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$TIOCGPTLCK(r4, 0x5420, 0x0)
setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r6, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfe91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x11, 0x0, @opaque="87fc4f59a62c5eadc8"}}}, 0x33)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488)

629.528017ms ago: executing program 3 (id=937):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket(0x40000000015, 0x2, 0x7)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @local}, 0x120, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)='veth0_to_team\x00', 0x6, 0x8000, 0x7})
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4624, 0x7, @private1={0xfc, 0x1, '\x00', 0x3}, 0x83c5}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4624, 0x7, @private1={0xfc, 0x1, '\x00', 0x3}, 0x83c5}, 0x1c)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x400454a4, &(0x7f0000005000))
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @remote, 0xa25}, 0x1c)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) (async)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r1, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x124, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x4, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca993191"}}}}, 0x14c)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r5, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000004) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000004)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x170, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x170, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
getsockopt(r0, 0x1, 0x2, &(0x7f0000000340)=""/201, &(0x7f0000000440)=0xc9) (async)
getsockopt(r0, 0x1, 0x2, &(0x7f0000000340)=""/201, &(0x7f0000000440)=0xc9)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000000), 0x12) (async)
bind$x25(r10, &(0x7f0000000000), 0x12)
close_range(r10, 0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000100)=0x80000)

543.80352ms ago: executing program 3 (id=938):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0x4, 0x5}, 'syz1\x00', 0x1c})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
futex(&(0x7f0000004000)=0x2, 0x8d, 0x4, 0x0, 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7)
ioctl$UI_DEV_CREATE(r0, 0x5501)

520.015481ms ago: executing program 2 (id=939):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x2000000)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x701)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010102, @in=@private=0xa010100, 0x4e22, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x400000000, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d3, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000080))
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async)
getpid() (async)
syz_pidfd_open(r0, 0x0) (async)
setns(r1, 0x2000000) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x701) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010102, @in=@private=0xa010100, 0x4e22, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x400000000, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d3, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) (async)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) (async)
syz_open_procfs$userns(0x0, &(0x7f0000000080)) (async)

271.107697ms ago: executing program 2 (id=940):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xfffff000)
getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01])
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1, 0xfffffffe, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000008a00)=0xc, 0x4)
ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0)

78.706283ms ago: executing program 3 (id=941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r2, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050)
syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0xa, 0x0, 0xc4, 0x7a, 0xb2, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "2c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"}}]})

0s ago: executing program 2 (id=942):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000700001"], 0x18}], 0x1}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async)
write$cgroup_subtree(r2, 0x0, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000700001"], 0x18}], 0x1}, 0x0) (async)

kernel console output (not intermixed with test programs):

vfs_read+0x10/0x10
[  180.710125][ T7484]  ? __fget_files+0x2a/0x420
[  180.710153][ T7484]  ? __fget_files+0x3a0/0x420
[  180.710174][ T7484]  ? __fget_files+0x2a/0x420
[  180.710207][ T7484]  ksys_read+0x145/0x250
[  180.710239][ T7484]  ? __pfx_ksys_read+0x10/0x10
[  180.710272][ T7484]  ? do_syscall_64+0xbe/0xf80
[  180.710298][ T7484]  do_syscall_64+0xfa/0xf80
[  180.710321][ T7484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.710342][ T7484]  ? clear_bhb_loop+0x60/0xb0
[  180.710367][ T7484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.710387][ T7484] RIP: 0033:0x7f5097f8e15c
[  180.710423][ T7484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  180.710441][ T7484] RSP: 002b:00007f5098e3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.710470][ T7484] RAX: ffffffffffffffda RBX: 00007f50981e5fa0 RCX: 00007f5097f8e15c
[  180.710485][ T7484] RDX: 000000000000000f RSI: 00007f5098e3e0a0 RDI: 0000000000000004
[  180.710498][ T7484] RBP: 00007f5098e3e090 R08: 0000000000000000 R09: 0000000000000000
[  180.710510][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.710522][ T7484] R13: 00007f50981e6038 R14: 00007f50981e5fa0 R15: 00007ffd97a1d5a8
[  180.710561][ T7484]  </TASK>
[  181.008400][  T981] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  181.483213][ T5829] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  181.484057][  T981] usb 1-1: reset high-speed USB device number 42 using dummy_hcd
[  181.641921][ T6185] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  181.671035][ T5829] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  181.691287][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.713706][ T5829] usb 4-1: Product: syz
[  181.730041][ T5829] usb 4-1: Manufacturer: syz
[  181.734847][ T5829] usb 4-1: SerialNumber: syz
[  181.763720][ T5829] usb 4-1: config 0 descriptor??
[  181.793217][ T6185] usb 2-1: Using ep0 maxpacket: 16
[  181.803646][ T6185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.815134][ T6185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.843404][ T6185] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  181.854836][ T6185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.871803][ T7499] syzkaller1: entered promiscuous mode
[  181.879336][ T6185] usb 2-1: config 0 descriptor??
[  181.883741][ T7499] syzkaller1: entered allmulticast mode
[  181.909693][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.918947][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.994684][ T5829] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[  182.013517][ T5829] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  182.023551][ T5829] usb 4-1: USB disconnect, device number 37
[  182.129482][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.138590][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.247305][  T981] usb 1-1: [UEAGLE-ATM] interface 1 not found
[  182.254813][  T981] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  182.271532][  T981] usb 1-1: USB disconnect, device number 42
[  182.306410][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.316733][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.329931][ T6185] elecom 0003:056E:00FF.000C: global environment stack underflow
[  182.337890][ T6185] elecom 0003:056E:00FF.000C: item 0 0 1 11 parsing failed
[  182.345977][ T6185] elecom 0003:056E:00FF.000C: probe with driver elecom failed with error -22
[  182.536545][  T981] usb 2-1: USB disconnect, device number 47
[  182.893049][  T981] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  182.963047][ T5829] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  183.033174][   T24] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  183.045081][  T981] usb 4-1: unable to get BOS descriptor or descriptor too short
[  183.053964][  T981] usb 4-1: config 1 has an invalid interface number: 126 but max is 0
[  183.062206][  T981] usb 4-1: config 1 has no interface number 0
[  183.068505][  T981] usb 4-1: config 1 interface 126 has no altsetting 0
[  183.078228][  T981] usb 4-1: string descriptor 0 read error: -22
[  183.085987][  T981] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0
[  183.096096][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.114699][  T981] empeg 4-1:1.126: empeg converter detected
[  183.123014][ T5829] usb 3-1: Using ep0 maxpacket: 16
[  183.132757][ T5829] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  183.151217][ T5829] usb 3-1: config 0 has no interface number 0
[  183.166029][ T5829] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  183.175546][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.183639][ T5829] usb 3-1: Product: syz
[  183.188006][ T5829] usb 3-1: Manufacturer: syz
[  183.192652][ T5829] usb 3-1: SerialNumber: syz
[  183.200629][   T24] usb 1-1: config 7 has an invalid interface number: 101 but max is 0
[  183.217583][ T5829] usb 3-1: config 0 descriptor??
[  183.222974][   T24] usb 1-1: config 7 has no interface number 0
[  183.235357][ T5829] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  183.244666][   T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  183.269138][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.283280][   T24] usb 1-1: Product: syz
[  183.287565][   T24] usb 1-1: Manufacturer: syz
[  183.292273][   T24] usb 1-1: SerialNumber: syz
[  183.322165][  T981] empeg 4-1:1.126: probe with driver empeg failed with error -71
[  183.346527][  T981] usb 4-1: USB disconnect, device number 38
[  183.694383][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.776964][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.881147][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.987369][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.034594][ T7517] program syz.3.553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.122118][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.166716][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.213702][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.226590][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.235405][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.245241][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.254268][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.257134][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.287621][ T2999] bridge_slave_1: left allmulticast mode
[  184.307247][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.314831][ T2999] bridge_slave_1: left promiscuous mode
[  184.335906][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.345144][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.382395][ T2999] bridge_slave_0: left allmulticast mode
[  184.385054][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.392223][ T2999] bridge_slave_0: left promiscuous mode
[  184.405373][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.432097][   T24] as10x_usb: device has been detected
[  184.444332][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  184.479592][   T24] usb 1-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  184.498112][   T24] as10x_usb: error during firmware upload part1
[  184.505264][   T24] Registered device Elgato EyeTV DTT Deluxe
[  184.515547][   T24] usb 1-1: USB disconnect, device number 43
[  184.565955][   T24] Unregistered device Elgato EyeTV DTT Deluxe
[  184.569277][   T24] as10x_usb: device has been disconnected
[  184.769128][ T2999] dvmrp0 (unregistering): left allmulticast mode
[  184.821847][ T5829] gspca_spca1528: reg_w err -71
[  184.835257][ T5829] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  184.851767][ T5829] usb 3-1: USB disconnect, device number 44
[  184.951588][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.964051][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.974670][ T2999] bond0 (unregistering): Released all slaves
[  185.186984][ T7534] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.557'.
[  185.703237][ T7558] binder: 7557:7558 ioctl c0709411 200000000040 returned -22
[  185.714763][ T7558] binder: 7557:7558 ioctl d000943d 200000003200 returned -22
[  185.722642][ T7558] binder: 7557:7558 ioctl d000943d 200000000200 returned -22
[  185.731924][ T7558] binder: 7557:7558 ioctl d000943e 200000001200 returned -22
[  185.742703][ T7558] binder: 7557:7558 ioctl d000943e 200000002200 returned -22
[  185.857469][ T2999] hsr_slave_0: left promiscuous mode
[  185.868604][ T2999] hsr_slave_1: left promiscuous mode
[  185.878683][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.887182][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.900467][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.908810][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.942171][ T2999] veth1_macvtap: left promiscuous mode
[  185.948149][ T2999] veth0_macvtap: left promiscuous mode
[  185.954910][ T2999] veth1_vlan: left promiscuous mode
[  185.973724][ T2999] veth0_vlan: left promiscuous mode
[  186.200499][ T5829] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  186.363209][ T5837] Bluetooth: hci0: command tx timeout
[  186.370013][ T6185] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  186.555282][ T6185] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  186.566486][ T6185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.574620][ T6185] usb 1-1: Product: syz
[  186.579049][ T6185] usb 1-1: Manufacturer: syz
[  186.583738][ T6185] usb 1-1: SerialNumber: syz
[  186.612158][ T6185] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  186.621064][ T2999] team0 (unregistering): Port device team_slave_1 removed
[  186.645532][    T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  186.687249][ T2999] team0 (unregistering): Port device team_slave_0 removed
[  187.062275][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.082305][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.216713][ T7523] chnl_net:caif_netlink_parms(): no params data found
[  187.585547][   T24] usb 1-1: USB disconnect, device number 44
[  187.627724][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.639323][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.647724][ T7523] bridge_slave_0: entered allmulticast mode
[  187.656217][ T7523] bridge_slave_0: entered promiscuous mode
[  187.667406][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.674993][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.682263][ T7523] bridge_slave_1: entered allmulticast mode
[  187.690456][ T7523] bridge_slave_1: entered promiscuous mode
[  187.723561][    T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  187.730826][    T9] ath9k_htc: Failed to initialize the device
[  187.743489][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  187.784278][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.800890][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.895858][ T7523] team0: Port device team_slave_0 added
[  187.918514][ T7523] team0: Port device team_slave_1 added
[  188.008202][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.022652][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.083004][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.117287][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.153005][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.224524][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.356048][ T7598] misc userio: Begin command sent, but we're already running
[  188.443175][ T5837] Bluetooth: hci0: command tx timeout
[  188.465904][ T7600] sp0: Synchronizing with TNC
[  188.482546][ T7523] hsr_slave_0: entered promiscuous mode
[  188.516515][ T7523] hsr_slave_1: entered promiscuous mode
[  188.536601][ T7523] debugfs: 'hsr0' already exists in 'hsr'
[  188.542717][ T7523] Cannot create hsr debugfs directory
[  188.565557][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.606847][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.648596][ T7610] netlink: 'syz.2.567': attribute type 4 has an invalid length.
