last executing test programs:

7m15.847152906s ago: executing program 2 (id=289):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

7m15.777980021s ago: executing program 2 (id=291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d617371000000001400028008000140000000100800022f000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0)

7m15.704506378s ago: executing program 2 (id=294):
setns(0xc9, 0x0)
mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3e, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e23, 0x8}}}, 0x26)

7m15.43550951s ago: executing program 2 (id=297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b91c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f01c80fc79d53bf0000c4b9e16dc3010122", 0x61}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x3, 0x3, 0x5}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m14.855324855s ago: executing program 2 (id=300):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000})
fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd})
fcntl$lock(r1, 0x26, 0x0)
fcntl$lock(r1, 0x7, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

7m14.663690807s ago: executing program 2 (id=302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d617371000000001400028008000140000000100800022f000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0)

6m59.54241077s ago: executing program 32 (id=302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d617371000000001400028008000140000000100800022f000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0)

4m40.458768446s ago: executing program 1 (id=2322):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
openat(r0, &(0x7f00000000c0)='./proc\x00', 0x129001, 0xc8)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe)

4m40.088828812s ago: executing program 1 (id=2325):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$inet6(0xa, 0x805, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)

4m39.9115542s ago: executing program 1 (id=2326):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

4m39.90455746s ago: executing program 1 (id=2327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)

4m39.787519063s ago: executing program 1 (id=2329):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

4m39.419347656s ago: executing program 1 (id=2332):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
openat(r0, &(0x7f00000000c0)='./proc\x00', 0x129001, 0xc8)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe)

4m24.370137983s ago: executing program 33 (id=2332):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
openat(r0, &(0x7f00000000c0)='./proc\x00', 0x129001, 0xc8)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe)

3m22.167391768s ago: executing program 3 (id=3054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004044)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)

3m21.958364575s ago: executing program 3 (id=3057):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00')
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x300100, 0x0)

3m21.826631964s ago: executing program 3 (id=3060):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0)

3m21.718917946s ago: executing program 3 (id=3061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

3m21.582808333s ago: executing program 3 (id=3065):
symlink(0x0, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

3m21.383569764s ago: executing program 3 (id=3068):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendto(r0, 0x0, 0x0, 0x40040, 0x0, 0x0)

3m6.275605495s ago: executing program 34 (id=3068):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendto(r0, 0x0, 0x0, 0x40040, 0x0, 0x0)

1m6.868827399s ago: executing program 5 (id=4496):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x8, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)=""/153, &(0x7f00000004c0)=0x99)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @remote}, {0x0, 0x2, @local}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xff49}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4044050}, 0x4004)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './proc', [{0x20, '#! \xb628\xe7\x8e\x88\x17\x85e\xa8B\xcf\xb4\x8d\xd0\xdbR;\xea\xafI\xfa\xd6\xdf\x03\xfc\x1cM\xb2=n\x9f\x93+3\x802j\xce\xf9\xc3\xdf\xb8O\xac\xd5\xce_m\xf1\xb0\xa1\xa5\xda\xf5\xfe\vD\x86\xe9\x9b\bBK\xf3\xf9\xd3\xb5T?\"m\xa6\xa3H\xa6m\x86\xf3jl\x14\x89\xdc%\x15!WC;\xa3\xa3\xcce\xfa6'}, {0x20, '\\.'}, {0x20, '#! '}]}, 0x75)

1m6.631930352s ago: executing program 5 (id=4497):
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c01", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

1m6.470338679s ago: executing program 5 (id=4499):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78)

1m6.185157354s ago: executing program 5 (id=4501):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x200802, &(0x7f00000003c0))

1m5.851868237s ago: executing program 5 (id=4502):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async)
socket(0x28, 0x801, 0x0) (async)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00') (async)
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r2, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0xf1, 0x80100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) (async)
name_to_handle_at(r0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100cba005f7000095d77c4300100000000000000c00000000000000fcffffff"], &(0x7f0000001500), 0x200)

1m5.526582464s ago: executing program 5 (id=4503):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = getpid()
process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

58.969247671s ago: executing program 0 (id=4556):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
lseek(r0, 0x10001, 0x100000)

58.894462823s ago: executing program 0 (id=4557):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x350, 0x11) (async)
ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffb)

58.869735422s ago: executing program 0 (id=4559):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='seusname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)

58.743283682s ago: executing program 0 (id=4561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000580)=""/151, 0x97}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4073, 0xfe9}, {&(0x7f0000000180)=""/249, 0xf9}], 0x3}, 0x4}], 0x7, 0x40000102, 0x0) (fail_nth: 24)

58.472989313s ago: executing program 0 (id=4563):
socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./ms\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./ms\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000002080)=ANY=[@ANYBLOB="080000000000000002004e21640101000000000000e9ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e20ac141440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1f62fd945f82e1ed343fa2293051b1e617d18c4fb609e355c2b367495719fe705b1be892840e7352bfe7a0c163b57e59b3919bd72b2df86d76710b477b9079933f3e1227308b14488417fdfd4c480de38a1d15395b30250c3b519d3e7c3721e67ba55af4d395af0682c4c88ad2ee03b214a1632772f45eec5ab8c8072d7cc305a00"/401], 0x110)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='2', 0x1)
syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace(0x420e, r0)
timerfd_create(0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229)
socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b01", @ANYRES32=r4], 0x28}, 0x4044804)

57.580010752s ago: executing program 0 (id=4568):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

50.158805249s ago: executing program 35 (id=4503):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = getpid()
process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

42.118462936s ago: executing program 36 (id=4568):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

10.119929986s ago: executing program 6 (id=4779):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e1d, 0x1005, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x101}, {0xb, 0x4d, 0x3, 0x4}, 0x85, 0x6e6bba, 0x1, 0x0, 0x2, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x4, 0x1}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d61000100"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x25, 0x71, "b0e97a36707c049c230e2f90adb120e96d44fbec11250c233cd69b37b95441b179cbaf1ebea566322c35aef2424633cc25405be8a2780838dc9f72c21ca05da660ae5f165f4d17926611b5c93a90365bf6e146b20fc0094b77d550bfd97192a4f0c2d383ae40fbac521a978c11861614ba"}, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

6.959243376s ago: executing program 6 (id=4788):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) (fail_nth: 10)

6.319397917s ago: executing program 8 (id=4791):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) (fail_nth: 1)

6.259423599s ago: executing program 6 (id=4792):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0)

6.098408788s ago: executing program 7 (id=4793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0)

5.97917393s ago: executing program 6 (id=4794):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000000)='7', 0x1)
write$binfmt_misc(r1, &(0x7f0000001280), 0x6)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040))

5.84940095s ago: executing program 7 (id=4795):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000240))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x2)
chmod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00') (async)
setresuid(0x0, 0xee00, 0xee00)
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x120) (rerun: 64)
faccessat2(r1, &(0x7f0000000080)='./file1\x00', 0x3, 0x1000)

4.627175222s ago: executing program 7 (id=4797):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7ffb, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

4.329830654s ago: executing program 7 (id=4799):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES32=r1])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x20050044, &(0x7f0000000100)={0x11, 0x6, r3, 0x1, 0x7, 0x6, @multicast}, 0x14)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/memory/auto_online_blocks\x00', 0x143401, 0x172)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
write(r5, &(0x7f00000001c0)="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", 0x140)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000580)={@host, 0x1})
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="2000001000"})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r8, 0x305, 0x70bd27, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x2c, r8, 0x101, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x37d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4048015)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)

4.155456867s ago: executing program 8 (id=4800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf5ffffff, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

4.150358203s ago: executing program 7 (id=4801):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r1}, &(0x7f00000002c0)=0xc)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x1})
fsetxattr$security_capability(r2, &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x1000000, [{0x3, 0xf464}]}, 0xc, 0x2)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400000}}}, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x28, 0x18, 0x107, 0x70bd25, 0x25dfdbff, {0x13, 0x7c, 0x3f}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xf4}]}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040895}, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c000100", @ANYRES64], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r9, 0x126, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x108)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x20008005, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f304b3238cc868ec7eb7380187b65866a6e7e8fada6ee3a484a55ddbb95bc77fdd51bca6056e943162bd7d79a402fff174f68578782618426aeb748a754d407a7d5e5a8fe5cd93062c4c669767a7acc25a6c004a1c4dfc5e2241e6d9feb0598c227654348db0a1551bbc65740629", 0x6e, 0x80, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000e00)={'syztnl1\x00', <r11=>0x0, 0x0, 0x20, 0x43, 0x8, {{0x29, 0x4, 0x1, 0x18, 0xa4, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x86, 0x12, "a35fc487d585c0f1aa1758ab00000000"}, @lsrr={0x83, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}, @timestamp_prespec={0x44, 0x54, 0x64, 0x3, 0x5, [{@loopback, 0xa29c}, {@empty, 0x9d}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x200004}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x7}, {@rand_addr=0x64010102, 0x3fe}, {@remote, 0x6}, {@rand_addr=0x64010100, 0x100}, {@empty}, {@multicast2, 0x1}]}, @timestamp={0x44, 0x4, 0x87, 0x0, 0x9}]}}}}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000b40)="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", 0x17a}, {&(0x7f0000000cc0)="3d83b3168bc13a1521d16f859cc070438fc7610f3d2103c8bff60dfbefb4a5a7e8abfdb4add710b8a8306bdfbc83465720615f9bb2c2316b65ce111c72101e777dd3b9bd807813250f9f3c8a5ef2ff0d9cf8215b63405f", 0x57}, {&(0x7f0000000380)="2d80e29194dd9bf8a61e517efbae1983f6", 0x11}, {&(0x7f00000003c0)="26599055d9e585ae9ca7273604e19d6714ae54fdedcf9d38677e48ee774ffa2ce59e040c1f6b9c83f02a35eb4316aace0d9da12b10ac9e85d58b8a251151cdfd3795f2b3494331c084cdd5f56016d163899e709d971d6ae5e4a5dfafbfc2527c11a9fc235dcf4c84365f8b85f3a2a8675206f2518d12116f9dfd53b74db957aa2ab0376cd8b304fa1aaa561217b3a74c0ea6af6ef14393b432bdf6d54e8cf483bf11592174b2aa51cd703d6efb8cf22a7b211a6f6a109de0fd9e64dfe9a580e3fb0340aca17e1e143222724a1247b469162cd96320859fcaf9b07e0e368d4f2628c7e4bafea92cd3d80276549ade9b9d642e08d8c6b7824823ea96", 0xfb}, {&(0x7f0000000580)="53bcd64884fd06266d62b01e7af19705d02b1ebd0427dd515b164e4b90add80cd0970fe216dd3bbe8bfbf777fd0b0d78b24528183bb7a5565cd66da0c369a87477dd9126a8ff51838b36165e6292f235af382feace6d3997eff077e12921af6906c8d6e0c33d40c3e23909416a643920b7f9f00fa14c55498a948435313f8621345f80bc94e99ba475872bb04972242869e1248dc1271c4396172f70c21961045c98e56547c8364c65c1eaa10f9fe2ccb7fd26766cf6237e4705fd21bdd97890592497dcf1c9de8e50b54cc74b1d53289db50d3a452d26a50159a21063fe4bd2dc43c134d520776475622dc848e651c4ce8c7d65", 0xf4}, {&(0x7f0000000680)="8a6a67e8fad3e6d9369f0be0f3f569e803d88611e3e0a384cca8f964bef481b1b3fd7e1a594ee6d0548917833f1e64c290138c82b31aa1ca4a1cef0f8db6d09abc369e2006173a956b6ab252c5115d130996bb044eb1f1e98b050cbb2c1e4f1da20186e530e15901e030d692c040a853bf458b989f172d024dd11b772addb10cddfc4ab75230e1b4334d9d97f41bc0b7f1cc7abeba21755630f041fd22e7a49639294b13b6d65bc4f126a17617400a6a4d041ae4056523303268e6365603dfe6a1314a66c951ce623549c9a62299c9c66f", 0xd1}, {&(0x7f0000000780)="89a7b17b21f8ab2b892d7fdcf0feeeb3a07e98d7aad3c86644a61ee02a9f1c04f9227bb2f31feaea70a2c7640b18a71f239e967246478e9ed786c04a7cdb38d82569cf72cc611a2cfa62607a85e4d62575c2c94904b0a4fca46b96ffd0c82fa08da3602d", 0x64}, {&(0x7f0000000800)="445ca33eea625a0c3d00c1512f1a7044b7f447b47ac78f0ea0965ab1183108cfe05b9dd7149651b9a59ad68ee53d47dc553f2a24758b05b2a56021795ed20c4f9496e71efaaed594d7284df039d3e4e1fe8e07196f98d8f3c1b55e3d5a667975b5d2acc11713c83a1b8224cae9cd0e8267a5213828227040a97548c990742a558c458579a1593e7bfb0d26158d37fb3ec6f99443a3c8da3b8cd12e8aef1a2e", 0x9f}], 0x8, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0x98}, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

4.094558173s ago: executing program 6 (id=4802):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x24e, 0x8e, 0x1e, 0x4, 0x40, 0x830, 0x80, 0xc4d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x89, 0x94, 0xa0, 0x40, "", [{{0x9, 0x4, 0x9, 0xe, 0x0, 0xc9, 0xec, 0xd1, 0x5}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f00000001c0)="723a732f70202e2f66696c65303a300c24e283f9dfc6619ba6bbc8ca138aa82a791c6d931be2bff116c95fe725f3cebc4ccc806a4f1010b5262e7f25e60cd3", 0x3f)
fallocate(r2, 0x100000000000011, 0x2000, 0x2f93)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)
pwrite64(r4, &(0x7f0000000100)='\n', 0x1, 0x8000c5b)
fallocate(r4, 0x20, 0x0, 0x4000)