[  188.656519][ T7610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.567'.
[  188.662328][ T7615] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  188.676928][ T7615] netlink: 248 bytes leftover after parsing attributes in process `syz.0.568'.
[  188.714069][ T7610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  188.773042][  T981] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  188.966478][ T7627] netlink: 'syz.3.571': attribute type 10 has an invalid length.
[  188.983053][ T7627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.571'.
[  189.344021][ T7642] netlink: zone id is out of range
[  189.349285][ T7642] netlink: zone id is out of range
[  189.376151][ T7642] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  189.608839][ T7523] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  189.639013][ T7523] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  189.673147][ T7523] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  189.695808][ T7523] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  189.763071][  T981] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  189.854767][   T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  189.939688][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.953926][  T981] usb 3-1: Using ep0 maxpacket: 16
[  189.963976][  T981] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  189.989179][ T7667] 9p: Bad value for 'rfdno'
[  189.998452][  T981] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.013345][   T24] usb 1-1: Using ep0 maxpacket: 8
[  190.029164][ T7523] 8021q: adding VLAN 0 to HW filter on device team0
[  190.038334][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  190.054266][  T981] usb 3-1: config 0 interface 0 has no altsetting 0
[  190.066609][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.073385][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.078566][  T981] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  190.083731][ T2113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.094454][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.109160][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.121145][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  190.153870][  T981] usb 3-1: config 0 descriptor??
[  190.175449][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  190.192573][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.199904][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.208580][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  190.218142][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.254279][   T24] usb 1-1: config 0 descriptor??
[  190.260439][ T7651] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  190.365188][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.394817][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.450460][  T981] lenovo 0003:17EF:60B5.000D: hidraw0: USB HID v0.09 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0
[  190.488701][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.525107][ T5839] Bluetooth: hci0: command tx timeout
[  190.527305][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.609994][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.640390][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.683735][    C0] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  190.695357][ T5839] Bluetooth: hci4: Malformed Event: 0x02
[  190.701241][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.707936][    C0] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  190.719422][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.726383][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.733665][ T5839] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1
[  190.740618][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.747591][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.754563][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.761415][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.768598][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.776106][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.783104][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.790048][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.797353][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.804424][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.811364][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.818425][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.826676][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.836518][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.845298][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.852252][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.861429][ T5839] Bluetooth: hci4: Malformed Event: 0x02
[  190.867372][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.874404][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.881349][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.888385][ T5839] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1
[  190.895744][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.902693][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.910685][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.917784][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.925137][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.932091][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.939380][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.948594][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.955608][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.962464][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.969479][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.976529][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.983695][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.990633][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  190.997823][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  191.004880][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  191.255375][ T7686] syzkaller1: entered promiscuous mode
[  191.261023][ T7686] syzkaller1: entered allmulticast mode
[  191.398627][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.841300][ T7523] veth0_vlan: entered promiscuous mode
[  191.860226][ T7523] veth1_vlan: entered promiscuous mode
[  191.946342][ T7523] veth0_macvtap: entered promiscuous mode
[  191.961848][ T7523] veth1_macvtap: entered promiscuous mode
[  192.002766][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.030520][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.080321][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.107423][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.129690][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.172230][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.256405][  T981] usb 3-1: USB disconnect, device number 47
[  192.363534][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  192.427903][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.459903][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.521741][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.541469][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.583516][ T5887] usb 1-1: USB disconnect, device number 45
[  192.604623][ T5837] Bluetooth: hci0: command tx timeout
[  192.697911][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'.
[  192.708388][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'.
[  193.063426][ T6185] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  193.203062][ T6185] usb 4-1: device descriptor read/64, error -71
[  193.209434][ T5975] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  193.364771][ T5975] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  193.375844][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.387083][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.397855][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  193.412376][ T5975] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  193.421822][ T5975] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  193.430333][ T5975] usb 3-1: Manufacturer: syz
[  193.438466][ T5975] usb 3-1: config 0 descriptor??
[  193.453090][ T6185] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  193.553074][  T123] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  193.583058][ T6185] usb 4-1: device descriptor read/64, error -71
[  193.693470][ T6185] usb usb4-port1: attempt power cycle
[  193.703162][  T123] usb 1-1: Using ep0 maxpacket: 8
[  193.710746][  T123] usb 1-1: unable to read config index 0 descriptor/start: -61
[  193.718623][  T123] usb 1-1: can't read configurations, error -61
[  193.864030][  T123] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  193.871942][ T5975] hid_parser_main: 2 callbacks suppressed
[  193.871963][ T5975] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[  193.892465][ T5975] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  194.023134][  T123] usb 1-1: Using ep0 maxpacket: 8
[  194.030073][  T123] usb 1-1: unable to read config index 0 descriptor/start: -61
[  194.033283][ T6185] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  194.039059][  T123] usb 1-1: can't read configurations, error -61
[  194.052424][  T123] usb usb1-port1: attempt power cycle
[  194.058140][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  194.064820][ T6185] usb 4-1: device descriptor read/8, error -71
[  194.139251][ T7738] overlayfs: overlapping lowerdir path
[  194.215121][ T5895] usb 5-1: Using ep0 maxpacket: 32
[  194.222128][ T5975] usb 3-1: USB disconnect, device number 48
[  194.226120][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short
[  194.241056][ T5895] usb 5-1: config 4 has an invalid interface number: 10 but max is 0
[  194.250758][ T5895] usb 5-1: config 4 has no interface number 0
[  194.258486][ T5895] usb 5-1: config 4 interface 10 has no altsetting 0
[  194.271334][ T5895] usb 5-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  194.291374][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.300771][ T5895] usb 5-1: Product: syz
[  194.306956][ T5895] usb 5-1: Manufacturer: syz
[  194.311637][ T5895] usb 5-1: SerialNumber: syz
[  194.317105][ T6185] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  194.343886][ T6185] usb 4-1: device descriptor read/8, error -71
[  194.423144][  T123] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  194.453480][ T6185] usb usb4-port1: unable to enumerate USB device
[  194.454017][  T123] usb 1-1: Using ep0 maxpacket: 8
[  194.467365][  T123] usb 1-1: unable to read config index 0 descriptor/start: -61
[  194.477262][  T123] usb 1-1: can't read configurations, error -61
[  194.534895][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.545673][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.561621][ T5895] radio-si470x 5-1:4.10: could not find interrupt in endpoint
[  194.569423][ T5895] radio-si470x 5-1:4.10: probe with driver radio-si470x failed with error -5
[  194.578629][ T5895] usbhid 5-1:4.10: couldn't find an input interrupt endpoint
[  194.593635][ T5895] usb 5-1: USB disconnect, device number 2
[  194.613110][  T123] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  194.633658][  T123] usb 1-1: Using ep0 maxpacket: 8
[  194.640508][  T123] usb 1-1: unable to read config index 0 descriptor/start: -61
[  194.650397][  T123] usb 1-1: can't read configurations, error -61
[  194.657267][  T123] usb usb1-port1: unable to enumerate USB device
[  195.183107][ T5887] usb 3-1: new low-speed USB device number 49 using dummy_hcd
[  195.335060][ T5887] usb 3-1: config index 0 descriptor too short (expected 48, got 45)
[  195.343716][ T5887] usb 3-1: config 0 interface 0 altsetting 250 has an invalid descriptor for endpoint zero, skipping
[  195.354857][ T6185] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  195.362433][ T5887] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 8
[  195.373723][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0
[  195.380828][ T5887] usb 3-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  195.390139][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.401689][ T5887] usb 3-1: config 0 descriptor??
[  195.413811][ T7761] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  195.430328][ T5887] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  195.524714][ T6185] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  195.534006][ T6185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.545376][ T6185] usb 5-1: config 0 descriptor??
[  195.555734][ T6185] cp210x 5-1:0.0: cp210x converter detected
[  195.625655][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.638099][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.755988][ T6185] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  195.992112][ T6185] usb 5-1: cp210x converter now attached to ttyUSB0
[  196.052063][  T123] usb 5-1: USB disconnect, device number 3
[  196.075371][  T123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  196.118327][  T123] cp210x 5-1:0.0: device disconnected
[  196.463046][ T6185] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  196.473117][  T123] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  196.614800][ T6185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  196.626017][ T6185] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  196.636192][ T6185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.643377][  T123] usb 5-1: Using ep0 maxpacket: 16
[  196.650745][ T6185] usb 4-1: config 0 descriptor??
[  196.657757][  T123] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  196.665924][ T5887] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  196.674452][ T7784] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  196.683753][  T123] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.694662][  T123] usb 5-1: config 0 has no interface number 0
[  196.700948][  T123] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  196.713393][  T123] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  196.725251][  T123] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  196.737844][  T123] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  196.750874][  T123] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  196.761046][  T123] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  196.776840][  T123] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  196.787139][  T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.798273][  T123] usb 5-1: config 0 descriptor??
[  196.804209][ T7782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  196.816258][  T123] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  196.833272][ T5887] usb 1-1: Using ep0 maxpacket: 8
[  196.842718][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  196.855212][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  196.870203][ T5887] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  196.881589][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.903409][ T5887] usb 1-1: Product: syz
[  196.907770][ T5887] usb 1-1: Manufacturer: syz
[  196.912731][ T5887] usb 1-1: SerialNumber: syz
[  196.936587][ T5887] usb 1-1: config 0 descriptor??
[  197.019327][ T5981] usb 5-1: USB disconnect, device number 4
[  197.106498][ T6185] elan 0003:04F3:0755.000F: unknown main item tag 0x1
[  197.113941][ T6185] elan 0003:04F3:0755.000F: unknown main item tag 0x4
[  197.127701][ T6185] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  197.166991][ T5887] usb 1-1: USB disconnect, device number 50
[  197.824806][ T7797] kvm: pic: single mode not supported
[  197.824968][ T7797] kvm: pic: level sensitive irq not supported
[  197.831733][ T7797] kvm: pic: single mode not supported
[  197.838322][ T7797] kvm: pic: level sensitive irq not supported
[  198.012154][  T123] usb 3-1: USB disconnect, device number 49
[  198.026318][ T7804] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  198.256293][ T7809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  198.522759][ T5582] sp0: Synchronizing with TNC
[  199.048353][ T5981] usb 4-1: USB disconnect, device number 43
[  199.593659][ T7850] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  199.651189][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.658180][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  199.856014][ T7860] syzkaller1: entered promiscuous mode
[  199.861655][ T7860] syzkaller1: entered allmulticast mode
[  200.003034][   T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  200.063092][ T5981] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  200.165202][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.175254][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  200.189743][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  200.199063][ T5880] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  200.203185][ T5981] usb 3-1: device descriptor read/64, error -71
[  200.206905][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  200.224934][   T24] usb 4-1: SerialNumber: syz
[  200.373059][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  200.380416][ T5880] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  200.388969][ T5880] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  200.397701][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  200.406968][ T5880] usb 1-1: config 1 has no interface number 0
[  200.413178][ T5880] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.424962][ T5880] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  200.438036][ T5880] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  200.448481][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.458242][   T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  200.467039][ T5981] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  200.488346][ T5880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  200.505161][   T24] usb 4-1: USB disconnect, device number 44
[  200.623073][ T5981] usb 3-1: device descriptor read/64, error -71
[  200.683084][ T5880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  200.733439][ T5981] usb usb3-port1: attempt power cycle
[  200.827585][ T7866] dvmrp0: entered allmulticast mode
[  201.093051][ T5981] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  201.113977][ T5981] usb 3-1: device descriptor read/8, error -71
[  201.353077][ T5981] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  201.384001][ T5981] usb 3-1: device descriptor read/8, error -71
[  201.453142][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  201.493425][ T5981] usb usb3-port1: unable to enumerate USB device
[  201.583066][ T5887] usb 5-1: device descriptor read/64, error -71
[  201.628357][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.628'.
[  201.643716][ T7883] afs: Unknown parameter 'd3ͯBlock'
[  201.734030][   T24] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  201.823074][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  201.976345][ T5887] usb 5-1: device descriptor read/64, error -71
[  202.084701][ T5887] usb usb5-port1: attempt power cycle
[  202.423021][ T5887] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  202.444381][ T5887] usb 5-1: device descriptor read/8, error -71
[  202.683155][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  202.703825][ T5887] usb 5-1: device descriptor read/8, error -71
[  202.823428][ T5887] usb usb5-port1: unable to enumerate USB device
[  202.886996][ T7896] syzkaller1: entered promiscuous mode
[  202.892545][ T7896] syzkaller1: entered allmulticast mode
[  202.986958][   T24] usb 1-1: USB disconnect, device number 51
[  203.005026][   T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  203.095174][ T7904] netlink: 'syz.3.634': attribute type 39 has an invalid length.
[  203.103359][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.177911][ T7904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.473304][ T5887] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  203.648062][ T5887] usb 1-1: Using ep0 maxpacket: 16
[  203.656821][ T5887] usb 1-1: config 0 has no interfaces?
[  203.662553][ T5887] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  203.676012][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.692011][ T5887] usb 1-1: config 0 descriptor??
[  203.703206][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  203.863024][    T9] usb 4-1: Using ep0 maxpacket: 16
[  203.870230][    T9] usb 4-1: config 2 has an invalid interface number: 200 but max is 2
[  203.881790][    T9] usb 4-1: config 2 has an invalid interface number: 212 but max is 2
[  203.890277][    T9] usb 4-1: config 2 has an invalid interface number: 148 but max is 2
[  203.899450][    T9] usb 4-1: config 2 has an invalid descriptor of length 6, skipping remainder of the config
[  203.910257][    T9] usb 4-1: config 2 has no interface number 0
[  203.918401][    T9] usb 4-1: config 2 has no interface number 1
[  203.929480][    T9] usb 4-1: config 2 has no interface number 2
[  203.935936][    T9] usb 4-1: config 2 interface 148 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  203.949364][    T9] usb 4-1: config 2 interface 200 has no altsetting 0
[  203.957455][    T9] usb 4-1: config 2 interface 212 has no altsetting 0
[  203.964587][    T9] usb 4-1: config 2 interface 148 has no altsetting 0
[  203.977212][    T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0002, bcdDevice= 0.09
[  203.987949][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.996202][    T9] usb 4-1: Product: syz
[  204.000614][    T9] usb 4-1: Manufacturer: syz
[  204.006560][    T9] usb 4-1: SerialNumber: syz
[  204.228419][    T9] usb-storage 4-1:2.200: USB Mass Storage device detected
[  204.269525][    T9] usb-storage 4-1:2.200: Quirks match for vid 0781 pid 0002: 10
[  204.371994][    T9] usb-storage 4-1:2.212: USB Mass Storage device detected
[  204.408425][    T9] usb-storage 4-1:2.212: Quirks match for vid 0781 pid 0002: 10
[  204.486946][    T9] usb-storage 4-1:2.148: USB Mass Storage device detected
[  204.506823][    T9] usb-storage 4-1:2.148: Quirks match for vid 0781 pid 0002: 10
[  204.581078][    T9] usb 4-1: USB disconnect, device number 45
[  204.613397][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  204.779810][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.803311][ T5880] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  204.821511][ T5887] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  204.862696][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.882685][ T5887] usb 5-1: config 0 descriptor??
[  204.983026][ T5880] usb 3-1: Using ep0 maxpacket: 16
[  204.990186][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  205.002304][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  205.027574][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  205.039289][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.054013][ T5880] usb 3-1: Product: syz
[  205.061671][ T5880] usb 3-1: Manufacturer: syz
[  205.072104][ T5880] usb 3-1: SerialNumber: syz
[  205.095048][ T5880] usb 3-1: config 0 descriptor??
[  205.132075][ T5880] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  205.178789][ T5880] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  205.217041][ T5887] usb 5-1: USB disconnect, device number 9
[  205.325725][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.353956][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.509844][ T7993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32
[  205.834639][ T5880] em28xx 3-1:0.0: chip ID is em2860
[  206.014130][ T5887] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  206.080575][    T9] usb 1-1: USB disconnect, device number 52
[  206.185073][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  206.197826][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  206.210813][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  206.222801][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  206.239079][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  206.251464][ T5887] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  206.269948][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.278904][ T5887] usb 5-1: Product: syz
[  206.283531][ T5887] usb 5-1: Manufacturer: syz
[  206.289244][ T5887] usb 5-1: SerialNumber: syz
[  206.303987][ T5887] usb 5-1: config 0 descriptor??
[  206.318480][ T5887] iguanair 5-1:0.0: probe with driver iguanair failed with error -12
[  206.576483][ T8028] afs: Unknown parameter 'dyne0'
[  206.588827][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.601244][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.697482][ T8031] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  206.841729][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.856731][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.876355][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'.
[  206.937456][ T5880] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  206.945421][ T5880] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  206.952624][ T5880] em28xx 3-1:0.0: No AC97 audio processor
[  207.176541][ T8052] netlink: 6 bytes leftover after parsing attributes in process `syz.0.657'.
[  207.433087][ T5880] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  207.450248][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.462047][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.583015][ T5880] usb 4-1: Using ep0 maxpacket: 8
[  207.591107][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.600156][ T5880] usb 4-1: config 190 has an invalid interface number: 162 but max is 1
[  207.608607][ T5880] usb 4-1: config 190 has an invalid interface number: 129 but max is 1
[  207.617077][ T5880] usb 4-1: config 190 has no interface number 0
[  207.623519][ T5880] usb 4-1: config 190 has no interface number 1
[  207.630684][ T5880] usb 4-1: config 190 interface 162 has no altsetting 0
[  207.638724][ T5880] usb 4-1: config 190 interface 129 has no altsetting 0
[  207.648037][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=092a, bcdDevice=48.5e
[  207.657235][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.665421][ T5880] usb 4-1: Product: syz
[  207.669615][ T5880] usb 4-1: Manufacturer: syz
[  207.674338][ T5880] usb 4-1: SerialNumber: syz
[  207.902337][ T5880] usb 4-1: USB disconnect, device number 46
[  208.157949][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'.
[  208.166920][ T8068] openvswitch: netlink: Flow actions attr not present in new flow.
[  208.223033][ T5887] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  208.363421][ T5887] usb 1-1: device descriptor read/64, error -71
[  208.603037][ T5887] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  208.673050][ T5880] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  208.743157][ T5887] usb 1-1: device descriptor read/64, error -71
[  208.806839][  T123] usb 5-1: USB disconnect, device number 10
[  208.832949][ T5880] usb 4-1: Using ep0 maxpacket: 8
[  208.842275][ T5880] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  208.856162][ T5887] usb usb1-port1: attempt power cycle
[  208.861689][ T5880] usb 4-1: config 179 has no interface number 0
[  208.880051][ T5880] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  208.894616][ T5880] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  208.906606][ T5880] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  208.911136][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'.
[  208.921985][ T5880] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  208.939821][ T8072] netlink: 'syz.4.665': attribute type 10 has an invalid length.
[  208.949026][ T8072] lo: entered promiscuous mode
[  208.953158][ T5880] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  208.972305][ T8072] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  208.977788][ T5880] usb 4-1: config 179 interface 65 has no altsetting 0
[  208.997463][ T5880] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  209.008961][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.052616][ T5880] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34
[  209.115968][ T8076] overlay: Unknown parameter 'obj_user'
[  209.137736][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.149241][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.203312][ T5887] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  209.229973][ T5880] usb 4-1: USB disconnect, device number 47
[  209.235677][ T5887] usb 1-1: device descriptor read/8, error -71
[  209.314979][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  209.473041][    T9] usb 5-1: Using ep0 maxpacket: 8
[  209.480205][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  209.487981][ T5887] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  209.495671][    T9] usb 5-1: can't read configurations, error -61
[  209.514867][ T5887] usb 1-1: device descriptor read/8, error -71
[  209.624332][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  209.632366][ T5887] usb usb1-port1: unable to enumerate USB device
[  209.714986][ T8078] overlay: ./file0 is not a directory
[  209.721061][ T8079] overlay: ./file0 is not a directory
[  209.730109][ T8078] team_slave_0: entered allmulticast mode
[  209.740703][ T8078] team_slave_0: entered promiscuous mode
[  209.793959][    T9] usb 5-1: Using ep0 maxpacket: 8
[  209.804254][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  209.820412][    T9] usb 5-1: can't read configurations, error -61
[  209.827711][    T9] usb usb5-port1: attempt power cycle
[  210.113088][ T5880] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  210.173065][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  210.194253][    T9] usb 5-1: Using ep0 maxpacket: 8
[  210.201778][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  210.210119][    T9] usb 5-1: can't read configurations, error -61
[  210.265333][ T5880] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  210.274634][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.286145][ T5880] usb 4-1: config 0 descriptor??