4.027402585s ago: executing program 8 (id=4803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0)

3.949013254s ago: executing program 8 (id=4804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x6e0a0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001640)={0x92080000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

3.539748495s ago: executing program 8 (id=4807):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="df3272ae644e05eb7602f797e391ac94c3e21b40a085d049ae6f81baa95f877302c5f2e03c88e638fab78d6f5ed2f2f9a11ff83e0f9304434c43b3705182ed023360731873067a54c3332005029276e35db6cbda61ad740e1bb47b746dd40e4cdcd865dd8ea3200b023ddf5447828d2a2442b4f16c95294489b0e38cfd2baa796214e981182f55c0eabfac90dac96084a194c893e884410ede0773501afcd6809dbdcd90cb3c771967586a27d9d29b64f83a5723eff777197d51eddd9f4587212d55c0f82b1fc9a28aa06b1a2011035a5e30e722191d984891abf6b0556c67b28257f6895ddd80ebc641ec5f467393b49941a30f"], 0x0)

2.650412248s ago: executing program 7 (id=4810):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0)
syz_usb_connect(0x0, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x5, 0x32, &(0x7f0000001000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)

2.393692083s ago: executing program 4 (id=4811):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x5220, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
socket$kcm(0x10, 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x8009, 0xe7ffffff, 0x2, 0x0, 0x6, 0x0, 0x7}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20)

1.965292627s ago: executing program 4 (id=4812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0)

1.906624727s ago: executing program 4 (id=4813):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x8000)
mkdirat(r3, &(0x7f0000000180)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040), 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r5, 0x0, 0x0)

969.863468ms ago: executing program 4 (id=4814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]})
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080))
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev, 0x4e24, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x100}, {0x0, 0xf0f}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

855.464819ms ago: executing program 6 (id=4815):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read$FUSE(r3, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]})

777.515574ms ago: executing program 4 (id=4816):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e1d, 0x1005, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x101}, {0xb, 0x4d, 0x3, 0x4}, 0x85, 0x6e6bba, 0x1, 0x0, 0x2, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x4, 0x1}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d61000100"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x25, 0x72, "b0e97a36707c049c230e2f90adb120e96d44fbec11250c233cd69b37b95441b179cbaf1ebea566322c35aef2424633cc25405be8a2780838dc9f72c21ca05da660ae5f165f4d17926611b5c93a90365bf6e146b20fc0094b77d550bfd97192a4f0c2d383ae40fbac521a978c11861614baac"}, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(r0, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

361.554143ms ago: executing program 8 (id=4817):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$unix(r0, &(0x7f000000fe00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20, 0x40000}}], 0x1, 0x880)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f0000002f80))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x420000, 0x22)
openat(r4, &(0x7f0000000380)='./file0\x00', 0x200, 0x2)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x9000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x8}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0xa, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeef0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x5, 0x0, [{0x100, 0x2, 0x0, 0x0, @adapter={0x2, 0xa2, 0x6, 0x0, 0x6}}, {0x3ca2, 0x1, 0x1, 0x0, @msi={0x6, 0x5, 0x1a5, 0x401}}, {0x8, 0x4, 0x0, 0x0, @msi={0xfff, 0xffffffff, 0x477f949f, 0x3}}, {0x2, 0x7, 0x1, 0x0, @sint={0x3, 0x12}}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x2, 0x40}}]})
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x143c, &(0x7f0000000ac0)={[{0x29, 0x4e00, "09cb88fedef8cc716bf3f25384f93401d57c7a5059036b97f448fac3756556e515993934d0e4b42ac4"}, {0xf0, 0x4e00, "5d1463083d7a3177a9c8abd19b41b6c3994086584f8f29b2d42ec8a8ecd33406c05cadc3ccad1d3609009705526e3adbf62824e0480adb46daed04b2e98241b950ad80ebd0ccad2f0c2c6d49f84eb756b5a6a882f2d6ac7a15c9dcd3762123cd2b79c94a4b7aa7f5db1aa7ded1da40879728d82902a07a9af0cb1e9ac26557ab7a51bb231562100f105240c0f88147029b18acbd0aaed6bbe44681c009608c9a64e4b5c1dabf52c91213d8a2331425795063f620095029a269a50df4bc59b92e85544a1aaf0152ad240bbce5eac508f501820579ba0f612fb5484981c1c3512fc3e37470260c2e47a7c591a6a9c9bd32"}, {0x1000, 0x4e00, "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"}, {0xc7, 0x4e00, "9bfda2a1be586a2ef337c9e5270445660aca95aaef6c3ba8b729565622ec0cbf47dd84485452cf63b5a054c1598a22f8a146bded8d6c703a06ab0eecce965f9fac0f1439a367c7611fd936301eb4b34eff3c397f4e917407b6e75ac007136669ed293e071cbf22c2c428a489150ce757719f8fa9f2d71224935f9f5e1c542ae735ca35c7e9327475597b067019510464271c601754c738fc6a24c4137f77e6be7ff424e091dba39df1693a7978041ef06d5d24b663bb862424ba750e29658df92b4133c0e0ef53"}, {0xb2, 0x4e00, "9eec6b6434f84e0080f614ad688d75462a675ed2fe61230e6afdf1aac75106a6c242e6f0ee1ae378bb57bd3e53aa8027be76ba3e795a12efd72754d78d816e454baba5f1d3a05ab312a8af0375e1d0e2e77859f1cfa7349adfc78788edeecdc809698c7f2b7953ed2dc9a7199b1ac07936effd5ed3edd1fc0c819575799cb5d258bdf0acb34ded25a036e1b2533cb0856e3c889d18892f991c1ba2e71c0d67f28d0f13eaa1aabe22208e7db14bbdb8c410c1"}, {0x4c, 0x4e00, "12242cbdca66599423773c42a5e6bd5ac1940443fcbfb000efc1c1598cc6635f47b2b4740b1a62b4c7a06a684b9a1505d7cbe9637270c73005ce053305082158657e69c8de22b1db076f0ce5"}, {0x5f, 0x4e00, "d9e0181bb3faa0368fc6f8e3261483499f33ea1dc935120f98bdffc821a6053cf57f1c41be3df13d3efbab64d046fbfc1e81629130dc6c4d60904f946b1db3758c7a1ac944fa27faf23cc3b872e57e90c55d554948b6663aa6c5d3721dd5a9"}, {0xd6, 0x4e00, "17ee49279632b78d9da4870d33b65523476c62fb17da9c0b487ace744e2870b717ed23a67b5fd5dd8d701d9dea1b755251097ae8ebc842f43a1c8230e84f53638ce27e94f92ec70b0f22c5c59149e432fff761f19ca668e2cf80ae735818d11a676e0ac5737bb7f3c5055e7de75091b553ba60411458356217c751e19b8fbde4181395b1f0ae8a69f429ce5751c30ba1296b41b813a2798d8653c7932ed78f1e2d40bcef0958881588ed2c026c85587b2d0aff507d306720c13a6e3ca21af463f1384f44e5952a645ff6fc33456a18bc6c66dac1b261"}]})
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'})
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=4818):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x3, 0x70000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x1d3, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c1, 0x2, 0x1, 0x4, 0x0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "33cbffe62eed"}, {0x5, 0x24, 0x0, 0x90}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x5, 0x7f}, {0x6, 0x24, 0x1a, 0xd0, 0x2c}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mdlm_detail={0xfd, 0x24, 0x13, 0xb, "aa4825eedae86cbbb966d3c1309c23fdbd21f526c7efdbe874dadc2b38a400296c5e7bdf5973cdd1cd064ffe4b88d350520398d8d14a1e8dfb65686fd83532095d9dd8f7a71e2e21cf5b63f440127dec50d949cafcd8048572bf35b6892b9b37190bfb2e2e418f348ec67d99bd2ea815025f9e8e31045d1cde504f239d1912924865aa82fdaa9f889fa53ac6be0cf57c88e9f04e5cc4f7040e0dacba65c2247427a49c6dbf9ddd45221b78035fa08c1c8040d0d1ad29277411cbf66fde8554298051a8bbb79b11985783d109fa5bed163c9658af2f5a45e31779b7d79c1729993caf087abd0ea62d826b1e42d0c464a62d09df940b7b18ed46"}, @country_functional={0x0, 0x24, 0x7, 0xff, 0x59d, [0x1, 0x7b28, 0x6, 0x452]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @mdlm_detail={0xff0e, 0x24, 0x13, 0x3, "25a85d4b1f053fd42ee02f9d8a4ce36f656e7ff206c6b0440e2072a55be60b3fe683b101292e62477dcc5e16257d911d945da53f8c533cd98c91ab1108d2d8"}]}, {{0x9, 0x5, 0x81, 0x3, 0xc30, 0x0, 0x4, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x6, 0x47, 0x0, 0x0, 0x9}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x35, 0x2}]}, 0x3, [{0xa8, &(0x7f0000000480)=@string={0xa8, 0x3, "5472f018b14b64a419054c757c5aad4051f2b4389207fe1d12ad6975d09538c6cd36ee3ffc7a0126a4e9955ae468b40579f88841041e841152fec6119d0c2c6694072e812d879b7529dae5af3abd58d1293958d987e0e0321e2fc7500cd22ec26b25db065a9aec7df6ca74a15dea91612e7345dc51876260e1fe14a0abaa8532abc01e4a0d4f98d272d7b52feff6784865a7504200dd940a464e6e092b5483eccf16999f8434"}}, {0x57, &(0x7f0000000540)=@lang_id={0x0, 0x3, 0x40c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x458}}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x40, 0x2, 0xa0, {0xa0, 0xe, "a752bb569ba524acb4f324686b6b102e1f28b74f5d72ef8da3dff34fa20d81cc3e65ccd1f375efefe3ccf2bf7f8ac8765ddc5ce1d03eeb34f8f623e1b993b7e4f13d7a2e48f6a279f7fd0fa1d93cf4d42389c91b48a5d2e79c56d312e391b95f9ae934c210e40b9233f98307934bea10c67d131f3629f3d152e37dcac55e1f3b30c86ffd24989f5464f83a6c6d01870ffe07afa134794912d834edf944fb"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000780)={0x40, 0xa, 0xf8, "e3a9eb10e4ff906f49687f48f4ce2168c7f979e188f5fc10820706eb91181e061da9a74893c4689da31caf5131b3a3f8b32628d3ebbb6cc882f64b3267993e99ebaab4d1d8c1d7a1612c267f8b1c93ab79aa245dd2af31043198084809e227c8a1707c000b602ccf7126eff6368a61cfb6defffd9821551567ae6caa4d81d70a47c9b99dab78ad1d74681c295f2d2abfdb4c72524fbfd327e584139a7a4d6813f96ade1c890a42c7a3c45050b948efc4d96b44f3f236363290193b0bae698dc151e00cba863fd2ca1cf44cc097acf10b4997696e21187cd930d3352037e7eaac4cf2e6bbb159a255ac5f56f8268e319246f5e267411c3676"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0xf801, 0x100, 0x10, 0x8, 0x7, 0x24, 0x200, 0x7fffffff, 0x3, 0x39, 0x4, 0x4}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000980)={0x20, 0x83, 0x2}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000a00)={0x20, 0x89, 0x2}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