[  210.301530][ T5880] gspca_main: cpia1-2.14.0 probing 0813:0001
[  210.343195][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  210.364024][    T9] usb 5-1: Using ep0 maxpacket: 8
[  210.372341][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  210.380117][    T9] usb 5-1: can't read configurations, error -61
[  210.386852][    T9] usb usb5-port1: unable to enumerate USB device
[  210.459068][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.469262][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.489537][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.500523][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.700407][ T5880] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  211.037386][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'.
[  211.102573][ T5880] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  211.172754][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.186462][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.205999][ T8093] sg_write: data in/out 49116/42 bytes for SCSI command 0x0-- guessing data in;
[  211.205999][ T8093]    program syz.2.674 not setting count and/or reply_len properly
[  211.298503][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.313366][    T9] usb 4-1: USB disconnect, device number 48
[  211.315961][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.563155][   T10] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  211.693041][   T10] usb 1-1: device descriptor read/64, error -71
[  211.933072][   T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  211.963166][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  211.969319][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  211.975437][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  212.047211][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.056540][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.063288][   T10] usb 1-1: device descriptor read/64, error -71
[  212.079288][ T8102] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  212.089922][ T8102] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  212.103603][ T8102] overlayfs: failed to set uuid (178/file0, err=-13); falling back to uuid=null.
[  212.171197][ T8102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.677'.
[  212.183081][   T10] usb usb1-port1: attempt power cycle
[  212.240668][ T8106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer.
[  212.471950][ T8112] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.680'.
[  212.524484][   T10] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  212.553857][   T10] usb 1-1: device descriptor read/8, error -71
[  212.623383][  T123] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  212.719944][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'.
[  212.778224][ T8123] input: syz0 as /devices/virtual/input/input35
[  212.793218][   T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  212.803892][ T8123] netlink: 80 bytes leftover after parsing attributes in process `syz.2.684'.
[  212.833819][   T10] usb 1-1: device descriptor read/8, error -71
[  212.875807][ T8127] team_slave_1: entered promiscuous mode
[  212.891410][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.904370][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.917362][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'.
[  212.934634][ T8122] team_slave_1: left promiscuous mode
[  212.943584][   T10] usb usb1-port1: unable to enumerate USB device
[  213.497160][ T8138] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  213.626220][ T8140] overlayfs: cannot append lower layer
[  214.013072][  T123] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  214.101781][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.128002][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.136367][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.146478][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.154774][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.165967][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.174749][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.187176][ T8149] sock: sock_set_timeout: `syz.2.693' (pid 8149) tries to set negative timeout
[  214.198392][  T123] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  214.223202][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.231082][  T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.242887][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.251008][ T5880] hid-generic 0003:80000003:0000.0010: unknown main item tag 0x0
[  214.259055][  T123] usb 4-1: Product: syz
[  214.269493][  T123] usb 4-1: Manufacturer: syz
[  214.279035][  T123] usb 4-1: SerialNumber: syz
[  214.289148][ T5880] hid-generic 0003:80000003:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  214.304198][  T123] usb 4-1: config 0 descriptor??
[  214.322075][  T123] gspca_main: sunplus-2.14.0 probing 055f:c230
[  214.476322][ T8150] fido_id[8150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  214.502057][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.525303][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.753516][ T5981] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  214.778603][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  214.778622][   T30] audit: type=1326 audit(1766901818.386:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.4.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda32b8f749 code=0x0
[  214.881190][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'.
[  215.037129][ T5981] usb 1-1: Using ep0 maxpacket: 16
[  215.055935][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.068578][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.079298][ T5981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  215.092623][ T5981] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  215.103889][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.123500][ T5981] usb 1-1: config 0 descriptor??
[  215.311379][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.322457][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.338547][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.350001][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.582601][ T5981] usbhid 1-1:0.0: can't add hid device: -71
[  215.589163][ T5981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  215.609384][ T5981] usb 1-1: USB disconnect, device number 61
[  215.940899][  T123] gspca_sunplus: reg_r err -71
[  215.946237][  T123] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  215.962808][  T123] usb 4-1: USB disconnect, device number 49
[  216.105696][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.116138][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.483264][ T8190] netlink: 44 bytes leftover after parsing attributes in process `syz.0.705'.
[  216.795403][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.808404][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.852523][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.877350][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.905794][ T5981] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  216.931193][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.944392][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.093080][ T5981] usb 1-1: Using ep0 maxpacket: 32
[  217.100228][ T5981] usb 1-1: config 0 interface 0 has no altsetting 0
[  217.110909][ T5981] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  217.120346][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.129750][ T5981] usb 1-1: Product: syz
[  217.134175][ T5981] usb 1-1: Manufacturer: syz
[  217.138792][ T5981] usb 1-1: SerialNumber: syz
[  217.145952][ T5981] usb 1-1: config 0 descriptor??
[  217.293057][  T981] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  217.333096][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  217.444847][  T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.457002][  T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.466841][  T981] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  217.475972][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.486376][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  217.497621][  T981] usb 4-1: config 0 descriptor??
[  217.510183][   T10] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47
[  217.540794][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.549066][   T10] usb 5-1: Product: syz
[  217.553629][   T10] usb 5-1: Manufacturer: syz
[  217.558380][   T10] usb 5-1: SerialNumber: syz
[  217.573219][ T5981] gs_usb 1-1:0.0: Configuring for 2 interfaces
[  217.594235][   T10] usb 5-1: config 0 descriptor??
[  217.638562][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.649320][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.772826][ T5981] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  217.781392][ T5981] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  217.799382][ T5981] usb 1-1: USB disconnect, device number 62
[  217.924847][  T981] logitech 0003:046D:C287.0011: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0
[  217.937748][  T981] logitech 0003:046D:C287.0011: no inputs found
[  218.125244][ T5981] usb 4-1: USB disconnect, device number 50
[  218.220469][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[  218.275985][ T8229] input: syz1 as /devices/virtual/input/input39
[  219.956706][ T8210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.023464][  T981] usb 5-1: USB disconnect, device number 16
[  220.241725][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.251989][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.293142][  T123] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  220.423030][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  220.446378][  T123] usb 4-1: unable to get BOS descriptor or descriptor too short
[  220.454737][  T123] usb 4-1: not running at top speed; connect to a high speed hub
[  220.463782][  T123] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  220.472172][  T123] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  220.482615][  T123] usb 4-1: config 4 has no interface number 0
[  220.491466][  T123] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  220.500864][  T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.508941][  T123] usb 4-1: Product: syz
[  220.513249][  T123] usb 4-1: Manufacturer: syz
[  220.517879][  T123] usb 4-1: SerialNumber: syz
[  220.577238][   T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  220.588404][   T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  220.599149][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.608402][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.621313][ T8247] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  220.633779][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  220.760472][  T123] uvcvideo 4-1:4.147: Found UVC 0.00 device syz (04f2:b746)
[  220.770889][  T123] uvcvideo 4-1:4.147: No valid video chain found.
[  220.786927][  T123] usb 4-1: USB disconnect, device number 51
[  220.832327][  T981] usb 1-1: USB disconnect, device number 63
[  220.936946][ T8256] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  220.944971][ T8256] netlink: 96 bytes leftover after parsing attributes in process `syz.2.726'.
[  220.955477][ T8256] netlink: 1 bytes leftover after parsing attributes in process `syz.2.726'.
[  220.964419][ T8256] netlink: 658 bytes leftover after parsing attributes in process `syz.2.726'.
[  221.180626][ T8270] input: syz1 as /devices/virtual/input/input41
[  221.412475][ T8280] 9p: Could not find request transport: virto
[  221.673080][  T981] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  221.835738][  T981] usb 5-1: config 255 has too many interfaces: 223, using maximum allowed: 32
[  221.844812][  T981] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 223
[  221.857135][  T981] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  221.866377][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.874439][  T981] usb 5-1: Product: syz
[  221.878842][  T981] usb 5-1: Manufacturer: syz
[  221.883706][  T981] usb 5-1: SerialNumber: syz
[  221.896895][  T981] gspca_main: sq930x-2.14.0 probing 2770:930c
[  222.072364][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.736'.
[  222.081531][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.736'.
[  222.197465][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.211776][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.297721][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.308159][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.333285][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[  222.381548][  T981] gspca_sq930x: reg_w 0305 fd00 failed -32
[  222.443258][ T5981] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  222.593047][ T5981] usb 4-1: Using ep0 maxpacket: 32
[  222.600109][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short
[  222.609455][ T5981] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  222.613553][  T981] gspca_sq930x: Sensor ov9630 not yet treated
[  222.618375][ T5981] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  222.634667][ T5981] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  222.641365][  T981] sq930x 5-1:255.0: probe with driver sq930x failed with error -22
[  222.645910][ T5981] usb 4-1: config 128 has no interface number 0
[  222.659750][  T981] usb 5-1: USB disconnect, device number 17
[  222.669974][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  222.681641][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  222.691859][ T5981] usb 4-1: config 128 interface 127 has no altsetting 0
[  222.699219][  T123] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  222.709538][ T5981] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  222.724520][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.732599][ T5981] usb 4-1: Product: syz
[  222.737283][ T5981] usb 4-1: Manufacturer: syz
[  222.743358][ T5981] usb 4-1: SerialNumber: syz
[  222.867562][  T123] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  222.876853][  T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.885001][  T123] usb 1-1: Product: syz
[  222.889205][  T123] usb 1-1: Manufacturer: syz
[  222.893877][  T123] usb 1-1: SerialNumber: syz
[  222.902296][  T123] usb 1-1: config 0 descriptor??
[  223.110827][  T123] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  223.788977][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.798387][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.382568][ T8357] vivid-000: =================  START STATUS  =================
[  224.391787][ T8357] vivid-000: Enable Output Cropping: true
[  224.397908][ T8357] vivid-000: Enable Output Composing: true
[  224.405223][ T8357] vivid-000: Enable Output Scaler: true
[  224.410891][ T8357] vivid-000: Tx RGB Quantization Range: Automatic
[  224.417497][ T8357] vivid-000: Transmit Mode: HDMI
[  224.422516][ T8357] vivid-000: Hotplug Present: 0x00000000
[  224.428467][ T8357] vivid-000: RxSense Present: 0x00000000
[  224.434256][ T8357] vivid-000: EDID Present: 0x00000000
[  224.439955][ T8357] vivid-000: ==================  END STATUS  ==================
[  224.743389][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.754443][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.765815][  T123] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32)
[  224.776805][  T123] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  224.785706][  T123] usb 1-1: media controller created
[  224.796490][  T123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.860837][  T123] i2c i2c-2: Added multiplexed i2c bus 3
[  224.870743][  T123] rtl2832 2-0010: Realtek RTL2832 successfully attached
[  224.879293][  T123] usb 1-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))...