: 00007ffc43270958
[  474.335773][T17497]  </TASK>
[  474.550814][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  474.585594][   T10] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  474.585620][   T10] usb 7-1: no configurations
[  474.585627][   T10] usb 7-1: can't read configurations, error -22
[  474.623327][T17496] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  474.716082][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  474.737336][   T10] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  474.737365][   T10] usb 7-1: no configurations
[  474.737372][   T10] usb 7-1: can't read configurations, error -22
[  474.737653][   T10] usb usb7-port1: unable to enumerate USB device
[  475.228800][T17510] FAULT_INJECTION: forcing a failure.
[  475.228800][T17510] name failslab, interval 1, probability 0, space 0, times 0
[  475.228820][T17510] CPU: 0 UID: 0 PID: 17510 Comm: syz.0.4504 Not tainted syzkaller #0 PREEMPT(full) 
[  475.228832][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  475.228840][T17510] Call Trace:
[  475.228844][T17510]  <TASK>
[  475.228849][T17510]  dump_stack_lvl+0xe8/0x150
[  475.228871][T17510]  should_fail_ex+0x3eb/0x540
[  475.228892][T17510]  should_failslab+0xa8/0x100
[  475.228908][T17510]  __kmalloc_noprof+0xf9/0x710
[  475.228919][T17510]  ? __kmalloc_cache_noprof+0x148/0x600
[  475.228929][T17510]  ? slhc_init+0xab/0x750
[  475.228943][T17510]  ? slhc_init+0xab/0x750
[  475.228958][T17510]  slhc_init+0xab/0x750
[  475.228973][T17510]  slip_open+0x744/0xe60
[  475.228991][T17510]  ? __pfx_slip_open+0x10/0x10
[  475.229004][T17510]  ? up_write+0x19d/0x4a0
[  475.229022][T17510]  tty_ldisc_open+0xa1/0x100
[  475.229039][T17510]  tty_set_ldisc+0x365/0x540
[  475.229056][T17510]  tty_ioctl+0xc30/0xde0
[  475.229071][T17510]  ? __pfx_tty_ioctl+0x10/0x10
[  475.229086][T17510]  __se_sys_ioctl+0xfc/0x170
[  475.229100][T17510]  do_syscall_64+0x166/0x520
[  475.229124][T17510]  ? trace_irq_disable+0x3b/0x140
[  475.229137][T17510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.229149][T17510]  ? clear_bhb_loop+0x70/0xc0
[  475.229162][T17510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.229173][T17510] RIP: 0033:0x7efc9e59e159
[  475.229184][T17510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.229194][T17510] RSP: 002b:00007efc9f4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.229206][T17510] RAX: ffffffffffffffda RBX: 00007efc9e825fa0 RCX: 00007efc9e59e159
[  475.229214][T17510] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000004
[  475.229221][T17510] RBP: 00007efc9e63506b R08: 0000000000000000 R09: 0000000000000000
[  475.229228][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.229234][T17510] R13: 00007efc9e826038 R14: 00007efc9e825fa0 R15: 00007fffd94bf4b8
[  475.229251][T17510]  </TASK>
[  475.605142][T17514] lo: entered allmulticast mode
[  475.664849][T17514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4506'.
[  475.665640][T17513] lo: left allmulticast mode
[  475.755631][T17517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.755875][T17517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.306907][T17423] Set syz1 is full, maxelem 65536 reached
[  476.715224][T17538] FAULT_INJECTION: forcing a failure.
[  476.715224][T17538] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  476.715244][T17538] CPU: 0 UID: 0 PID: 17538 Comm: syz.6.4515 Not tainted syzkaller #0 PREEMPT(full) 
[  476.715257][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  476.715263][T17538] Call Trace:
[  476.715268][T17538]  <TASK>
[  476.715273][T17538]  dump_stack_lvl+0xe8/0x150
[  476.715293][T17538]  should_fail_ex+0x3eb/0x540
[  476.715312][T17538]  prepare_alloc_pages+0x21e/0x5f0
[  476.715327][T17538]  __alloc_frozen_pages_noprof+0x17a/0x400
[  476.715340][T17538]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  476.715352][T17538]  ? is_bpf_text_address+0x26/0x2b0
[  476.715369][T17538]  ? kernel_text_address+0xa5/0xe0
[  476.715382][T17538]  ? policy_nodemask+0x2cc/0x8e0
[  476.715398][T17538]  alloc_pages_mpol+0x21e/0x390
[  476.715412][T17538]  ? wiphy_new_nm+0x625/0x1b20
[  476.715509][T17538]  ___kmalloc_large_node+0x7b/0x170
[  476.715521][T17538]  __kmalloc_large_node_noprof+0x18/0x90
[  476.715532][T17538]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[  476.715597][T17538]  __kmalloc_noprof+0x3f6/0x710
[  476.715608][T17538]  ? wiphy_new_nm+0x625/0x1b20
[  476.715622][T17538]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[  476.715635][T17538]  wiphy_new_nm+0x625/0x1b20
[  476.715646][T17538]  ? ieee80211_alloc_hw_nm+0x903/0x1f00
[  476.715661][T17538]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[  476.715674][T17538]  ieee80211_alloc_hw_nm+0x3f3/0x1f00
[  476.715688][T17538]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[  476.715703][T17538]  mac80211_hwsim_new_radio+0x1ea/0x5720
[  476.715780][T17538]  ? __pfx___nla_validate_parse+0x10/0x10
[  476.715829][T17538]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  476.715844][T17538]  ? trace_kmalloc+0x2a/0xf0
[  476.715857][T17538]  hwsim_new_radio_nl+0xd8b/0xf90
[  476.715880][T17538]  genl_family_rcv_msg_doit+0x233/0x340
[  476.715935][T17538]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  476.715955][T17538]  ? bpf_lsm_capable+0x9/0x20
[  476.715968][T17538]  ? security_capable+0x7e/0x2c0
[  476.715993][T17538]  genl_rcv_msg+0x614/0x7a0
[  476.716010][T17538]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.716022][T17538]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  476.716039][T17538]  ? __asan_memcpy+0x40/0x70
[  476.716052][T17538]  netlink_rcv_skb+0x226/0x4a0
[  476.716064][T17538]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.716078][T17538]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  476.716096][T17538]  ? down_read+0x2b9/0x320
[  476.716108][T17538]  genl_rcv+0x28/0x40
[  476.716121][T17538]  netlink_unicast+0x7bd/0x940
[  476.716163][T17538]  netlink_sendmsg+0x7c3/0xae0
[  476.716178][T17538]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.716193][T17538]  ? apparmor_socket_sendmsg+0x98/0x360
[  476.716235][T17538]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.716245][T17538]  sock_sendmsg_nosec+0x13a/0x180
[  476.716260][T17538]  ____sys_sendmsg+0x54e/0x850
[  476.716277][T17538]  ? __pfx_____sys_sendmsg+0x10/0x10
[  476.716296][T17538]  ? import_iovec+0x73/0xa0
[  476.716309][T17538]  ___sys_sendmsg+0x2a5/0x360
[  476.716323][T17538]  ? __lock_acquire+0x747/0x2de0
[  476.716338][T17538]  ? __pfx____sys_sendmsg+0x10/0x10
[  476.716370][T17538]  ? __fget_files+0x3a2/0x420
[  476.716380][T17538]  ? __fget_files+0x2a/0x420
[  476.716394][T17538]  __x64_sys_sendmsg+0x1b1/0x290
[  476.716410][T17538]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  476.716435][T17538]  do_syscall_64+0x166/0x520
[  476.716449][T17538]  ? trace_irq_disable+0x3b/0x140
[  476.716461][T17538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.716472][T17538]  ? clear_bhb_loop+0x70/0xc0
[  476.716485][T17538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.716496][T17538] RIP: 0033:0x7f99e999e159
[  476.716507][T17538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.716516][T17538] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.716528][T17538] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  476.716536][T17538] RDX: 0000000004080040 RSI: 0000200000000400 RDI: 0000000000000004
[  476.716543][T17538] RBP: 00007f99ea84a090 R08: 0000000000000000 R09: 0000000000000000
[  476.716550][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.716556][T17538] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  476.716572][T17538]  </TASK>
[  477.358163][T17546] FAULT_INJECTION: forcing a failure.
[  477.358163][T17546] name failslab, interval 1, probability 0, space 0, times 0
[  477.358183][T17546] CPU: 0 UID: 0 PID: 17546 Comm: syz.0.4519 Not tainted syzkaller #0 PREEMPT(full) 
[  477.358196][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  477.358203][T17546] Call Trace:
[  477.358208][T17546]  <TASK>
[  477.358213][T17546]  dump_stack_lvl+0xe8/0x150
[  477.358233][T17546]  should_fail_ex+0x3eb/0x540
[  477.358253][T17546]  should_failslab+0xa8/0x100
[  477.358267][T17546]  __kmalloc_noprof+0xf9/0x710
[  477.358278][T17546]  ? ima_alloc_init_template+0xa4/0x700
[  477.358368][T17546]  ? ima_alloc_init_template+0xa4/0x700
[  477.358379][T17546]  ? __asan_memcpy+0x40/0x70
[  477.358391][T17546]  ima_alloc_init_template+0xa4/0x700
[  477.358406][T17546]  ima_store_measurement+0x1d4/0x690
[  477.358422][T17546]  ? __pfx_ima_store_measurement+0x10/0x10
[  477.358432][T17546]  ? ima_d_path+0x16b/0x230
[  477.358447][T17546]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  477.358466][T17546]  process_measurement+0x15ac/0x1c10
[  477.358484][T17546]  ? __pfx_process_measurement+0x10/0x10
[  477.358497][T17546]  ? tomoyo_check_open_permission+0x38e/0x470
[  477.358552][T17546]  ? apparmor_file_open+0x523/0x6c0
[  477.358573][T17546]  ima_file_check+0xdc/0x130
[  477.358583][T17546]  ? file_ra_state_init+0x3d/0xc0
[  477.358603][T17546]  ? __pfx_ima_file_check+0x10/0x10
[  477.358619][T17546]  security_file_post_open+0xb3/0x260
[  477.358633][T17546]  path_openat+0x14e9/0x1da0
[  477.358655][T17546]  do_file_open+0x23e/0x4a0
[  477.358669][T17546]  ? __pfx_do_file_open+0x10/0x10
[  477.358685][T17546]  ? __pfx_kfree_link+0x10/0x10
[  477.358747][T17546]  ? _raw_spin_unlock+0x28/0x50
[  477.358761][T17546]  ? alloc_fd+0x6af/0x760
[  477.358781][T17546]  do_sys_openat2+0x115/0x200
[  477.358796][T17546]  ? __se_sys_futex+0x3a8/0x450
[  477.358811][T17546]  ? __pfx_do_sys_openat2+0x10/0x10
[  477.358827][T17546]  ? rcu_is_watching+0x16/0xb0
[  477.358844][T17546]  __x64_sys_openat+0x138/0x170
[  477.358860][T17546]  do_syscall_64+0x166/0x520
[  477.358875][T17546]  ? trace_irq_disable+0x3b/0x140
[  477.358890][T17546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.358900][T17546]  ? clear_bhb_loop+0x70/0xc0
[  477.358912][T17546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.358923][T17546] RIP: 0033:0x7efc9e55e98e
[  477.358934][T17546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  477.358943][T17546] RSP: 002b:00007efc9f4a5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  477.359090][T17546] RAX: ffffffffffffffda RBX: 00007efc9f4a66c0 RCX: 00007efc9e55e98e
[  477.359098][T17546] RDX: 0000000000000002 RSI: 00007efc9e634972 RDI: ffffffffffffff9c
[  477.359105][T17546] RBP: 00007efc9e63506b R08: 0000000000000000 R09: 0000000000000000
[  477.359112][T17546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  477.359118][T17546] R13: 00007efc9e826038 R14: 00007efc9e825fa0 R15: 00007fffd94bf4b8
[  477.359134][T17546]  </TASK>
[  477.545735][    T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  477.699086][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  477.699112][    T9] usb 7-1: no configurations
[  477.699119][    T9] usb 7-1: can't read configurations, error -22
[  477.724859][T17546] FAULT_INJECTION: forcing a failure.
[  477.724859][T17546] name failslab, interval 1, probability 0, space 0, times 0
[  477.724880][T17546] CPU: 0 UID: 0 PID: 17546 Comm: syz.0.4519 Not tainted syzkaller #0 PREEMPT(full) 
[  477.724899][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  477.724906][T17546] Call Trace:
[  477.724911][T17546]  <TASK>
[  477.724916][T17546]  dump_stack_lvl+0xe8/0x150
[  477.724935][T17546]  should_fail_ex+0x3eb/0x540
[  477.724954][T17546]  should_failslab+0xa8/0x100
[  477.724968][T17546]  __kvmalloc_node_noprof+0x171/0x820
[  477.724979][T17546]  ? __kmalloc_cache_noprof+0x31c/0x600
[  477.724990][T17546]  ? __kmalloc_cache_noprof+0x148/0x600
[  477.724999][T17546]  ? percpu_ref_init+0xc5/0x350
[  477.725015][T17546]  ? io_alloc_cache_init+0x42/0x140
[  477.725113][T17546]  ? io_alloc_cache_init+0x42/0x140
[  477.725127][T17546]  io_alloc_cache_init+0x42/0x140
[  477.725140][T17546]  io_ring_ctx_alloc+0x508/0xb80
[  477.725160][T17546]  io_uring_create+0x50/0x980
[  477.725173][T17546]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  477.725232][T17546]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  477.725250][T17546]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  477.725269][T17546]  ? rcu_is_watching+0x16/0xb0
[  477.725288][T17546]  do_syscall_64+0x166/0x520
[  477.725303][T17546]  ? trace_irq_disable+0x3b/0x140
[  477.725315][T17546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.725326][T17546]  ? clear_bhb_loop+0x70/0xc0
[  477.725339][T17546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.725349][T17546] RIP: 0033:0x7efc9e59e159
[  477.725361][T17546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.725370][T17546] RSP: 002b:00007efc9f4a5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  477.725382][T17546] RAX: ffffffffffffffda RBX: 0000200000000580 RCX: 00007efc9e59e159
[  477.725390][T17546] RDX: 0000200000001880 RSI: 0000200000000580 RDI: 0000000000000083
[  477.725397][T17546] RBP: 00007efc9f4a6090 R08: 0000000000000000 R09: 0000000000000101
[  477.725404][T17546] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000001880
[  477.725411][T17546] R13: 0000200000000000 R14: 0000200000000240 R15: 00007fffd94bf4b8
[  477.725426][T17546]  </TASK>
[  477.862550][    T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  478.064132][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  478.064160][    T9] usb 7-1: no configurations
[  478.064167][    T9] usb 7-1: can't read configurations, error -22
[  478.064306][    T9] usb usb7-port1: attempt power cycle
[  478.111271][T16033] Bluetooth: hci1: command 0x0406 tx timeout
[  478.402856][    T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  478.422507][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  478.422570][    T9] usb 7-1: no configurations
[  478.422578][    T9] usb 7-1: can't read configurations, error -22
[  478.545376][T17567] netlink: 'syz.0.4529': attribute type 10 has an invalid length.
[  478.551054][    T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  478.572465][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  478.572491][    T9] usb 7-1: no configurations
[  478.572499][    T9] usb 7-1: can't read configurations, error -22
[  478.572656][    T9] usb usb7-port1: unable to enumerate USB device
[  479.763720][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  479.763733][   T33] audit: type=1800 audit(2000524668.692:2251): pid=17587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4536" name=06 dev="tmpfs" ino=2367 res=0 errno=0
[  480.048839][T17593] overlayfs: failed to clone upperpath
[  480.118475][T17595] overlayfs: failed to clone upperpath
[  480.344934][   T33] audit: type=1800 audit(2000524669.272:2252): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  480.421069][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  480.452523][   T33] audit: type=1800 audit(2000524669.382:2253): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  480.563140][   T33] audit: type=1800 audit(2000524669.492:2254): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  480.631488][   T33] audit: type=1800 audit(2000524669.562:2255): pid=17605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4545" name="attach" dev="sysfs" ino=33001 res=0 errno=0
[  480.674187][T17605] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  480.674205][T17605] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  480.702827][T17605] vhci_hcd vhci_hcd.0: Device attached
[  480.705372][T17607] vhci_hcd: connection closed
[  480.734575][   T12] vhci_hcd vhci_hcd.6: stop threads
[  480.735209][   T12] vhci_hcd vhci_hcd.6: release socket
[  480.735308][   T12] vhci_hcd vhci_hcd.6: disconnect device
[  480.812444][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4547'.
[  481.053314][T17622] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.059308][   T33] audit: type=1800 audit(2000524669.982:2256): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256884 res=0 errno=0
[  481.189147][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'.