[  224.888652][  T123] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[  224.938587][  T123] DVB: Unable to find symbol r820t_attach()
[  224.998455][  T123] usb 1-1: USB disconnect, device number 64
[  225.220716][ T8364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  225.233369][ T8365] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  225.239634][ T8364] overlayfs: maximum fs stacking depth exceeded
[  225.265300][ T5981] usb 4-1: USB disconnect, device number 52
[  225.285392][ T8366] No control pipe specified
[  225.305733][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.480834][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.496599][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.513302][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.528197][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.733110][ T5981] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  225.803937][ T6185] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  225.893095][ T5981] usb 4-1: Using ep0 maxpacket: 32
[  225.900335][ T5981] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  225.909041][ T5887] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  225.917048][ T5981] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  225.926326][ T5981] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  225.935862][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  225.946246][ T6185] usb 1-1: device descriptor read/64, error -71
[  225.952635][ T5981] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  225.962479][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  225.975745][ T5981] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  225.984892][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.995102][ T5981] usb 4-1: config 0 descriptor??
[  226.095146][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.106430][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.117027][ T5887] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  226.128048][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.140992][ T5887] usb 5-1: config 0 descriptor??
[  226.183053][ T6185] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  226.206508][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.220822][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.246318][ T5981] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  226.267999][ T5981] usb 4-1: USB disconnect, device number 53
[  226.286317][ T5981] usblp0: removed
[  226.313111][ T6185] usb 1-1: device descriptor read/64, error -71
[  226.424810][ T6185] usb usb1-port1: attempt power cycle
[  226.562198][ T5887] hid_parser_main: 15 callbacks suppressed
[  226.562222][ T5887] aquacomputer_d5next 0003:0C70:F003.0012: unknown main item tag 0x0
[  226.576931][ T5887] aquacomputer_d5next 0003:0C70:F003.0012: unknown main item tag 0x0
[  226.585376][ T5887] aquacomputer_d5next 0003:0C70:F003.0012: unknown main item tag 0x0
[  226.596390][ T5887] aquacomputer_d5next 0003:0C70:F003.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0
[  226.762716][ T5887] usb 5-1: USB disconnect, device number 18
[  226.769342][ T5981] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  226.777068][ T6185] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  226.803985][ T6185] usb 1-1: device descriptor read/8, error -71
[  226.933012][ T5981] usb 4-1: Using ep0 maxpacket: 32
[  226.940648][ T5981] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  226.949242][ T5981] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  226.959647][ T5981] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  226.968779][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  226.979207][ T5981] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  226.989575][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  227.002662][ T5981] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  227.011936][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.024569][ T5981] usb 4-1: config 0 descriptor??
[  227.053036][ T6185] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  227.083941][ T6185] usb 1-1: device descriptor read/8, error -71
[  227.195889][ T6185] usb usb1-port1: unable to enumerate USB device
[  227.199583][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.212228][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.346565][ T8419] batadv_slave_1: entered promiscuous mode
[  227.354707][ T8419] batadv_slave_1: left promiscuous mode
[  227.792070][ T8425] kvm: MONITOR instruction emulated as NOP!
[  228.014252][ T8429] overlayfs: failed to resolve 'fscontext=unconfined_u': -2
[  228.080388][ T8431] program syz.2.760 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.544799][ T5981] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  228.593146][ T5981] usb 4-1: USB disconnect, device number 54
[  228.607303][ T5981] usblp0: removed
[  228.669876][ T5887] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  228.848856][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61
[  228.859789][ T5887] usb 5-1: can't read configurations, error -61
[  229.003258][ T5887] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  229.056288][   T30] audit: type=1326 audit(1766901832.666:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5097f8f749 code=0x0
[  229.166383][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61
[  229.174323][ T5887] usb 5-1: can't read configurations, error -61
[  229.180892][ T5887] usb usb5-port1: attempt power cycle
[  229.503303][ T8451] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  229.509631][ T8451] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  229.520904][ T8451] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  229.527096][ T5887] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  229.529686][ T8451] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  229.544513][ T8451] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  229.550527][ T8451] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  229.562831][ T8451] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  229.569243][ T8451] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  229.576664][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61
[  229.585084][ T5887] usb 5-1: can't read configurations, error -61
[  229.594880][ T8451] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  229.670351][ T8466] Invalid ELF header magic: != ELF
[  229.723459][ T5887] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  229.750397][ T8468] Invalid ELF header magic: != ELF
[  229.760859][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61
[  229.778099][ T5887] usb 5-1: can't read configurations, error -61
[  229.789907][ T5887] usb usb5-port1: unable to enumerate USB device
[  229.843036][ T5880] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  230.006709][ T5887] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  230.026143][ T5880] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.037968][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0
[  230.045327][ T5880] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00
[  230.054794][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.065715][ T5880] usb 4-1: config 0 descriptor??
[  230.153102][ T5887] usb 1-1: device descriptor read/64, error -71
[  230.393016][ T5887] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  230.482172][ T5880] wacom 0003:056A:00D2.0013: item fetching failed at offset 3/5
[  230.490855][ T5880] wacom 0003:056A:00D2.0013: parse failed
[  230.496860][ T5880] wacom 0003:056A:00D2.0013: probe with driver wacom failed with error -22
[  230.523244][ T5887] usb 1-1: device descriptor read/64, error -71
[  230.565829][ T8469] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  230.610912][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.620822][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.644184][ T5887] usb usb1-port1: attempt power cycle
[  230.681223][ T5981] usb 4-1: USB disconnect, device number 55
[  230.698340][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.708481][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.763168][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  230.993035][ T5887] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  231.013533][ T5887] usb 1-1: device descriptor read/8, error -71
[  231.263122][ T5887] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  231.288197][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.297478][ T5887] usb 1-1: device descriptor read/8, error -71
[  231.306035][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.426325][ T5887] usb usb1-port1: unable to enumerate USB device
[  231.563966][ T5149] Bluetooth: hci1: command 0x0406 tx timeout
[  231.570167][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  231.682050][ T8488] MTD: Couldn't look up '/dev/sg0': -15
[  231.986598][ T5887] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  232.147533][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.162633][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  232.175648][ T5887] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  232.184968][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  232.193488][ T5887] usb 5-1: SerialNumber: syz
[  232.217972][ T8506] loop8: detected capacity change from 0 to 7
[  232.229363][ T8506] Dev loop8: unable to read RDB block 7
[  232.235421][ T8506]  loop8: unable to read partition table
[  232.241324][ T8506] loop8: partition table beyond EOD, truncated
[  232.247843][ T8506] loop_reread_partitions: partition scan of loop8 (
[  232.247843][ T8506] 被Xü^>Ñà– ) failed (rc=-5)
[  232.261654][ T8507] netlink: 'syz.2.782': attribute type 10 has an invalid length.
[  232.307302][ T8507] 8021q: adding VLAN 0 to HW filter on device team0
[  232.317586][ T8507] bond0: (slave team0): Enslaving as an active interface with an up link
[  232.395139][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.404697][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.413089][ T8490] netlink: 'syz.4.777': attribute type 3 has an invalid length.
[  232.420892][ T8490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.777'.
[  232.432366][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.445545][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.457746][ T5887] usb 5-1: 0:2 : does not exist
[  232.462722][ T5887] usb 5-1: unit 255 not found!
[  232.504192][ T5887] usb 5-1: USB disconnect, device number 23
[  232.528850][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.855552][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  233.061765][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.068801][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.076261][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.083958][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.092292][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.099766][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.106743][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.113702][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.120698][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.127687][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.134696][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.141633][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.153053][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.159997][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.167017][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.173950][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.180834][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.188722][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.195777][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.202684][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.209626][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.216628][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.223621][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.230524][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.237477][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.244495][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.251458][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.259541][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.266499][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.273427][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.280346][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.287981][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.294913][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2023
[  233.323026][ T5839] Bluetooth: hci4: command 0x1003 tx timeout
[  233.330744][ T5832] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  233.510091][ T8533] Malformed UNC in devname
[  233.510091][ T8533] 
[  233.517492][ T8533] CIFS: VFS: Malformed UNC in devname
[  233.643021][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  233.650408][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  233.670916][ T5832] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  233.723322][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  233.869025][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.921473][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.952726][    T9] usb 5-1: Using ep0 maxpacket: 16
[  233.960213][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.983817][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.996922][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  234.032718][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  234.041904][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.054333][    T9] usb 5-1: config 0 descriptor??
[  234.363239][ T5895] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  234.562522][    T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0014/input/input43
[  234.578057][ T5895] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  234.587594][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.632186][ T5895] usb 1-1: config 0 descriptor??
[  234.648162][ T5895] gspca_main: mars-2.14.0 probing 093a:050f
[  234.686309][    T9] appleir 0003:05AC:8241.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  234.867135][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.901430][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.951180][    T9] usb 1-1: USB disconnect, device number 73
[  235.045755][ T5887] usb 5-1: USB disconnect, device number 24
[  235.222713][ T5895] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  235.312578][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.321564][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.345056][ T8572] netlink: 364 bytes leftover after parsing attributes in process `syz.2.800'.
[  235.382011][ T5895] usb 4-1: Using ep0 maxpacket: 16
[  235.389471][ T5895] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  235.401044][ T5895] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 41923, setting to 1024
[  235.412977][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0
[  235.419917][ T5895] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  235.429252][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.444556][ T5895] usb 4-1: config 0 descriptor??
[  235.878232][ T5895] hid (null): global environment stack underflow
[  235.888317][ T5895] hid (null): unknown global tag 0xc
[  235.893868][  T123] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  235.902029][ T5895] hid (null): unknown global tag 0xe
[  235.907434][ T5895] hid (null): invalid report_count -1188160022
[  235.915722][ T5895] hid (null): unknown global tag 0xc
[  235.922067][ T5895] hid (null): unknown global tag 0xc
[  235.928939][ T5895] hid (null): unknown global tag 0xe
[  235.952354][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.961574][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.968874][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.976320][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.984900][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.992323][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  235.999434][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  236.007361][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  236.014958][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  236.032211][ T5895] cougar 0003:060B:500A.0015: unknown main item tag 0x0
[  236.041375][ T5895] cougar 0003:060B:500A.0015: unexpected long global item
[  236.057728][ T5895] cougar 0003:060B:500A.0015: parse failed
[  236.064320][  T123] usb 5-1: Using ep0 maxpacket: 32
[  236.072708][  T123] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  236.093671][ T5895] cougar 0003:060B:500A.0015: probe with driver cougar failed with error -22
[  236.102766][  T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.140062][ T5895] usb 4-1: USB disconnect, device number 56
[  236.150517][  T123] gspca_main: nw80x-2.14.0 probing 055f:d001
[  236.718855][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.730132][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.787073][  T123] gspca_nw80x: reg_w err -71
[  236.798621][  T123] nw80x 5-1:3.0: probe with driver nw80x failed with error -71
[  236.810070][  T123] usb 5-1: USB disconnect, device number 25
[  236.856945][ T8589] program syz.0.807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.882068][ T5895] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  237.031237][ T5895] usb 4-1: Using ep0 maxpacket: 16
[  237.038345][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.048747][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  237.060051][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.069245][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.078177][ T5895] usb 4-1: Product: syz
[  237.082693][ T5895] usb 4-1: Manufacturer: syz
[  237.087321][ T5895] usb 4-1: SerialNumber: syz
[  237.308251][ T5895] usb 4-1: 0:2 : does not exist
[  237.313470][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.328995][ T5895] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  237.333279][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.430371][ T5895] usb 4-1: USB disconnect, device number 57
[  237.476249][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.700868][    T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  237.853467][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  237.862898][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.873796][    T9] usb 1-1: config 0 descriptor??