[  481.258075][   T33] audit: type=1800 audit(2000524670.182:2257): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  481.355771][   T33] audit: type=1800 audit(2000524670.282:2258): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  481.407093][   T33] audit: type=1800 audit(2000524670.332:2259): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4555" name="bcdUSB" dev="configfs" ino=53588 res=0 errno=0
[  481.409522][   T33] audit: type=1800 audit(2000524670.332:2260): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4555" name="subclass" dev="configfs" ino=53589 res=0 errno=0
[  481.610389][T17645] rnbd_client L203: map_device: Unknown parameter or missing value 'seusname=s+'
[  481.684661][T17649] FAULT_INJECTION: forcing a failure.
[  481.684661][T17649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.684702][T17649] CPU: 0 UID: 0 PID: 17649 Comm: syz.0.4561 Not tainted syzkaller #0 PREEMPT(full) 
[  481.684722][T17649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  481.684729][T17649] Call Trace:
[  481.684734][T17649]  <TASK>
[  481.684739][T17649]  dump_stack_lvl+0xe8/0x150
[  481.684759][T17649]  should_fail_ex+0x3eb/0x540
[  481.684778][T17649]  _copy_from_user+0x2d/0xb0
[  481.684791][T17649]  ___sys_recvmsg+0x173/0x5a0
[  481.684810][T17649]  ? __pfx____sys_recvmsg+0x10/0x10
[  481.684827][T17649]  ? lock_acquire+0x115/0x350
[  481.684853][T17649]  do_recvmmsg+0x31a/0x7f0
[  481.684872][T17649]  ? __pfx_do_recvmmsg+0x10/0x10
[  481.684892][T17649]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  481.684911][T17649]  ? fdget+0x1ac/0x250
[  481.684924][T17649]  __x64_sys_recvmmsg+0x198/0x250
[  481.684941][T17649]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  481.684962][T17649]  do_syscall_64+0x166/0x520
[  481.684976][T17649]  ? trace_irq_disable+0x3b/0x140
[  481.684988][T17649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.684999][T17649]  ? clear_bhb_loop+0x70/0xc0
[  481.685011][T17649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.685022][T17649] RIP: 0033:0x7efc9e59e159
[  481.685033][T17649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.685042][T17649] RSP: 002b:00007efc9f4a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  481.685054][T17649] RAX: ffffffffffffffda RBX: 00007efc9e825fa0 RCX: 00007efc9e59e159
[  481.685061][T17649] RDX: 0000000000000007 RSI: 0000200000000d80 RDI: 0000000000000003
[  481.685068][T17649] RBP: 00007efc9f4a6090 R08: 0000000000000000 R09: 0000000000000000
[  481.685074][T17649] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000002
[  481.685080][T17649] R13: 00007efc9e826038 R14: 00007efc9e825fa0 R15: 00007fffd94bf4b8
[  481.685096][T17649]  </TASK>
[  482.097351][T17654] FAULT_INJECTION: forcing a failure.
[  482.097351][T17654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.097371][T17654] CPU: 0 UID: 0 PID: 17654 Comm: syz.0.4563 Not tainted syzkaller #0 PREEMPT(full) 
[  482.097384][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  482.097390][T17654] Call Trace:
[  482.097395][T17654]  <TASK>
[  482.097401][T17654]  dump_stack_lvl+0xe8/0x150
[  482.097420][T17654]  should_fail_ex+0x3eb/0x540
[  482.097440][T17654]  _copy_from_user+0x2d/0xb0
[  482.097453][T17654]  copy_clone_args_from_user+0x1f9/0x740
[  482.097472][T17654]  ? futex_private_hash_put+0x132/0x160
[  482.097486][T17654]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  482.097501][T17654]  ? futex_wake+0x51b/0x5f0
[  482.097520][T17654]  __se_sys_clone3+0x142/0x360
[  482.097535][T17654]  ? __pfx___se_sys_clone3+0x10/0x10
[  482.097547][T17654]  ? do_futex+0x458/0x4e0
[  482.097582][T17654]  do_syscall_64+0x166/0x520
[  482.097598][T17654]  ? trace_irq_disable+0x3b/0x140
[  482.097609][T17654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.097620][T17654]  ? clear_bhb_loop+0x70/0xc0
[  482.097632][T17654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.097642][T17654] RIP: 0033:0x7efc9e59e159
[  482.097663][T17654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.097672][T17654] RSP: 002b:00007efc9f4a5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  482.097684][T17654] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007efc9e59e159
[  482.097693][T17654] RDX: 00007efc9f4a5f10 RSI: 0000000000000058 RDI: 00007efc9f4a5f10
[  482.097700][T17654] RBP: 00007efc9e63506b R08: 0000000000000000 R09: 0000000000000058
[  482.097708][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.097714][T17654] R13: 00007efc9e826038 R14: 00007efc9e825fa0 R15: 00007fffd94bf4b8
[  482.097730][T17654]  </TASK>
[  484.706943][T17690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4573'.
[  484.706963][T17690] netlink: 'syz.4.4573': attribute type 1 has an invalid length.
[  486.111910][T17655] Set syz1 is full, maxelem 65536 reached
[  486.156414][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  486.156426][   T33] audit: type=1800 audit(2000524675.082:2266): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  486.461875][ T5682] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  486.610790][ T5682] usb 7-1: Using ep0 maxpacket: 16
[  486.612468][ T5682] usb 7-1: unable to get BOS descriptor or descriptor too short
[  486.612498][ T5682] usb 7-1: New USB device found: idVendor=0a2c, idProduct=0008, bcdDevice=c3.1b
[  486.613335][ T5682] usb 7-1: config 1 has an invalid interface number: 182 but max is 0
[  486.613349][ T5682] usb 7-1: config 1 has no interface number 0
[  486.613364][ T5682] usb 7-1: config 1 interface 182 has no altsetting 0
[  486.615016][ T5682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.615030][ T5682] usb 7-1: Product: syz
[  486.615037][ T5682] usb 7-1: Manufacturer: syz
[  486.615045][ T5682] usb 7-1: SerialNumber: syz
[  486.619119][   T33] audit: type=1800 audit(2000524675.542:2267): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256988 res=0 errno=0
[  486.715515][   T33] audit: type=1800 audit(2000524675.642:2268): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=257020 res=0 errno=0
[  486.716832][   T33] audit: type=1800 audit(2000524675.642:2269): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=256995 res=0 errno=0
[  486.718651][   T33] audit: type=1800 audit(2000524675.642:2270): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=256996 res=0 errno=0
[  486.829060][ T5682] cypress_cy7c63 7-1:1.182: Cypress CY7C63xxx device now attached
[  486.841860][   T33] audit: type=1800 audit(2000524675.772:2271): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=257017 res=0 errno=0
[  486.845407][   T33] audit: type=1800 audit(2000524675.772:2272): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=257018 res=0 errno=0
[  486.846212][ T5682] usb 7-1: USB disconnect, device number 21
[  486.846745][ T5682] cypress_cy7c63 7-1:1.182: Cypress CY7C63xxx device now disconnected
[  486.918234][   T33] audit: type=1800 audit(2000524675.842:2273): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=256997 res=0 errno=0
[  486.918852][   T33] audit: type=1800 audit(2000524675.842:2274): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=257019 res=0 errno=0
[  487.416469][   T33] audit: type=1800 audit(2000524676.342:2275): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  488.977781][T17742] FAULT_INJECTION: forcing a failure.
[  488.977781][T17742] name failslab, interval 1, probability 0, space 0, times 0
[  488.977802][T17742] CPU: 0 UID: 0 PID: 17742 Comm: syz.6.4591 Not tainted syzkaller #0 PREEMPT(full) 
[  488.977824][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  488.977837][T17742] Call Trace:
[  488.977842][T17742]  <TASK>
[  488.977847][T17742]  dump_stack_lvl+0xe8/0x150
[  488.977866][T17742]  should_fail_ex+0x3eb/0x540
[  488.977885][T17742]  should_failslab+0xa8/0x100
[  488.977900][T17742]  __kmalloc_noprof+0xf9/0x710
[  488.977911][T17742]  ? jffs2_do_fill_super+0x51c/0xc50
[  488.978059][T17742]  ? jffs2_do_fill_super+0x51c/0xc50
[  488.978077][T17742]  jffs2_do_fill_super+0x51c/0xc50
[  488.978093][T17742]  ? __pfx_jffs2_fill_super+0x10/0x10
[  488.978107][T17742]  mtd_get_sb+0x18a/0x410
[  488.978178][T17742]  ? __pfx_jffs2_fill_super+0x10/0x10
[  488.978193][T17742]  ? __pfx_jffs2_fill_super+0x10/0x10
[  488.978207][T17742]  get_tree_mtd+0x597/0x7d0
[  488.978221][T17742]  ? __pfx_jffs2_fill_super+0x10/0x10
[  488.978235][T17742]  ? __pfx_get_tree_mtd+0x10/0x10
[  488.978252][T17742]  vfs_get_tree+0x92/0x2a0
[  488.978266][T17742]  do_new_mount+0x319/0xdc0
[  488.978285][T17742]  ? __pfx_do_new_mount+0x10/0x10
[  488.978301][T17742]  ? ns_capable+0x84/0xe0
[  488.978314][T17742]  ? path_mount+0x647/0x1050
[  488.978330][T17742]  ? user_path_at+0xd4/0x160
[  488.978342][T17742]  __se_sys_mount+0x31d/0x420
[  488.978360][T17742]  ? __pfx___se_sys_mount+0x10/0x10
[  488.978378][T17742]  ? __x64_sys_mount+0x20/0xc0
[  488.978394][T17742]  do_syscall_64+0x166/0x520
[  488.978409][T17742]  ? trace_irq_disable+0x3b/0x140
[  488.978421][T17742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.978432][T17742]  ? clear_bhb_loop+0x70/0xc0
[  488.978445][T17742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.978455][T17742] RIP: 0033:0x7f99e999e159
[  488.978466][T17742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.978475][T17742] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  488.978489][T17742] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  488.978497][T17742] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  488.978504][T17742] RBP: 00007f99ea84a090 R08: 0000000000000000 R09: 0000000000000000
[  488.978510][T17742] R10: 0000000000800040 R11: 0000000000000246 R12: 0000000000000002
[  488.978517][T17742] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  488.978533][T17742]  </TASK>
[  489.927390][T17747] FAULT_INJECTION: forcing a failure.
[  489.927390][T17747] name failslab, interval 1, probability 0, space 0, times 0
[  489.927410][T17747] CPU: 0 UID: 0 PID: 17747 Comm: syz.6.4593 Not tainted syzkaller #0 PREEMPT(full) 
[  489.927423][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  489.927429][T17747] Call Trace:
[  489.927435][T17747]  <TASK>
[  489.927440][T17747]  dump_stack_lvl+0xe8/0x150
[  489.927459][T17747]  should_fail_ex+0x3eb/0x540
[  489.927479][T17747]  should_failslab+0xa8/0x100
[  489.927493][T17747]  __kmalloc_cache_noprof+0x9e/0x600
[  489.927505][T17747]  ? devlink_health_do_dump+0xde/0x970
[  489.927627][T17747]  ? devlink_health_do_dump+0xde/0x970
[  489.927644][T17747]  devlink_health_do_dump+0xde/0x970
[  489.927663][T17747]  devlink_health_report+0x314/0xb20
[  489.927681][T17747]  nsim_dev_health_break_write+0x194/0x240
[  489.927735][T17747]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  489.927757][T17747]  full_proxy_write+0x127/0x1f0
[  489.927809][T17747]  ? __pfx_full_proxy_write+0x10/0x10
[  489.927821][T17747]  vfs_write+0x296/0xba0
[  489.927837][T17747]  ? __pfx_vfs_write+0x10/0x10
[  489.927849][T17747]  ? __fget_files+0x2a/0x420
[  489.927866][T17747]  ? __fget_files+0x3a2/0x420
[  489.927875][T17747]  ? __fget_files+0x2a/0x420
[  489.927887][T17747]  ? fdget+0x1ac/0x250
[  489.927900][T17747]  ksys_write+0x150/0x270
[  489.927912][T17747]  ? __pfx_ksys_write+0x10/0x10
[  489.927929][T17747]  do_syscall_64+0x166/0x520
[  489.927945][T17747]  ? trace_irq_disable+0x3b/0x140
[  489.927957][T17747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.927968][T17747]  ? clear_bhb_loop+0x70/0xc0
[  489.927981][T17747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.927992][T17747] RIP: 0033:0x7f99e999e159
[  489.928003][T17747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.928013][T17747] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  489.928025][T17747] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  489.928033][T17747] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003
[  489.928040][T17747] RBP: 00007f99ea84a090 R08: 0000000000000000 R09: 0000000000000000
[  489.928046][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.928053][T17747] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  489.928069][T17747]  </TASK>
[  490.623183][T16033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  490.630568][T16033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  490.647249][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  490.657203][T16033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  490.670823][T16033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  490.672480][T16033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  490.781358][    T9] usb 7-1: device descriptor read/64, error -71
[  490.911259][T12132] syz_tun (unregistering): left allmulticast mode
[  491.020740][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  491.160795][    T9] usb 7-1: device descriptor read/64, error -71
[  491.271882][    T9] usb usb7-port1: attempt power cycle
[  491.348552][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.404900][T17767] syz.4.4599 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  491.610941][    T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  491.618124][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.645336][    T9] usb 7-1: device descriptor read/8, error -71
[  491.698890][T17756] wg2 speed is unknown, defaulting to 1000
[  491.831868][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.882509][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  491.904109][    T9] usb 7-1: device descriptor read/8, error -71
[  491.963400][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.011002][    T9] usb usb7-port1: unable to enumerate USB device
[  492.068516][T17756] virt_wifi0 speed is unknown, defaulting to 1000
[  492.196383][T17773] fuse: fd is not a fuse device
[  492.261127][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  492.261139][   T33] audit: type=1800 audit(2000524681.192:2294): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260880 res=0 errno=0
[  492.262548][   T33] audit: type=1800 audit(2000524681.192:2295): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=260885 res=0 errno=0
[  492.267556][   T33] audit: type=1800 audit(2000524681.192:2296): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=260889 res=0 errno=0
[  492.269225][   T33] audit: type=1800 audit(2000524681.192:2297): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=260888 res=0 errno=0
[  492.367633][   T33] audit: type=1800 audit(2000524681.292:2298): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=260891 res=0 errno=0
[  492.443667][   T33] audit: type=1800 audit(2000524681.372:2299): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261114 res=0 errno=0
[  492.484098][   T33] audit: type=1800 audit(2000524681.412:2300): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=261119 res=0 errno=0
[  492.484689][   T33] audit: type=1800 audit(2000524681.412:2301): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=261123 res=0 errno=0
[  492.485831][   T33] audit: type=1800 audit(2000524681.412:2302): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=261122 res=0 errno=0
[  492.493348][   T33] audit: type=1800 audit(2000524681.422:2303): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=261125 res=0 errno=0
[  492.746422][T16033] Bluetooth: hci3: command tx timeout
[  492.750588][   T12] bridge_slave_1: left allmulticast mode
[  492.750606][   T12] bridge_slave_1: left promiscuous mode
[  492.751311][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.784641][   T12] bridge_slave_0: left allmulticast mode
[  492.784659][   T12] bridge_slave_0: left promiscuous mode
[  492.784796][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.939565][T17781] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  493.153803][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'.
[  493.337490][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.356859][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.373995][   T12] bond0 (unregistering): Released all slaves
[  493.551810][   T12] tipc: Left network mode
[  493.744845][T17795] netlink: 'syz.6.4604': attribute type 4 has an invalid length.
[  493.762319][T17795] FAULT_INJECTION: forcing a failure.
[  493.762319][T17795] name failslab, interval 1, probability 0, space 0, times 0
[  493.762340][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.6.4604 Not tainted syzkaller #0 PREEMPT(full) 
[  493.762353][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  493.762361][T17795] Call Trace:
[  493.762365][T17795]  <TASK>