[  238.025664][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.040461][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.101796][   T30] audit: type=1326 audit(6058304140.714:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c198f749 code=0x7fc00000
[  238.284971][ T8596] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  238.296742][    T9] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  238.306621][    T9] hackrf 1-1:0.0: Could not detect board
[  238.312700][    T9] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  238.325120][    T9] usb 1-1: USB disconnect, device number 74
[  238.379427][ T8618] syzkaller1: entered promiscuous mode
[  238.385328][ T8618] syzkaller1: entered allmulticast mode
[  238.645760][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'.
[  238.744700][ T8632] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.760778][ T8632] IPv6: NLM_F_REPLACE set, but no existing node found!
[  238.769503][ T8632] IPv6: NLM_F_REPLACE set, but no existing node found!
[  239.140319][ T5895] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  239.210133][  T981] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  239.291865][ T5895] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  239.300240][ T5895] usb 1-1: config 0 has no interface number 0
[  239.306353][ T5895] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  239.317687][ T5895] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  239.332156][ T5895] usb 1-1: config 0 interface 255 has no altsetting 0
[  239.338999][ T5895] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  239.348310][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.358862][ T5895] usb 1-1: config 0 descriptor??
[  239.368014][ T5895] cp210x 1-1:0.255: cp210x converter detected
[  239.377250][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  239.387301][  T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  239.397136][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  239.407191][  T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  239.417043][  T981] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  239.426192][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.437687][  T981] usb 5-1: config 0 descriptor??
[  239.646241][  T981] hdpvr 5-1:0.0: unexpected answer of status request, len -71
[  239.657596][  T981] hdpvr 5-1:0.0: device init failed
[  239.663447][  T981] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  239.675990][  T981] usb 5-1: USB disconnect, device number 26
[  239.768950][ T5895] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32
[  239.832656][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'.
[  239.898210][ T8651] netlink: 'syz.2.828': attribute type 29 has an invalid length.
[  239.908109][ T8651] netlink: 'syz.2.828': attribute type 29 has an invalid length.
[  239.921566][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.930732][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.942796][ T8651] netlink: 588 bytes leftover after parsing attributes in process `syz.2.828'.
[  239.977994][ T5895] cp210x 1-1:0.255: GPIO initialisation failed: -19
[  239.989520][ T5895] usb 1-1: cp210x converter now attached to ttyUSB0
[  240.273987][ T5895] usb 1-1: USB disconnect, device number 75
[  240.295505][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  240.310509][ T5895] cp210x 1-1:0.255: device disconnected
[  240.440769][  T981] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  240.503593][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.512620][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.599686][  T981] usb 5-1: Using ep0 maxpacket: 16
[  240.607550][  T981] usb 5-1: config 6 has an invalid interface number: 233 but max is 0
[  240.615991][  T981] usb 5-1: config 6 has no interface number 0
[  240.622268][  T981] usb 5-1: config 6 interface 233 has no altsetting 0
[  240.631455][  T981] usb 5-1: New USB device found, idVendor=12d1, idProduct=10d5, bcdDevice=df.7c
[  240.640944][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.648968][  T981] usb 5-1: Product: syz
[  240.653407][  T981] usb 5-1: Manufacturer: syz
[  240.658885][  T981] usb 5-1: SerialNumber: syz
[  240.871284][  T981] huawei_cdc_ncm 5-1:6.233: CDC Union missing and no IAD found
[  240.878899][  T981] huawei_cdc_ncm 5-1:6.233: bind() failure
[  240.986434][ T8658] syzkaller1: entered promiscuous mode
[  240.992043][ T8658] syzkaller1: entered allmulticast mode
[  241.073758][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.086219][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.121155][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.131489][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.148405][ T8667] netlink: 168 bytes leftover after parsing attributes in process `syz.0.833'.
[  241.357195][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'.
[  241.407174][ T8679] netlink: 80 bytes leftover after parsing attributes in process `syz.2.838'.
[  241.501857][  T981] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[  241.592277][ T8689] tmpfs: Bad value for 'mpol'
[  241.598718][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.610330][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.668844][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  241.798844][  T981] usb 4-1: new low-speed USB device number 59 using dummy_hcd
[  241.948708][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  241.954435][  T981] usb usb4-port1: attempt power cycle
[  242.158152][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.170112][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.309063][  T981] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[  242.329337][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  242.381629][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.392652][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.458558][  T981] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  242.479770][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  242.485391][  T981] usb usb4-port1: unable to enumerate USB device
[  242.608414][ T5981] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  242.748394][ T5981] usb 1-1: device descriptor read/64, error -71
[  242.988248][ T5981] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  243.118254][ T5981] usb 1-1: device descriptor read/64, error -71
[  243.229435][ T5981] usb usb1-port1: attempt power cycle
[  243.238473][    T9] usb 5-1: USB disconnect, device number 27
[  243.298990][ T5832] Bluetooth: hci0: unexpected event for opcode 0x1804
[  243.311708][ T8702] loop6: detected capacity change from 0 to 524287999
[  243.570466][ T5981] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  243.608831][ T5981] usb 1-1: device descriptor read/8, error -71
[  243.651544][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.662393][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.718304][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  243.858076][ T5981] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  243.878519][    T9] usb 5-1: Using ep0 maxpacket: 32
[  243.885180][ T5981] usb 1-1: device descriptor read/8, error -71
[  243.892419][    T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  243.901745][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.912159][    T9] usb 5-1: config 0 descriptor??
[  243.921215][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  244.009314][ T5981] usb usb1-port1: unable to enumerate USB device
[  244.128116][    T9] gspca_vc032x: reg_w err -71
[  244.133147][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.142908][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.148842][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.156165][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.162036][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.167451][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.173726][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.179791][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.185316][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.191642][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.197120][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.203033][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.208753][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.214145][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.220073][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.225488][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.232170][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.237578][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  244.252926][    T9] gspca_vc032x: Unknown sensor...
[  244.277031][    T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  244.312239][    T9] usb 5-1: USB disconnect, device number 28
[  244.579432][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'.
[  244.592088][ T8719] netlink: 25 bytes leftover after parsing attributes in process `syz.2.849'.
[  244.691154][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.701814][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.714990][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.724091][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.738086][  T981] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  244.750044][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.760106][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.901420][  T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.917678][  T981] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  244.928183][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.946924][  T981] usb 4-1: config 0 descriptor??
[  245.178056][ T5981] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  245.334671][ T5981] usb 5-1: unable to get BOS descriptor or descriptor too short
[  245.352223][ T5981] usb 5-1: unable to read config index 0 descriptor/start: -71
[  245.366760][ T5981] usb 5-1: can't read configurations, error -71
[  245.458820][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  245.469432][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  245.605541][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.606623][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.768101][    T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  245.928052][    T9] usb 1-1: Using ep0 maxpacket: 32
[  245.935356][    T9] usb 1-1: config 12 has an invalid interface number: 7 but max is 0
[  245.943936][    T9] usb 1-1: config 12 has no interface number 0
[  245.952138][    T9] usb 1-1: config 12 interface 7 has no altsetting 0
[  245.963579][    T9] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  245.972938][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.989506][    T9] usb 1-1: Product: syz
[  245.993742][    T9] usb 1-1: Manufacturer: syz
[  246.005009][    T9] usb 1-1: SerialNumber: syz
[  246.260504][ T8736] bpf: Bad value for 'gid'
[  246.291515][    T9] go7007 1-1:12.7: probe with driver go7007 failed with error -12
[  246.304647][    T9] usb 1-1: USB disconnect, device number 80
[  246.338608][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.354015][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.668063][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  246.827815][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  246.840053][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.848814][    T9] usb 5-1: Product: syz
[  246.853278][    T9] usb 5-1: Manufacturer: syz
[  246.858203][    T9] usb 5-1: SerialNumber: syz
[  246.866345][    T9] usb 5-1: config 0 descriptor??
[  246.956496][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.975899][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.985245][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.992414][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.005845][ T8769] ubi0: attaching mtd0
[  247.012625][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.023242][ T8769] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[  247.031903][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.338104][ T5981] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  247.412225][  T981] usbhid 4-1:0.0: can't add hid device: -71
[  247.424683][  T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  247.440803][  T981] usb 4-1: USB disconnect, device number 62
[  247.486512][ T8774] netlink: 'syz.3.867': attribute type 1 has an invalid length.
[  247.496384][ T8774] netlink: 224 bytes leftover after parsing attributes in process `syz.3.867'.
[  247.502011][ T5981] usb 1-1: Using ep0 maxpacket: 16
[  247.513324][ T5981] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[  247.513404][ T8774] tmpfs: Bad value for 'mpol'
[  247.527306][ T5981] usb 1-1: config 0 has no interface number 0
[  247.537618][ T5981] usb 1-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=e4.b9
[  247.552790][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.562210][ T5981] usb 1-1: Product: syz
[  247.566466][ T5981] usb 1-1: Manufacturer: syz
[  247.575473][ T5981] usb 1-1: SerialNumber: syz
[  247.592701][ T5981] usb 1-1: config 0 descriptor??
[  247.810172][ T5981] usb 1-1: USB disconnect, device number 81
[  247.913281][    T9] usb 5-1: f81604_read: reg: 100f failed: -EREMOTEIO
[  248.317443][    T9] usb 5-1: f81604_read: reg: 200e failed: -EPROTO
[  248.339194][    T9] usb 5-1: USB disconnect, device number 31
[  248.370729][    T9] usb 5-1: f81604_read: reg: 100f failed: -ENODEV
[  248.414986][    T9] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  248.621555][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.630735][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.678447][ T5981] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  248.679474][  T981] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  248.719837][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.732921][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.840358][  T981] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  248.841035][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.856711][  T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  248.877483][  T981] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  248.888352][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.908074][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.912528][  T981] usb 4-1: config 0 descriptor??
[  248.928132][ T5981] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  248.937739][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.977194][ T5981] usb 1-1: config 0 descriptor??
[  249.152577][  T981] usbhid 4-1:0.0: can't add hid device: -71
[  249.161205][  T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  249.176913][  T981] usb 4-1: USB disconnect, device number 63
[  249.347889][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.363113][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.388105][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  249.403929][ T5981] hid_parser_main: 67 callbacks suppressed
[  249.403945][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.417408][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.424685][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.432243][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.439672][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.446887][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.454771][ T5981] logitech 0003:046D:C294.0016: unknown main item tag 0x0
[  249.465413][ T5981] logitech 0003:046D:C294.0016: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0
[  249.477205][ T5981] logitech 0003:046D:C294.0016: no inputs found
[  249.560595][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.573676][    T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.591316][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.600643][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.601621][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.608795][    T9] usb 5-1: Product: syz
[  249.608818][    T9] usb 5-1: Manufacturer: syz
[  249.608835][    T9] usb 5-1: SerialNumber: syz
[  249.638516][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.847809][    T9] cdc_ncm 5-1:1.0: bind() failure
[  249.862337][    T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  249.869476][    T9] cdc_ncm 5-1:1.1: bind() failure
[  249.899246][    T9] usb 5-1: USB disconnect, device number 32
[  249.958404][  T981] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  250.128058][  T981] usb 4-1: Using ep0 maxpacket: 8
[  250.134833][  T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.145150][  T981] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  250.156988][  T981] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  250.166372][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.174447][  T981] usb 4-1: Product: syz
[  250.179621][  T981] usb 4-1: Manufacturer: syz
[  250.184281][  T981] usb 4-1: SerialNumber: syz
[  250.192686][  T981] usb 4-1: config 0 descriptor??
[  250.533780][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.555963][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.491101][  T123] usb 1-1: USB disconnect, device number 82
[  251.808132][ T5895] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  251.948230][  T123] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  251.955982][ T5895] usb 5-1: device descriptor read/64, error -71
[  252.073750][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.083100][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.099965][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.109115][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.128584][  T123] usb 1-1: Using ep0 maxpacket: 16
[  252.139594][  T123] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.150779][  T123] usb 1-1: config 0 interface 0 has no altsetting 0
[  252.157519][  T123] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  252.168219][  T123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.179884][  T123] usb 1-1: config 0 descriptor??
[  252.221757][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.231689][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.239121][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  252.388119][ T5895] usb 5-1: device descriptor read/64, error -71
[  252.429559][  T123] cougar 0003:060B:500A.0017: unexpected long global item
[  252.444149][  T123] cougar 0003:060B:500A.0017: parse failed
[  252.450273][  T123] cougar 0003:060B:500A.0017: probe with driver cougar failed with error -22
[  252.498612][ T5895] usb usb5-port1: attempt power cycle
[  252.601432][    T9] usb 1-1: USB disconnect, device number 83
[  252.711077][   T30] audit: type=1800 audit(252.668:75): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.879" name="/" dev="fuse" ino=4 res=0 errno=0
[  252.751292][  T981] usb 4-1: USB disconnect, device number 64
[  252.848274][ T5895] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  252.878779][ T5895] usb 5-1: device descriptor read/8, error -71
[  253.125696][ T5895] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  253.179087][ T5895] usb 5-1: device descriptor read/8, error -71
[  253.299256][ T5895] usb usb5-port1: unable to enumerate USB device
[  253.783333][ T8906] netlink: 228 bytes leftover after parsing attributes in process `syz.3.897'.
[  253.858144][ T5895] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  254.018031][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  254.025340][ T5895] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  254.028453][    T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  254.036573][ T5895] usb 1-1: config 0 has no interface number 0
[  254.051090][ T5895] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2
[  254.068129][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.086753][ T5895] usb 1-1: Product: syz
[  254.098214][ T5895] usb 1-1: Manufacturer: syz
[  254.108313][ T5895] usb 1-1: SerialNumber: syz
[  254.125006][ T5895] usb 1-1: config 0 descriptor??
[  254.147633][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.69/input/input44
[  254.169564][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.180623][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.220039][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.231589][    T9] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  254.240746][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.251970][    T9] usb 4-1: config 0 descriptor??
[  254.267004][    T9] pegasus_notetaker 4-1:0.0: Invalid number of endpoints
[  254.279376][    T9] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  254.365433][ T5184] bcm5974 1-1:0.69: could not read from device
[  254.372998][ T5184] bcm5974 1-1:0.69: could not read from device
[  254.385853][ T5895] usb 1-1: USB disconnect, device number 84
[  254.393417][ T5184] bcm5974 1-1:0.69: could not read from device
[  254.462034][  T123] usb 4-1: USB disconnect, device number 65
[  254.916174][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.930182][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.010647][  T123] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  255.033399][ T8924] pim6reg: entered allmulticast mode
[  255.042604][ T8924] tmpfs: Unknown parameter '0x0000000000000003'
[  255.179047][  T123] usb 5-1: Using ep0 maxpacket: 32
[  255.185989][  T123] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  255.194554][  T123] usb 5-1: config 0 has no interface number 0
[  255.201450][  T123] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  255.211641][  T123] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  255.223880][  T123] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  255.233924][  T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.242104][  T123] usb 5-1: Product: syz
[  255.246308][  T123] usb 5-1: Manufacturer: syz
[  255.251001][  T123] usb 5-1: SerialNumber: syz
[  255.258789][  T123] usb 5-1: config 0 descriptor??
[  255.264657][ T8910] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  255.278144][ T8910] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  255.288043][  T981] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  255.315780][  T123] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c6:dc:d1:e9:44:ad
[  255.447988][  T981] usb 1-1: Using ep0 maxpacket: 32
[  255.458040][  T981] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  255.477483][  T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.496950][  T981] usb 1-1: config 0 descriptor??
[  255.521630][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.525643][  T981] gspca_main: sunplus-2.14.0 probing 041e:400b
[  255.541048][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.679501][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.714238][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'.
[  255.726562][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.779490][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.808567][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.832317][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x17
[  255.832395][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x25
[  255.842174][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x05
[  255.850549][ T5832] Bluetooth: hci2: unknown advertising packet type: 0xff
[  256.325380][ T8964] netlink: 'syz.3.909': attribute type 9 has an invalid length.
[  256.360070][ T8964] netlink: 'syz.3.909': attribute type 11 has an invalid length.
[  256.371924][ T8964] netlink: 'syz.3.909': attribute type 12 has an invalid length.
[  256.383473][ T8964] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.909'.
[  256.393420][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'.
[  256.645958][ T8972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2464837308 (9859349232 ns) > initial count (8647923304 ns). Using initial count to start timer.
[  256.745777][ T8924] pim6reg: left allmulticast mode
[  256.845993][  T981] gspca_sunplus: reg_w_riv err -71
[  256.857396][  T981] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  256.889030][  T981] usb 1-1: USB disconnect, device number 85
[  256.949998][    T9] usb 5-1: USB disconnect, device number 37
[  256.963242][    T9] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  257.136508][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.169229][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.233918][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'.
[  257.419182][ T8997] syzkaller1: entered promiscuous mode
[  257.439298][ T8997] syzkaller1: entered allmulticast mode
[  257.738360][    T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  257.799465][ T9009] netlink: 'syz.3.918': attribute type 2 has an invalid length.
[  257.828169][  T981] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  257.898047][    T9] usb 1-1: Using ep0 maxpacket: 8
[  257.908927][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  257.929200][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.947471][    T9] usb 1-1: Product: syz
[  257.957149][    T9] usb 1-1: Manufacturer: syz
[  257.973435][    T9] usb 1-1: SerialNumber: syz
[  257.999788][    T9] usb 1-1: config 0 descriptor??
[  258.128033][  T981] usb 5-1: device descriptor read/64, error -71
[  258.235305][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  258.407972][  T981] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  258.503997][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.515467][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.558108][  T981] usb 5-1: device descriptor read/64, error -71
[  258.668509][  T981] usb usb5-port1: attempt power cycle
[  258.694306][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.718521][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.008365][  T981] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  259.048281][  T981] usb 5-1: device descriptor read/8, error -71
[  259.104949][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'.
[  259.289250][  T981] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  259.325513][  T981] usb 5-1: device descriptor read/8, error -71
[  259.441243][  T981] usb usb5-port1: unable to enumerate USB device
[  259.796004][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  259.838543][    T9] usb 1-1: USB disconnect, device number 86
[  260.378350][    T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  260.548318][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.569340][    T9] usb 4-1: config index 0 descriptor too short (expected 539, got 27)
[  260.577610][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  260.589158][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.615335][    T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  260.638011][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.649434][    T9] usb 4-1: Product: syz
[  260.653744][    T9] usb 4-1: Manufacturer: syz
[  260.669320][    T9] usb 4-1: SerialNumber: syz
[  260.680400][    T9] usb 4-1: config 0 descriptor??
[  260.699340][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  260.705319][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[  260.750490][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.765515][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.777234][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45
[  260.797149][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.807697][    T9] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  260.810314][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.851081][    T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22
[  261.000489][  T981] usb 4-1: USB disconnect, device number 66
[  261.060210][  T123] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  261.084017][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  261.091658][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  261.198120][  T123] usb 5-1: device descriptor read/64, error -71
[  261.295427][   T30] audit: type=1800 audit(261.248:76): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.926" name="file0" dev="tmpfs" ino=1091 res=0 errno=0
[  261.391187][ T9109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.931'.
[  261.402079][ T9110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.931'.
[  261.448094][  T123] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  261.476072][ T9113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'.
[  261.489804][ T9113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'.
[  261.598101][  T123] usb 5-1: device descriptor read/64, error -71
[  261.691412][ T9124] netlink: 56 bytes leftover after parsing attributes in process `syz.2.935'.