[  493.762371][T17795]  dump_stack_lvl+0xe8/0x150
[  493.762394][T17795]  should_fail_ex+0x3eb/0x540
[  493.762416][T17795]  should_failslab+0xa8/0x100
[  493.762432][T17795]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  493.762480][T17795]  kmem_cache_alloc_noprof+0x9c/0x600
[  493.762497][T17795]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  493.762510][T17795]  ? kmem_cache_alloc_noprof+0x151/0x600
[  493.762531][T17795]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  493.762549][T17795]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  493.762568][T17795]  mmu_topup_memory_caches+0x21/0x1a0
[  493.762593][T17795]  kvm_mmu_load+0x9d/0x21e0
[  493.762604][T17795]  ? kvm_msr_allowed+0x9a/0x490
[  493.762627][T17795]  ? kvm_msr_allowed+0x3f4/0x490
[  493.762641][T17795]  ? kvm_msr_allowed+0x9a/0x490
[  493.762655][T17795]  ? kvm_msr_allowed+0x9a/0x490
[  493.762673][T17795]  ? kvm_apic_has_interrupt+0x740/0x770
[  493.762692][T17795]  vcpu_run+0x4f60/0x7a70
[  493.762722][T17795]  ? update_se+0x90/0x1080
[  493.762739][T17795]  ? vt_vcpu_pi_load+0x141/0x850
[  493.762770][T17795]  ? __pfx_vcpu_run+0x10/0x10
[  493.762784][T17795]  ? lock_acquire+0x115/0x350
[  493.762804][T17795]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  493.762821][T17795]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  493.762836][T17795]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  493.762854][T17795]  kvm_vcpu_ioctl+0xa61/0xfd0
[  493.762872][T17795]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  493.762886][T17795]  ? do_futex+0x3e7/0x4e0
[  493.762912][T17795]  ? __fget_files+0x2a/0x420
[  493.762924][T17795]  ? __fget_files+0x2a/0x420
[  493.762934][T17795]  ? __fget_files+0x2a/0x420
[  493.762945][T17795]  ? bpf_lsm_file_ioctl+0x9/0x20
[  493.762959][T17795]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  493.762974][T17795]  __se_sys_ioctl+0xfc/0x170
[  493.762988][T17795]  do_syscall_64+0x166/0x520
[  493.763003][T17795]  ? trace_irq_disable+0x3b/0x140
[  493.763015][T17795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.763026][T17795]  ? clear_bhb_loop+0x70/0xc0
[  493.763040][T17795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.763051][T17795] RIP: 0033:0x7f99e999e159
[  493.763063][T17795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.763071][T17795] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  493.763084][T17795] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  493.763092][T17795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  493.763098][T17795] RBP: 00007f99e9a3506b R08: 0000000000000000 R09: 0000000000000000
[  493.763105][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.763112][T17795] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  493.763129][T17795]  </TASK>
[  494.316722][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  494.723664][ T5682] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  494.827128][T16033] Bluetooth: hci3: command tx timeout
[  494.870962][ T5682] usb 7-1: Using ep0 maxpacket: 32
[  494.871917][T17756] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.872206][T17756] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.872312][T17756] bridge_slave_0: entered allmulticast mode
[  494.872893][ T5682] usb 7-1: New USB device found: idVendor=046d, idProduct=c101, bcdDevice=0.00
[  494.875353][T17756] bridge_slave_0: entered promiscuous mode
[  494.903495][ T5682] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  494.903517][ T5682] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  494.903531][ T5682] usb 7-1: config 0 interface 0 has no altsetting 0
[  494.903551][ T5682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.950339][ T5682] usb 7-1: config 0 descriptor??
[  495.004332][   T12] hsr_slave_0: left promiscuous mode
[  495.008610][   T12] hsr_slave_1: left promiscuous mode
[  495.009246][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.009273][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.009805][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.009816][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.105554][   T12] veth1_macvtap: left promiscuous mode
[  495.105589][   T12] veth0_macvtap: left promiscuous mode
[  495.105663][   T12] veth1_vlan: left promiscuous mode
[  495.105702][   T12] veth0_vlan: left promiscuous mode
[  495.385907][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.386195][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.599715][ T5682] input: HID 046d:c101 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C101.0007/input/input19
[  496.025235][   T12] team0 (unregistering): Port device team_slave_1 removed
[  496.053499][   T12] team0 (unregistering): Port device team_slave_0 removed
[  496.365320][ T5682] logitech 0003:046D:C101.0007: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 046d:c101] on usb-dummy_hcd.6-1/input0
[  496.440109][ T5682] usb 7-1: USB disconnect, device number 26
[  496.495230][T17830] fido_id[17830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  496.670045][T17756] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.670105][T17756] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.670218][T17756] bridge_slave_1: entered allmulticast mode
[  496.699335][T17756] bridge_slave_1: entered promiscuous mode
[  496.754099][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14
[  496.901132][T16033] Bluetooth: hci3: command tx timeout
[  496.965258][T17756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.005190][T17756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.119132][T17756] team0: Port device team_slave_0 added
[  497.152857][T17756] team0: Port device team_slave_1 added
[  497.220402][T17756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.220415][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.220430][T17756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.314909][T17756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.314922][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.314938][T17756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.324924][   T12] IPVS: stop unused estimator thread 0...
[  497.380935][ T5682] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  497.511333][ T5682] usb 7-1: device descriptor read/64, error -71
[  497.523534][T17756] hsr_slave_0: entered promiscuous mode
[  497.524124][T17756] hsr_slave_1: entered promiscuous mode
[  497.527774][T17756] debugfs: 'hsr0' already exists in 'hsr'
[  497.527788][T17756] Cannot create hsr debugfs directory
[  497.750769][ T5682] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  497.846019][T17855] fuse: fd is not a fuse device
[  497.880827][ T5682] usb 7-1: device descriptor read/64, error -71
[  497.905723][T17856] overlayfs: failed to clone upperpath
[  497.991358][ T5682] usb usb7-port1: attempt power cycle
[  497.995953][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  497.995966][   T33] audit: type=1800 audit(2000524686.922:2340): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24627 res=0 errno=0
[  497.996384][   T33] audit: type=1800 audit(2000524686.922:2341): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24626 res=0 errno=0
[  498.000101][   T33] audit: type=1800 audit(2000524686.922:2342): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266406 res=0 errno=0
[  498.382105][ T5682] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  498.404032][ T5682] usb 7-1: device descriptor read/8, error -71
[  498.641664][ T5682] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  498.663943][ T5682] usb 7-1: device descriptor read/8, error -71
[  498.694414][   T33] audit: type=1800 audit(2000524687.622:2343): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266519 res=0 errno=0
[  498.696756][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  498.721952][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  498.748961][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  498.750116][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  498.765019][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  498.777142][ T5682] usb usb7-port1: unable to enumerate USB device
[  498.838289][   T33] audit: type=1800 audit(2000524687.762:2344): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266530 res=0 errno=0
[  498.890180][   T33] audit: type=1800 audit(2000524687.812:2345): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266571 res=0 errno=0
[  498.914740][   T33] audit: type=1800 audit(2000524687.842:2346): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266582 res=0 errno=0
[  498.981514][   T54] Bluetooth: hci3: command tx timeout
[  499.010524][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15
[  499.284708][T17756] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  499.301331][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  499.303428][T17756] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  499.328588][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.329670][T17756] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  499.358655][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  499.359768][T17756] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  499.398014][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  499.520030][   T33] audit: type=1800 audit(2000524688.442:2347): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  499.772450][   T33] audit: type=1800 audit(2000524688.702:2348): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  499.875939][T17896] nbd: must specify at least one socket
[  499.942603][T17898] sg_write: data in/out 98269/40 bytes for SCSI command 0x0-- guessing data in;
[  499.942603][T17898]    program syz.6.4622 not setting count and/or reply_len properly
[  500.219597][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.254511][   T33] audit: type=1800 audit(2000524689.182:2349): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  500.497889][T17756] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.573468][T17756] 8021q: adding VLAN 0 to HW filter on device team0
[  500.607968][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.608036][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.641463][    T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  500.770767][    T9] usb 7-1: device descriptor read/64, error -71
[  500.798266][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.888830][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.888890][T11084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.906499][   T54] Bluetooth: hci0: command tx timeout
[  501.011080][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  501.027161][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.116721][T17871] wg2 speed is unknown, defaulting to 1000
[  501.136762][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16
[  501.146853][    T9] usb 7-1: device descriptor read/64, error -71
[  501.251256][    T9] usb usb7-port1: attempt power cycle
[  501.260314][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.592542][    T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  501.611671][    T9] usb 7-1: device descriptor read/8, error -71
[  501.614515][T17871] virt_wifi0 speed is unknown, defaulting to 1000
[  501.631970][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  501.632006][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  501.632751][ T1316] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  501.852374][    T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  501.871531][    T9] usb 7-1: device descriptor read/8, error -71
[  501.981169][    T9] usb usb7-port1: unable to enumerate USB device
[  501.982088][   T12] bridge_slave_1: left allmulticast mode
[  501.982104][   T12] bridge_slave_1: left promiscuous mode
[  501.982249][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.987014][   T12] bridge_slave_0: left allmulticast mode
[  501.987029][   T12] bridge_slave_0: left promiscuous mode
[  501.987154][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.333227][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.334792][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.335732][   T12] bond0 (unregistering): Released all slaves
[  502.418028][   T12] tipc: Left network mode
[  502.880555][T17756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.990257][   T54] Bluetooth: hci0: command tx timeout
[  503.258988][   T12] hsr_slave_0: left promiscuous mode
[  503.259388][   T12] hsr_slave_1: left promiscuous mode
[  503.259927][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.259939][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.290902][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.290920][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.315174][   T12] veth1_macvtap: left promiscuous mode
[  503.315242][   T12] veth1_vlan: left promiscuous mode
[  503.315283][   T12] veth0_vlan: left promiscuous mode
[  503.458298][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  503.458311][   T33] audit: type=1800 audit(2000524692.382:2370): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  503.626059][   T33] audit: type=1800 audit(2000524692.552:2371): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  503.732697][   T33] audit: type=1804 audit(2000524692.662:2372): pid=17971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4630" name="kvm" dev="tmpfs" ino=2293 res=1 errno=0
[  503.940863][   T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  503.973656][   T12] team0 (unregistering): Port device team_slave_1 removed
[  503.980387][   T12] team0 (unregistering): Port device team_slave_0 removed
[  504.112450][   T10] usb 7-1: Using ep0 maxpacket: 16
[  504.126386][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  504.126418][   T10] usb 7-1: New USB device found: idVendor=11ba, idProduct=1001, bcdDevice=f1.7f
[  504.146768][   T10] usb 7-1: config 0 has an invalid interface number: 172 but max is 0
[  504.146784][   T10] usb 7-1: config 0 has no interface number 0
[  504.146799][   T10] usb 7-1: config 0 interface 172 has no altsetting 0
[  504.176767][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.176783][   T10] usb 7-1: Product: syz
[  504.176792][   T10] usb 7-1: Manufacturer: syz
[  504.176799][   T10] usb 7-1: SerialNumber: syz
[  504.215513][T17871] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.215570][T17871] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.215659][T17871] bridge_slave_0: entered allmulticast mode
[  504.219519][T17871] bridge_slave_0: entered promiscuous mode
[  504.256748][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17
[  504.280262][T17871] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.280320][T17871] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.280429][T17871] bridge_slave_1: entered allmulticast mode
[  504.310278][T17871] bridge_slave_1: entered promiscuous mode
[  504.319689][   T10] usb 7-1: config 0 descriptor??
[  504.330236][   T33] audit: type=1800 audit(2000524693.252:2373): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272746 res=0 errno=0
[  504.369886][   T33] audit: type=1800 audit(2000524693.292:2374): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=272778 res=0 errno=0
[  504.405632][   T33] audit: type=1800 audit(2000524693.332:2375): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=272753 res=0 errno=0
[  504.408560][   T33] audit: type=1800 audit(2000524693.332:2376): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=272754 res=0 errno=0
[  504.546663][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.546951][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.585541][T17871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.627388][T17871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.712701][   T10] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  504.713271][   T10] usb 7-1: selecting invalid altsetting 0
[  504.788381][   T10] usb 7-1: USB disconnect, device number 35
[  504.809355][ T2353] pvrusb2: Invalid write control endpoint
[  504.809389][ T2353] pvrusb2: Device being rendered inoperable
[  504.811675][T17871] team0: Port device team_slave_0 added
[  504.844795][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  504.844816][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  504.852693][T17871] team0: Port device team_slave_1 added
[  504.952574][   T33] audit: type=1800 audit(2000524693.882:2377): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=272775 res=0 errno=0
[  504.955494][   T33] audit: type=1800 audit(2000524693.882:2378): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=272776 res=0 errno=0
[  504.970740][   T33] audit: type=1800 audit(2000524693.902:2379): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=272777 res=0 errno=0
[  505.046331][T17871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.046342][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.046356][T17871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.088356][   T54] Bluetooth: hci0: command tx timeout
[  505.108082][T17871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.108094][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.108110][T17871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.164795][   T12] IPVS: stop unused estimator thread 0...
[  505.405366][T17871] hsr_slave_0: entered promiscuous mode
[  505.405983][T17871] hsr_slave_1: entered promiscuous mode
[  505.450588][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4637'.
[  505.606329][T17756] veth0_vlan: entered promiscuous mode
[  505.669612][T17756] veth1_vlan: entered promiscuous mode
[  505.929886][T17756] veth0_macvtap: entered promiscuous mode
[  505.956424][T17756] veth1_macvtap: entered promiscuous mode
[  506.017892][T17756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.043520][T17756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.132241][T11096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.132505][T11096] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.132534][T11096] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.132551][T11096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.735368][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.735385][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.772404][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18
[  506.900038][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.900052][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.940169][T17871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  507.005359][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  507.008703][T17871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  507.038469][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  507.058946][T17871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  507.082588][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  507.100193][T17871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  507.141175][   T54] Bluetooth: hci0: command tx timeout
[  507.199898][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  507.547115][T17871] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.618594][T17871] 8021q: adding VLAN 0 to HW filter on device team0
[  507.666073][T11091] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.666135][T11091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.711534][T11091] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.711596][T11091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.767951][T18058] fuse: Unknown parameter '00000000000000000000004'
[  507.788102][T18058] overlay: Unknown parameter '000000'
[  508.157426][   T10] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[  508.353642][   T10] usb 7-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  508.355838][   T10] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  508.355856][   T10] usb 7-1: config 0 has no interface number 0
[  508.355879][   T10] usb 7-1: config 0 interface 41 has no altsetting 0
[  508.396190][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.396207][   T10] usb 7-1: Product: syz
[  508.396215][   T10] usb 7-1: Manufacturer: syz
[  508.396224][   T10] usb 7-1: SerialNumber: syz
[  508.401243][   T10] usb 7-1: config 0 descriptor??
[  508.515028][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  508.515056][   T33] audit: type=1800 audit(2000524697.442:2414): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  508.696560][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19
[  508.748157][   T33] audit: type=1800 audit(2000524697.672:2415): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  508.860280][T18092] 9pnet_virtio: no channels available for device ./proc
[  508.973887][   T33] audit: type=1800 audit(2000524697.902:2416): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  509.082495][   T33] audit: type=1800 audit(2000524698.012:2417): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31605 res=0 errno=0
[  509.088588][   T33] audit: type=1800 audit(2000524698.012:2418): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=0
[  509.258263][   T10] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  509.278202][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.311672][ T5689] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  509.462133][ T5689] usb 8-1: Using ep0 maxpacket: 8
[  509.465557][ T5689] usb 8-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  509.467928][ T5689] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13
[  509.488191][ T5689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.488207][ T5689] usb 8-1: Product: syz
[  509.488215][ T5689] usb 8-1: Manufacturer: syz
[  509.488223][ T5689] usb 8-1: SerialNumber: syz
[  509.508024][ T5689] usb 8-1: config 0 descriptor??
[  509.534264][   T33] audit: type=1800 audit(2000524698.462:2419): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=276733 res=0 errno=0
[  509.539747][ T5689] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  509.575251][   T33] audit: type=1800 audit(2000524698.502:2420): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=276765 res=0 errno=0
[  509.576097][   T33] audit: type=1800 audit(2000524698.502:2421): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=276740 res=0 errno=0
[  509.624881][   T33] audit: type=1800 audit(2000524698.552:2422): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=276741 res=0 errno=0
[  510.068432][T17871] veth0_vlan: entered promiscuous mode
[  510.098023][T17871] veth1_vlan: entered promiscuous mode
[  510.187565][T17871] veth0_macvtap: entered promiscuous mode
[  510.210542][T17871] veth1_macvtap: entered promiscuous mode
[  510.259839][T17871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.287768][T17871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.348094][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.350295][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.350321][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.350357][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.482361][   T10] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  510.482381][   T10] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  510.482517][   T10] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  510.520224][   T33] audit: type=1800 audit(2000524699.442:2423): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=276803 res=0 errno=0
[  510.548879][   T10] usb 7-1: USB disconnect, device number 36
[  510.700521][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20
[  510.748325][T11096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.748341][T11096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.842095][ T5689] gspca_zc3xx: reg_w_i err -110
[  510.866974][T11091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.866989][T11091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.431892][ T5689] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  511.431957][ T5689] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  511.622137][T17978] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  511.665100][T18137] sctp: [Deprecated]: syz.8.4617 (pid 18137) Use of int in maxseg socket option.
[  511.665100][T18137] Use struct sctp_assoc_value instead
[  511.772556][T17978] usb 7-1: Using ep0 maxpacket: 16
[  511.773161][T17978] usb 7-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  511.773956][T17978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.773982][T17978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  511.773997][T17978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  511.774008][T17978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  511.774020][T17978] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.777506][T17978] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  511.777523][T17978] usb 7-1: Manufacturer: syz
[  511.893650][T17978] usb 7-1: config 0 descriptor??
[  512.076509][T18162] FAULT_INJECTION: forcing a failure.
[  512.076509][T18162] name failslab, interval 1, probability 0, space 0, times 0
[  512.079848][T18162] CPU: 0 UID: 0 PID: 18162 Comm: syz.8.4668 Not tainted syzkaller #0 PREEMPT(full) 
[  512.079865][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  512.079872][T18162] Call Trace:
[  512.079878][T18162]  <TASK>
[  512.079883][T18162]  dump_stack_lvl+0xe8/0x150
[  512.079904][T18162]  should_fail_ex+0x3eb/0x540
[  512.079925][T18162]  ? zswap_store+0xb4b/0x2200
[  512.079939][T18162]  should_failslab+0xa8/0x100
[  512.079952][T18162]  ? zswap_store+0xb4b/0x2200
[  512.079964][T18162]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  512.079980][T18162]  ? percpu_ref_put+0x1e/0x230
[  512.079993][T18162]  ? percpu_ref_put+0x1e/0x230
[  512.080006][T18162]  ? zswap_store+0xb4b/0x2200
[  512.080022][T18162]  zswap_store+0xb4b/0x2200
[  512.080037][T18162]  ? zswap_store+0x53d/0x2200
[  512.080058][T18162]  ? __pfx_zswap_store+0x10/0x10
[  512.080071][T18162]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  512.080091][T18162]  ? do_raw_spin_unlock+0xf5/0x200
[  512.080107][T18162]  swap_writeout+0x9bf/0x15d0
[  512.080124][T18162]  ? try_to_unmap_flush_dirty+0x96/0x100
[  512.080141][T18162]  shrink_folio_list+0x3039/0x4d90
[  512.080173][T18162]  ? __pfx_shrink_folio_list+0x10/0x10
[  512.080218][T18162]  ? __lock_acquire+0x747/0x2de0
[  512.080240][T18162]  ? __pfx___css_rstat_updated+0x10/0x10
[  512.080258][T18162]  reclaim_folio_list+0x100/0x430
[  512.080280][T18162]  ? __pfx_reclaim_folio_list+0x10/0x10
[  512.080300][T18162]  ? irqentry_exit+0x218/0x910
[  512.080317][T18162]  reclaim_pages+0x452/0x530
[  512.080336][T18162]  ? __pfx_reclaim_pages+0x10/0x10
[  512.080352][T18162]  ? madvise_cold_or_pageout_pte_range+0x1b69/0x2400
[  512.080367][T18162]  madvise_cold_or_pageout_pte_range+0x1b8e/0x2400
[  512.080389][T18162]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  512.080402][T18162]  ? lru_gen_update_size+0x718/0xcf0
[  512.080423][T18162]  walk_pgd_range+0x102d/0x1dc0
[  512.080454][T18162]  ? __pfx_walk_pgd_range+0x10/0x10
[  512.080466][T18162]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  512.080483][T18162]  __walk_page_range+0x16d/0x720
[  512.080505][T18162]  walk_page_range_vma_unsafe+0x309/0x410
[  512.080521][T18162]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  512.080536][T18162]  ? mlock_drain_local+0x79/0x490
[  512.080549][T18162]  ? walk_page_range_vma+0x6b/0x90
[  512.080563][T18162]  madvise_vma_behavior+0x2ff6/0x5240
[  512.080581][T18162]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  512.080598][T18162]  ? kasan_quarantine_put+0xbb/0x1f0
[  512.080609][T18162]  ? lockdep_hardirqs_on+0x7b/0x110
[  512.080625][T18162]  ? kfree+0x1c5/0x650
[  512.080637][T18162]  ? process_measurement+0x13ea/0x1c10
[  512.080651][T18162]  ? __lock_acquire+0x747/0x2de0
[  512.080666][T18162]  ? __lock_acquire+0x747/0x2de0
[  512.080684][T18162]  ? lock_acquire+0x115/0x350
[  512.080696][T18162]  ? __lock_acquire+0x747/0x2de0
[  512.080716][T18162]  ? mas_prev_slot+0xb76/0xbf0
[  512.080809][T18162]  ? find_vma_prev+0x123/0x1b0
[  512.080824][T18162]  ? __pfx_find_vma_prev+0x10/0x10
[  512.080847][T18162]  madvise_walk_vmas+0x57d/0xb70
[  512.080864][T18162]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  512.080878][T18162]  ? blk_start_plug+0x6e/0x1b0
[  512.080923][T18162]  madvise_do_behavior+0x385/0x540
[  512.080938][T18162]  ? __pfx_madvise_do_behavior+0x10/0x10
[  512.080954][T18162]  ? down_read+0x2b9/0x320
[  512.080963][T18162]  ? ksys_write+0x1e6/0x270
[  512.080978][T18162]  do_madvise+0x26f/0x330
[  512.080994][T18162]  ? __pfx_do_madvise+0x10/0x10
[  512.081011][T18162]  ? __pfx_ksys_write+0x10/0x10
[  512.081025][T18162]  __x64_sys_madvise+0xa6/0xc0
[  512.081037][T18162]  do_syscall_64+0x166/0x520
[  512.081051][T18162]  ? trace_irq_disable+0x3b/0x140
[  512.081063][T18162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.081073][T18162]  ? clear_bhb_loop+0x70/0xc0
[  512.081086][T18162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.081096][T18162] RIP: 0033:0x7fd5ab39e159
[  512.081108][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.081116][T18162] RSP: 002b:00007fd5a95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  512.081129][T18162] RAX: ffffffffffffffda RBX: 00007fd5ab625fa0 RCX: 00007fd5ab39e159
[  512.081136][T18162] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  512.081143][T18162] RBP: 00007fd5a95f6090 R08: 0000000000000000 R09: 0000000000000000
[  512.081150][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  512.081156][T18162] R13: 00007fd5ab626038 R14: 00007fd5ab625fa0 R15: 00007ffce6d68288
[  512.081172][T18162]  </TASK>
[  512.641250][T18148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.641531][T18148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.685718][    T9] usb 8-1: USB disconnect, device number 2
[  512.903392][T17978] rc_core: IR keymap rc-hauppauge not found
[  512.903406][T17978] Registered IR keymap rc-empty
[  512.903626][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  512.931931][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  512.952518][T17978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  512.956170][T17978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20
[  513.001264][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.021441][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.043204][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.062735][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.080899][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.100915][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.120778][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.142207][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.160853][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.181793][T17978] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  513.203005][T17978] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  513.203021][T17978] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  513.260102][T17978] usb 7-1: USB disconnect, device number 37
[  513.546627][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  513.546639][   T33] audit: type=1800 audit(2000524702.472:2463): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277400 res=0 errno=0
[  513.642464][T18186] jffs2: notice: (18186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  513.842189][   T33] audit: type=1800 audit(2000524702.772:2464): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  513.929182][   T33] audit: type=1800 audit(2000524702.852:2465): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  514.041044][T18195] 9pnet_virtio: no channels available for device ./proc
[  514.143822][   T33] audit: type=1800 audit(2000524703.072:2466): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  514.375903][   T33] audit: type=1800 audit(2000524703.302:2467): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  514.443670][T18208] FAULT_INJECTION: forcing a failure.
[  514.443670][T18208] name failslab, interval 1, probability 0, space 0, times 0
[  514.443689][T18208] CPU: 0 UID: 0 PID: 18208 Comm: syz.6.4683 Not tainted syzkaller #0 PREEMPT(full) 
[  514.443701][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  514.443708][T18208] Call Trace:
[  514.443713][T18208]  <TASK>
[  514.443718][T18208]  dump_stack_lvl+0xe8/0x150
[  514.443738][T18208]  should_fail_ex+0x3eb/0x540
[  514.443757][T18208]  should_failslab+0xa8/0x100
[  514.443774][T18208]  __kmalloc_noprof+0xf9/0x710