[  261.760625][  T123] usb usb5-port1: attempt power cycle
[  262.108050][  T123] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  262.138769][  T123] usb 5-1: device descriptor read/8, error -71
[  262.291766][   T30] audit: type=1326 audit(262.248:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.0.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2adf78f749 code=0x0
[  262.379250][  T123] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  262.390439][ T9127] syzkaller1: entered promiscuous mode
[  262.395962][ T9127] syzkaller1: entered allmulticast mode
[  262.419020][  T123] usb 5-1: device descriptor read/8, error -71
[  262.539466][  T123] usb usb5-port1: unable to enumerate USB device
[  262.550126][ T9134] GUP no longer grows the stack in syz.3.938 (9134): 200000005000-200000008000 (200000004000)
[  262.550152][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.572263][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.598489][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.3.938 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  262.598527][ T9134] Tainted: [L]=SOFTLOCKUP
[  262.598535][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  262.598560][ T9134] Call Trace:
[  262.598569][ T9134]  <TASK>
[  262.598578][ T9134]  dump_stack_lvl+0x189/0x250
[  262.598611][ T9134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.598634][ T9134]  ? __pfx__printk+0x10/0x10
[  262.598665][ T9134]  ? find_vma+0xe7/0x160
[  262.598708][ T9134]  fixup_user_fault+0x64a/0x700
[  262.598742][ T9134]  fault_in_user_writeable+0x72/0xe0
[  262.598773][ T9134]  futex_lock_pi+0x773/0xa90
[  262.598807][ T9134]  ? __pfx_futex_lock_pi+0x10/0x10
[  262.598827][ T9134]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  262.598882][ T9134]  ? __pfx_futex_wake_mark+0x10/0x10
[  262.598913][ T9134]  ? __pfx_futex_wake+0x10/0x10
[  262.598933][ T9134]  ? userfaultfd_unmap_complete+0x278/0x2d0
[  262.598965][ T9134]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  262.598999][ T9134]  do_futex+0x292/0x420
[  262.599037][ T9134]  ? __pfx_do_futex+0x10/0x10
[  262.599069][ T9134]  ? __vm_munmap+0x2c1/0x380
[  262.599109][ T9134]  __se_sys_futex+0x36f/0x400
[  262.599150][ T9134]  ? __pfx___se_sys_futex+0x10/0x10
[  262.599190][ T9134]  ? __x64_sys_futex+0x21/0xf0
[  262.599226][ T9134]  do_syscall_64+0xfa/0xf80
[  262.599252][ T9134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.599273][ T9134]  ? clear_bhb_loop+0x60/0xb0
[  262.599300][ T9134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.599321][ T9134] RIP: 0033:0x7fa3c198f749
[  262.599342][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.599361][ T9134] RSP: 002b:00007fa3c2795038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  262.599385][ T9134] RAX: ffffffffffffffda RBX: 00007fa3c1be5fa0 RCX: 00007fa3c198f749
[  262.599401][ T9134] RDX: 0000000000000004 RSI: 000000000000008d RDI: 0000200000004000
[  262.599415][ T9134] RBP: 00007fa3c1a13f91 R08: 0000000000000000 R09: 0000000000000000
[  262.599428][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.599441][ T9134] R13: 00007fa3c1be6038 R14: 00007fa3c1be5fa0 R15: 00007ffc148cbab8
[  262.599477][ T9134]  </TASK>
[  262.605963][ T9134] input: syz1 as /devices/virtual/input/input46
[  263.058941][ T9145] ------------[ cut here ]------------
[  263.065135][ T9145] WARNING: net/mptcp/subflow.c:1528 at subflow_data_ready+0x49b/0x7c0, CPU#0: syz.2.942/9145
[  263.075903][ T9145] Modules linked in:
[  263.080592][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.2.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.091865][ T9145] Tainted: [L]=SOFTLOCKUP
[  263.096784][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  263.106957][ T9145] RIP: 0010:subflow_data_ready+0x49b/0x7c0
[  263.112901][ T9145] Code: 48 0f b9 3a e9 c9 fc ff ff e8 d1 81 6e f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6b 0e 00 00 e8 b6 81 6e f6 90 <0f> 0b 90 e9 f2 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1
[  263.133960][ T9145] RSP: 0018:ffffc90003437720 EFLAGS: 00010293
[  263.140155][ T9145] RAX: ffffffff8b5376aa RBX: ffff8880799d4f80 RCX: ffff888032bbdb80
[  263.148320][ T9145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  263.156336][ T9145] RBP: 0000000000000000 R08: ffff8880299f79cf R09: 1ffff1100533ef39
[  263.164777][ T9145] R10: dffffc0000000000 R11: ffffed100533ef3a R12: 0000000000000000
[  263.173060][ T9145] R13: dffffc0000000000 R14: ffff8880299f7080 R15: 0000000000000000
[  263.181278][ T9145] FS:  00007f5098e3e6c0(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000
[  263.190715][ T9145] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.197349][ T9145] CR2: 00007f5098e1cf98 CR3: 0000000076bd8000 CR4: 00000000003526f0
[  263.205869][ T9145] Call Trace:
[  263.209293][ T9145]  <TASK>
[  263.212263][ T9145]  tcp_data_queue+0x1e14/0x5e30
[  263.217274][ T9145]  ? __pfx_tcp_data_queue+0x10/0x10
[  263.222600][ T9145]  ? __pfx_tcp_urg+0x10/0x10
[  263.222711][  T123] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  263.227239][ T9145]  tcp_rcv_state_process+0x23a4/0x4520
[  263.240429][ T9145]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  263.246285][ T9145]  ? tcp_v6_connect+0x124b/0x18a0
[  263.251422][ T9145]  tcp_v6_do_rcv+0xbef/0x1ba0
[  263.256164][ T9145]  ? __pfx_tcp_v6_do_rcv+0x10/0x10
[  263.261392][ T9145]  __release_sock+0x1b8/0x3a0
[  263.266128][ T9145]  release_sock+0x5f/0x1f0
[  263.270674][ T9145]  mptcp_connect+0x649/0x830
[  263.275313][ T9145]  __inet_stream_connect+0x2ae/0xe70
[  263.280776][ T9145]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.286600][ T9145]  ? __pfx___inet_stream_connect+0x10/0x10
[  263.292983][ T9145]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.298463][ T9145]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  263.304241][ T9145]  inet_stream_connect+0x66/0xa0
[  263.309326][ T9145]  __sys_connect+0x316/0x440
[  263.313956][ T9145]  ? __pfx___sys_connect+0x10/0x10
[  263.319434][ T9145]  ? rcu_is_watching+0x15/0xb0
[  263.324259][ T9145]  __x64_sys_connect+0x7a/0x90
[  263.329147][ T9145]  do_syscall_64+0xfa/0xf80
[  263.333697][ T9145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.339886][ T9145]  ? clear_bhb_loop+0x60/0xb0
[  263.344608][ T9145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.350638][ T9145] RIP: 0033:0x7f5097f8f749
[  263.355093][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.374881][ T9145] RSP: 002b:00007f5098e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  263.383373][ T9145] RAX: ffffffffffffffda RBX: 00007f50981e5fa0 RCX: 00007f5097f8f749
[  263.391833][ T9145] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003
[  263.400396][ T9145] RBP: 00007f5098013f91 R08: 0000000000000000 R09: 0000000000000000
[  263.408606][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.416630][ T9145] R13: 00007f50981e6038 R14: 00007f50981e5fa0 R15: 00007ffd97a1d5a8
[  263.424727][ T9145]  </TASK>
[  263.427790][ T9145] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  263.435114][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.2.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.445956][ T9145] Tainted: [L]=SOFTLOCKUP
[  263.450310][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  263.460404][ T9145] Call Trace:
[  263.463748][ T9145]  <TASK>
[  263.466717][ T9145]  dump_stack_lvl+0x99/0x250
[  263.471349][ T9145]  ? __asan_memcpy+0x40/0x70
[  263.475985][ T9145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.481227][ T9145]  ? __pfx__printk+0x10/0x10
[  263.485884][ T9145]  vpanic+0x237/0x6d0
[  263.489903][ T9145]  ? __pfx_vpanic+0x10/0x10
[  263.494444][ T9145]  ? is_bpf_text_address+0x292/0x2b0
[  263.499778][ T9145]  ? is_bpf_text_address+0x26/0x2b0
[  263.505032][ T9145]  panic+0xb9/0xc0
[  263.508804][ T9145]  ? __pfx_panic+0x10/0x10
[  263.513282][ T9145]  __warn+0x317/0x4b0
[  263.517306][ T9145]  ? subflow_data_ready+0x49b/0x7c0
[  263.522552][ T9145]  ? subflow_data_ready+0x49b/0x7c0
[  263.527793][ T9145]  __report_bug+0x288/0x500
[  263.532336][ T9145]  ? subflow_data_ready+0x49b/0x7c0
[  263.537572][ T9145]  ? __pfx___report_bug+0x10/0x10
[  263.542621][ T9145]  ? mptcp_subflow_data_available+0x300f/0x3a20
[  263.548924][ T9145]  ? subflow_data_ready+0x49b/0x7c0
[  263.554157][ T9145]  report_bug+0x16a/0x220
[  263.558508][ T9145]  ? subflow_data_ready+0x49b/0x7c0
[  263.563736][ T9145]  ? subflow_data_ready+0x49d/0x7c0
[  263.568970][ T9145]  handle_bug+0x98/0x200
[  263.573238][ T9145]  exc_invalid_op+0x1a/0x50
[  263.577767][ T9145]  asm_exc_invalid_op+0x1a/0x20
[  263.582638][ T9145] RIP: 0010:subflow_data_ready+0x49b/0x7c0
[  263.588495][ T9145] Code: 48 0f b9 3a e9 c9 fc ff ff e8 d1 81 6e f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6b 0e 00 00 e8 b6 81 6e f6 90 <0f> 0b 90 e9 f2 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1
[  263.608130][ T9145] RSP: 0018:ffffc90003437720 EFLAGS: 00010293
[  263.614234][ T9145] RAX: ffffffff8b5376aa RBX: ffff8880799d4f80 RCX: ffff888032bbdb80
[  263.622219][ T9145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  263.630205][ T9145] RBP: 0000000000000000 R08: ffff8880299f79cf R09: 1ffff1100533ef39
[  263.638299][ T9145] R10: dffffc0000000000 R11: ffffed100533ef3a R12: 0000000000000000
[  263.646294][ T9145] R13: dffffc0000000000 R14: ffff8880299f7080 R15: 0000000000000000
[  263.654299][ T9145]  ? subflow_data_ready+0x49a/0x7c0
[  263.659550][ T9145]  tcp_data_queue+0x1e14/0x5e30
[  263.664463][ T9145]  ? __pfx_tcp_data_queue+0x10/0x10
[  263.669713][ T9145]  ? __pfx_tcp_urg+0x10/0x10
[  263.674353][ T9145]  tcp_rcv_state_process+0x23a4/0x4520
[  263.679882][ T9145]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  263.685731][ T9145]  ? tcp_v6_connect+0x124b/0x18a0
[  263.690803][ T9145]  tcp_v6_do_rcv+0xbef/0x1ba0
[  263.695528][ T9145]  ? __pfx_tcp_v6_do_rcv+0x10/0x10
[  263.700687][ T9145]  __release_sock+0x1b8/0x3a0
[  263.705408][ T9145]  release_sock+0x5f/0x1f0
[  263.709864][ T9145]  mptcp_connect+0x649/0x830
[  263.714483][ T9145]  __inet_stream_connect+0x2ae/0xe70
[  263.719804][ T9145]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.725206][ T9145]  ? __pfx___inet_stream_connect+0x10/0x10
[  263.731042][ T9145]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.736442][ T9145]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  263.742202][ T9145]  inet_stream_connect+0x66/0xa0
[  263.747170][ T9145]  __sys_connect+0x316/0x440
[  263.751783][ T9145]  ? __pfx___sys_connect+0x10/0x10
[  263.756924][ T9145]  ? rcu_is_watching+0x15/0xb0
[  263.761717][ T9145]  __x64_sys_connect+0x7a/0x90
[  263.766531][ T9145]  do_syscall_64+0xfa/0xf80
[  263.771069][ T9145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.777162][ T9145]  ? clear_bhb_loop+0x60/0xb0
[  263.781864][ T9145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.787785][ T9145] RIP: 0033:0x7f5097f8f749
[  263.792234][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.811881][ T9145] RSP: 002b:00007f5098e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  263.820328][ T9145] RAX: ffffffffffffffda RBX: 00007f50981e5fa0 RCX: 00007f5097f8f749
[  263.828326][ T9145] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003
[  263.836321][ T9145] RBP: 00007f5098013f91 R08: 0000000000000000 R09: 0000000000000000
[  263.844314][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.852314][ T9145] R13: 00007f50981e6038 R14: 00007f50981e5fa0 R15: 00007ffd97a1d5a8
[  263.860325][ T9145]  </TASK>
[  263.863971][ T9145] Kernel Offset: disabled
[  263.868306][ T9145] Rebooting in 86400 seconds..