[  514.443785][T18208]  ? lock_acquire+0x115/0x350
[  514.443795][T18208]  ? tomoyo_encode+0x2ad/0x570
[  514.443810][T18208]  ? tomoyo_encode+0x2ad/0x570
[  514.443827][T18208]  tomoyo_encode+0x2ad/0x570
[  514.443844][T18208]  tomoyo_mount_permission+0x3a4/0x9e0
[  514.443858][T18208]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  514.443875][T18208]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  514.443888][T18208]  ? kasan_save_track+0x4f/0x80
[  514.443922][T18208]  ? kasan_quarantine_put+0xbb/0x1f0
[  514.443934][T18208]  security_sb_mount+0xe4/0x320
[  514.443953][T18208]  path_mount+0xbc/0x1050
[  514.443977][T18208]  ? user_path_at+0xd4/0x160
[  514.443990][T18208]  __se_sys_mount+0x31d/0x420
[  514.444008][T18208]  ? __pfx___se_sys_mount+0x10/0x10
[  514.444026][T18208]  ? __x64_sys_mount+0x20/0xc0
[  514.444041][T18208]  do_syscall_64+0x166/0x520
[  514.444056][T18208]  ? trace_irq_disable+0x3b/0x140
[  514.444068][T18208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.444079][T18208]  ? clear_bhb_loop+0x70/0xc0
[  514.444093][T18208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.444103][T18208] RIP: 0033:0x7f99e999e159
[  514.444114][T18208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.444123][T18208] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  514.444135][T18208] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  514.444143][T18208] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  514.444150][T18208] RBP: 00007f99ea84a090 R08: 0000000000000000 R09: 0000000000000000
[  514.444156][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.444163][T18208] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  514.444179][T18208]  </TASK>
[  514.464070][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  514.640545][    T9] usb 8-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=ec.00
[  514.765271][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  514.765301][    T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  514.797304][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.797322][    T9] usb 8-1: Product: syz
[  514.797329][    T9] usb 8-1: Manufacturer: syz
[  514.797337][    T9] usb 8-1: SerialNumber: syz
[  514.838376][    T9] usb-storage 8-1:1.0: USB Mass Storage device detected
[  514.839418][   T33] audit: type=1800 audit(2000524703.762:2468): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277550 res=0 errno=0
[  514.883479][   T33] audit: type=1800 audit(2000524703.812:2469): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=277582 res=0 errno=0
[  514.883509][   T33] audit: type=1800 audit(2000524703.812:2470): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=277557 res=0 errno=0
[  514.890326][   T33] audit: type=1800 audit(2000524703.812:2471): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=277558 res=0 errno=0
[  514.980467][   T33] audit: type=1800 audit(2000524703.902:2472): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277618 res=0 errno=0
[  515.204350][T18221] netlink: Conntrack attr has 12 unknown bytes
[  515.204375][T18221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.429682][T18230] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4688'.
[  515.476719][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.476984][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.996766][T18246] netlink: Conntrack attr has 12 unknown bytes
[  515.996789][T18246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.100110][T18253] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4695'.
[  516.552439][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  516.701133][   T10] usb 9-1: Using ep0 maxpacket: 32
[  516.702815][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  516.702857][   T10] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  516.703716][   T10] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  516.703730][   T10] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  516.703741][   T10] usb 9-1: config 14 has no interface number 0
[  516.703749][   T10] usb 9-1: config 14 has no interface number 1
[  516.703782][   T10] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  516.703794][   T10] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  516.703807][   T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  516.703819][   T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  516.703833][   T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  516.703862][   T10] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  516.703875][   T10] usb 9-1: config 14 interface 57 has no altsetting 0
[  516.703885][   T10] usb 9-1: config 14 interface 228 has no altsetting 0
[  516.705525][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.705539][   T10] usb 9-1: Product: syz
[  516.705547][   T10] usb 9-1: Manufacturer: syz
[  516.705555][   T10] usb 9-1: SerialNumber: syz
[  517.077753][T18264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.078058][T18264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.236160][ T5682] usb 8-1: USB disconnect, device number 3
[  517.522974][   T10] legousbtower 9-1:14.57: interrupt endpoints not found
[  517.573044][T18306] netlink: Unknown nat attribute (0)
[  517.573065][T18306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.573152][T18306] FAULT_INJECTION: forcing a failure.
[  517.573152][T18306] name failslab, interval 1, probability 0, space 0, times 0
[  517.573167][T18306] CPU: 0 UID: 0 PID: 18306 Comm: syz.7.4704 Not tainted syzkaller #0 PREEMPT(full) 
[  517.573179][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  517.573188][T18306] Call Trace:
[  517.573193][T18306]  <TASK>
[  517.573198][T18306]  dump_stack_lvl+0xe8/0x150
[  517.573218][T18306]  should_fail_ex+0x3eb/0x540
[  517.573238][T18306]  should_failslab+0xa8/0x100
[  517.573253][T18306]  ? skb_clone+0x212/0x3a0
[  517.573264][T18306]  kmem_cache_alloc_noprof+0x9c/0x600
[  517.573280][T18306]  ? skb_clone+0x212/0x3a0
[  517.573292][T18306]  skb_clone+0x212/0x3a0
[  517.573304][T18306]  __netlink_deliver_tap+0x355/0x6e0
[  517.573320][T18306]  ? netlink_deliver_tap+0x2e/0x1b0
[  517.573332][T18306]  netlink_deliver_tap+0x19c/0x1b0
[  517.573343][T18306]  netlink_sendskb+0x68/0x140
[  517.573361][T18306]  netlink_rcv_skb+0x2a4/0x4a0
[  517.573372][T18306]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.573386][T18306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.573404][T18306]  ? down_read+0x2b9/0x320
[  517.573417][T18306]  genl_rcv+0x28/0x40
[  517.573429][T18306]  netlink_unicast+0x7bd/0x940
[  517.573450][T18306]  netlink_sendmsg+0x7c3/0xae0
[  517.573463][T18306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.573478][T18306]  ? apparmor_socket_sendmsg+0x98/0x360
[  517.573493][T18306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.573504][T18306]  sock_sendmsg_nosec+0x13a/0x180
[  517.573517][T18306]  ____sys_sendmsg+0x54e/0x850
[  517.573535][T18306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.573554][T18306]  ? import_iovec+0x73/0xa0
[  517.573568][T18306]  ___sys_sendmsg+0x2a5/0x360
[  517.573581][T18306]  ? __lock_acquire+0x747/0x2de0
[  517.573596][T18306]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.573628][T18306]  ? __fget_files+0x3a2/0x420
[  517.573638][T18306]  ? __fget_files+0x2a/0x420
[  517.573652][T18306]  __x64_sys_sendmsg+0x1b1/0x290
[  517.573668][T18306]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.573693][T18306]  do_syscall_64+0x166/0x520
[  517.573707][T18306]  ? trace_irq_disable+0x3b/0x140
[  517.573719][T18306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.573730][T18306]  ? clear_bhb_loop+0x70/0xc0
[  517.573743][T18306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.573753][T18306] RIP: 0033:0x7f6949f9e159
[  517.573764][T18306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.573773][T18306] RSP: 002b:00007f694af33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.573785][T18306] RAX: ffffffffffffffda RBX: 00007f694a225fa0 RCX: 00007f6949f9e159
[  517.573800][T18306] RDX: 000000000000e800 RSI: 0000200000000100 RDI: 0000000000000003
[  517.573807][T18306] RBP: 00007f694af33090 R08: 0000000000000000 R09: 0000000000000000
[  517.573814][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.573820][T18306] R13: 00007f694a226038 R14: 00007f694a225fa0 R15: 00007fffc42a3b38
[  517.573836][T18306]  </TASK>
[  517.967814][   T10] legousbtower 9-1:14.228: get version request failed: -71
[  517.967925][   T10] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71
[  518.005959][   T10] usb 9-1: USB disconnect, device number 2
[  518.175926][T18315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4707'.
[  518.200602][T18315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4707'.
[  518.302167][T18318] binder: Write failure EINVAL in pid:41
[  518.316805][T18318] devpts: Unknown parameter './proc/sys/net/sctp/auth_enable'
[  518.559662][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  518.559676][   T33] audit: type=1800 audit(2000524707.482:2512): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  518.736843][   T33] audit: type=1800 audit(2000524707.662:2513): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  518.779721][T18338] 9p: Bad value for 'rfdno'
[  518.796056][T18341] 9p: Bad value for 'rfdno'
[  519.061074][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  519.210954][   T10] usb 9-1: Using ep0 maxpacket: 8
[  519.215459][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  519.215491][   T10] usb 9-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  519.216336][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  519.216354][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  519.216366][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  519.216380][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  519.216392][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  519.216403][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  519.220295][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.220310][   T10] usb 9-1: Product: syz
[  519.220318][   T10] usb 9-1: Manufacturer: syz
[  519.220326][   T10] usb 9-1: SerialNumber: syz
[  519.348650][   T33] audit: type=1800 audit(2000524708.272:2514): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277968 res=0 errno=0
[  519.374917][   T33] audit: type=1800 audit(2000524708.302:2515): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=278000 res=0 errno=0
[  519.380501][   T33] audit: type=1800 audit(2000524708.302:2516): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=277975 res=0 errno=0
[  519.402673][   T33] audit: type=1800 audit(2000524708.332:2517): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=277976 res=0 errno=0
[  519.459192][   T10] usb 9-1: config 0 descriptor??
[  519.470291][T18345] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  519.520537][   T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  519.569467][   T33] audit: type=1800 audit(2000524708.492:2518): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  519.651456][   T33] audit: type=1800 audit(2000524708.582:2519): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  519.687397][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.687639][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.712136][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.712370][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.712955][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.717709][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.759287][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.759534][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.784591][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.784855][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.899889][   T33] audit: type=1800 audit(2000524708.822:2520): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  520.082378][ T5682] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  520.173074][   T33] audit: type=1800 audit(2000524709.102:2521): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=277997 res=0 errno=0
[  520.175293][   T10] usb 9-1: USB disconnect, device number 3
[  520.231810][ T5682] usb 7-1: Using ep0 maxpacket: 16
[  520.233708][ T5682] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  520.235129][ T5682] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.235147][ T5682] usb 7-1: config 0 interface 0 has no altsetting 0
[  520.235165][ T5682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.240123][ T5682] usb 7-1: config 0 descriptor??
[  520.363755][T18376] udevd[18376]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  520.736459][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.736729][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.774287][ T5682] mcp2221 0003:04D8:00DD.0008: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  520.851287][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  521.008948][    T9] usb 9-1: New USB device found: idVendor=9710, idProduct=7720, bcdDevice=0.00
[  521.021348][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  521.021382][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  521.021395][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  521.021407][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  521.021419][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  521.021441][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.065779][T18379] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  521.065867][T18379] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  521.065931][T18379] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  521.128442][    T9] mos7720 9-1:1.0: Moschip 2 port adapter converter detected
[  521.189600][ T5682] usb 7-1: USB disconnect, device number 38
[  521.572823][    T9] usb 9-1: mos7720: usb_control_msg() failed: -71
[  521.649799][    T9] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  521.706637][    T9] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  521.748589][    T9] usb 9-1: USB disconnect, device number 4
[  521.748709][    C0] usb 9-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  521.766854][T18407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4734'.
[  521.766868][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4734'.
[  521.887328][    T9] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  521.939425][    T9] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  521.939927][    T9] mos7720 9-1:1.0: device disconnected
[  522.025911][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  522.025965][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  522.027579][   T54] Bluetooth: hci0: hardware error 0x00
[  523.062496][ T5682] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  523.091781][    T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  523.213347][ T5682] usb 9-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00
[  523.216922][ T5682] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  523.218861][ T5682] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  523.218875][ T5682] usb 9-1: Product: syz
[  523.218882][ T5682] usb 9-1: Manufacturer: syz
[  523.275018][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  523.275045][    T9] usb 7-1: no configurations
[  523.275052][    T9] usb 7-1: can't read configurations, error -22
[  523.400935][    T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  523.554307][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  523.554334][    T9] usb 7-1: no configurations
[  523.554342][    T9] usb 7-1: can't read configurations, error -22
[  523.554609][    T9] usb usb7-port1: attempt power cycle
[  523.581530][T18389] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  523.720940][T18389] usb 8-1: device descriptor read/64, error -71
[  523.891480][    T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  523.911860][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  523.911887][    T9] usb 7-1: no configurations
[  523.911894][    T9] usb 7-1: can't read configurations, error -22
[  523.962313][T18389] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  523.967618][T18465] bond0: entered promiscuous mode
[  523.967632][T18465] bond0: entered allmulticast mode
[  524.042901][    T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  524.063625][    T9] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  524.063667][    T9] usb 7-1: no configurations
[  524.063675][    T9] usb 7-1: can't read configurations, error -22
[  524.063883][    T9] usb usb7-port1: unable to enumerate USB device
[  524.099951][T18389] usb 8-1: device descriptor read/64, error -71
[  524.180787][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  524.201947][T18389] usb usb8-port1: attempt power cycle
[  524.408334][T18486] afs: Bad value for 'flock'
[  524.540909][T18389] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  524.562283][T18389] usb 8-1: device descriptor read/8, error -71
[  524.801351][T18389] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  524.828148][T18389] usb 8-1: device descriptor read/8, error -71
[  524.884679][ T5682] input: Samsung SUR40 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input21
[  524.932179][T18389] usb usb8-port1: unable to enumerate USB device
[  524.996231][   T33] kauditd_printk_skb: 60 callbacks suppressed
[  524.996244][   T33] audit: type=1800 audit(2000524713.922:2582): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=279049 res=0 errno=0
[  524.996270][   T33] audit: type=1800 audit(2000524713.922:2583): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=279050 res=0 errno=0
[  524.996291][   T33] audit: type=1800 audit(2000524713.922:2584): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=279029 res=0 errno=0
[  525.096272][ T5682] usb 9-1: USB disconnect, device number 5
[  525.539655][   T33] audit: type=1800 audit(2000524714.462:2585): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279283 res=0 errno=0
[  525.566205][   T33] audit: type=1800 audit(2000524714.492:2586): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=279287 res=0 errno=0
[  525.670443][   T33] audit: type=1800 audit(2000524714.592:2587): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  525.906748][   T33] audit: type=1800 audit(2000524714.832:2588): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  526.045071][   T33] audit: type=1800 audit(2000524714.972:2589): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  526.125309][   T33] audit: type=1800 audit(2000524715.052:2590): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  526.236366][   T33] audit: type=1800 audit(2000524715.162:2591): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  526.881103][  T993] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  527.031850][  T993] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  527.031876][  T993] usb 7-1: no configurations
[  527.031884][  T993] usb 7-1: can't read configurations, error -22
[  527.046727][ T5682] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  527.162505][  T191] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  527.162617][  T993] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  527.213938][ T5682] usb 9-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00
[  527.213966][ T5682] usb 9-1: no configurations
[  527.213974][ T5682] usb 9-1: can't read configurations, error -22
[  527.325576][  T993] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  527.325603][  T993] usb 7-1: no configurations
[  527.325611][  T993] usb 7-1: can't read configurations, error -22
[  527.325819][  T993] usb usb7-port1: attempt power cycle
[  527.326184][  T191] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00
[  527.327353][  T191] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  527.327370][  T191] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  527.327389][  T191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.344674][ T5682] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  527.561531][ T5682] usb 9-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00
[  527.561557][ T5682] usb 9-1: no configurations
[  527.561565][ T5682] usb 9-1: can't read configurations, error -22
[  527.561778][ T5682] usb usb9-port1: attempt power cycle
[  527.682216][  T993] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  527.703563][  T993] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  527.703589][  T993] usb 7-1: no configurations
[  527.703597][  T993] usb 7-1: can't read configurations, error -22
[  527.832914][  T993] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  527.854049][  T993] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  527.854077][  T993] usb 7-1: no configurations
[  527.854085][  T993] usb 7-1: can't read configurations, error -22
[  527.854259][  T993] usb usb7-port1: unable to enumerate USB device
[  527.900714][ T5682] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  527.922827][ T5682] usb 9-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00
[  527.922854][ T5682] usb 9-1: no configurations
[  527.922861][ T5682] usb 9-1: can't read configurations, error -22
[  528.051013][ T5682] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  528.073749][ T5682] usb 9-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00
[  528.073790][ T5682] usb 9-1: no configurations
[  528.073797][ T5682] usb 9-1: can't read configurations, error -22
[  528.073988][ T5682] usb usb9-port1: unable to enumerate USB device
[  528.992342][  T191] pegasus 8-1:1.0: can't reset MAC
[  528.992522][  T191] pegasus 8-1:1.0: probe with driver pegasus failed with error -5
[  529.037402][  T191] usb 8-1: USB disconnect, device number 8
[  529.868307][T18655] netlink: Invalid conntrack helper
[  529.868327][T18655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.010241][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  530.010254][   T33] audit: type=1800 audit(2000524718.932:2611): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  530.092867][   T33] audit: type=1800 audit(2000524719.022:2612): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279597 res=0 errno=0
[  530.198492][   T33] audit: type=1800 audit(2000524719.122:2613): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  530.337840][   T33] audit: type=1800 audit(2000524719.262:2614): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  530.425714][   T33] audit: type=1800 audit(2000524719.352:2615): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  530.566908][T18677] wg2 speed is unknown, defaulting to 1000
[  530.663046][ T5703] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  530.812652][ T5703] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  530.812703][ T5703] usb 7-1: no configurations
[  530.812711][ T5703] usb 7-1: can't read configurations, error -22
[  530.879663][T18665] syz.8.4775 (18665): drop_caches: 2
[  530.914829][T18667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.918809][T18677] virt_wifi0 speed is unknown, defaulting to 1000
[  530.933312][  T191] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  530.950967][ T5703] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  530.987385][   T33] audit: type=1800 audit(2000524719.912:2616): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  531.072459][   T33] audit: type=1800 audit(2000524720.002:2617): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  531.101625][  T191] usb 8-1: device descriptor read/64, error -71
[  531.126477][ T5703] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  531.126505][ T5703] usb 7-1: no configurations
[  531.126512][ T5703] usb 7-1: can't read configurations, error -22
[  531.126685][ T5703] usb usb7-port1: attempt power cycle
[  531.167881][   T33] audit: type=1800 audit(2000524720.092:2618): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  531.340851][  T191] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  531.452482][    T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  531.461463][ T5703] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  531.477354][  T191] usb 8-1: device descriptor read/64, error -71
[  531.491254][ T5703] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  531.491282][ T5703] usb 7-1: no configurations
[  531.491289][ T5703] usb 7-1: can't read configurations, error -22
[  531.581327][  T191] usb usb8-port1: attempt power cycle
[  531.601701][    T9] usb 9-1: Using ep0 maxpacket: 8
[  531.602218][    T9] usb 9-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00
[  531.608402][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  531.608421][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  531.608446][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.627266][ T5703] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  531.663864][    T9] usb 9-1: config 0 descriptor??
[  531.682868][   T33] audit: type=1800 audit(2000524720.612:2619): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283597 res=0 errno=0
[  531.687999][ T5703] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  531.688024][ T5703] usb 7-1: no configurations
[  531.688031][ T5703] usb 7-1: can't read configurations, error -22
[  531.688247][ T5703] usb usb7-port1: unable to enumerate USB device
[  531.689430][   T33] audit: type=1800 audit(2000524720.612:2620): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=283626 res=0 errno=0
[  531.946066][  T191] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  531.961378][  T191] usb 8-1: device descriptor read/8, error -71
[  532.102242][   T54] Bluetooth: hci1: command tx timeout
[  532.141735][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141760][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141777][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141792][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141807][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141822][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141837][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.141852][    T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  532.210689][  T191] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  532.234824][  T191] usb 8-1: device descriptor read/8, error -71
[  532.272063][    T9] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0
[  532.344044][  T191] usb usb8-port1: unable to enumerate USB device
[  532.352280][    T9] lenovo 0003:17EF:6047.0009: Failed to switch F7/9/11 mode: -71
[  532.367653][    T9] lenovo 0003:17EF:6047.0009: Failed to switch middle button: -71
[  532.369383][    T9] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71
[  532.389363][    T9] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71
[  532.428136][    T9] usb 9-1: USB disconnect, device number 10
[  532.489816][T18709] fido_id[18709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  533.477493][T18676] orangefs_mount: mount request failed with -4
[  533.553717][T18754] FAULT_INJECTION: forcing a failure.
[  533.553717][T18754] name failslab, interval 1, probability 0, space 0, times 0
[  533.553740][T18754] CPU: 0 UID: 0 PID: 18754 Comm: syz.6.4788 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  533.553756][T18754] Tainted: [L]=SOFTLOCKUP
[  533.553760][T18754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  533.553766][T18754] Call Trace:
[  533.553771][T18754]  <TASK>
[  533.553776][T18754]  dump_stack_lvl+0xe8/0x150
[  533.553796][T18754]  should_fail_ex+0x3eb/0x540
[  533.553814][T18754]  ? preload_this_cpu_lock+0x49/0xc0
[  533.553826][T18754]  should_failslab+0xa8/0x100
[  533.553839][T18754]  ? preload_this_cpu_lock+0x49/0xc0
[  533.553849][T18754]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  533.553865][T18754]  ? alloc_vmap_area+0x217/0x1410
[  533.553878][T18754]  ? kmem_cache_alloc_node_noprof+0x3b9/0x600
[  533.553893][T18754]  ? preload_this_cpu_lock+0x49/0xc0
[  533.553903][T18754]  ? alloc_vmap_area+0x217/0x1410
[  533.553918][T18754]  preload_this_cpu_lock+0x49/0xc0
[  533.553929][T18754]  alloc_vmap_area+0x3be/0x1410
[  533.553950][T18754]  ? __pfx_alloc_vmap_area+0x10/0x10
[  533.553962][T18754]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  533.553973][T18754]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  533.553983][T18754]  ? __get_vm_area_node+0x155/0x2f0
[  533.553999][T18754]  __get_vm_area_node+0x200/0x2f0
[  533.554019][T18754]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  533.554034][T18754]  ? kvm_set_memslot+0x4a8/0x1410
[  533.554050][T18754]  ? rcu_is_watching+0x16/0xb0
[  533.554065][T18754]  ? trace_contention_end+0x3d/0x140
[  533.554082][T18754]  ? __mutex_lock+0x305/0x15a0
[  533.554104][T18754]  ? kvm_set_memslot+0x3b/0x1410
[  533.554119][T18754]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  533.554138][T18754]  ? kvm_set_memslot+0x4a8/0x1410
[  533.554150][T18754]  __vmalloc_noprof+0xd2/0x120
[  533.554164][T18754]  ? kvm_set_memslot+0x4a8/0x1410
[  533.554178][T18754]  kvm_set_memslot+0x4a8/0x1410
[  533.554191][T18754]  ? kvm_set_memory_region+0x6da/0xb90
[  533.554209][T18754]  kvm_set_memory_region+0x832/0xb90
[  533.554228][T18754]  kvm_vm_ioctl_set_memory_region+0x6f/0xa0
[  533.554243][T18754]  kvm_vm_ioctl+0xb1c/0xcb0
[  533.554257][T18754]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  533.554288][T18754]  ? tomoyo_path_number_perm+0x219/0x5f0
[  533.554303][T18754]  ? do_vfs_ioctl+0x116f/0x1530
[  533.554317][T18754]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  533.554347][T18754]  ? __fget_files+0x2a/0x420
[  533.554358][T18754]  ? __fget_files+0x2a/0x420
[  533.554368][T18754]  ? __fget_files+0x2a/0x420
[  533.554379][T18754]  ? bpf_lsm_file_ioctl+0x9/0x20
[  533.554392][T18754]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  533.554406][T18754]  __se_sys_ioctl+0xfc/0x170
[  533.554419][T18754]  do_syscall_64+0x166/0x520
[  533.554434][T18754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.554445][T18754]  ? clear_bhb_loop+0x70/0xc0
[  533.554458][T18754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.554468][T18754] RIP: 0033:0x7f99e999e159
[  533.554479][T18754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.554488][T18754] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  533.554500][T18754] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  533.554514][T18754] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004
[  533.554521][T18754] RBP: 00007f99ea84a090 R08: 0000000000000000 R09: 0000000000000000
[  533.554528][T18754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  533.554534][T18754] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  533.554550][T18754]  </TASK>
[  534.181548][T16033] Bluetooth: hci1: command 0x0406 tx timeout
[  534.440758][T18389] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  534.590919][T18389] usb 9-1: Using ep0 maxpacket: 8
[  534.591566][T18389] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  534.592351][T18389] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  534.592366][T18389] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  534.592379][T18389] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  534.592392][T18389] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  534.592414][T18389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.770978][   T10] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  534.909409][T18762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.909684][T18762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.927881][   T10] usb 7-1: Using ep0 maxpacket: 8
[  534.928554][   T10] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  534.935473][   T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  534.935490][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  534.935521][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  534.935533][   T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  534.935557][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.019581][   T33] kauditd_printk_skb: 22 callbacks suppressed
[  535.019594][   T33] audit: type=1800 audit(2000524723.942:2643): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283824 res=0 errno=0
[  535.050404][T18389] usb 9-1: GET_CAPABILITIES returned 0
[  535.050436][T18389] usbtmc 9-1:16.0: can't read capabilities
[  535.074003][   T33] audit: type=1800 audit(2000524724.002:2644): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=283853 res=0 errno=0
[  535.077682][   T33] audit: type=1800 audit(2000524724.002:2645): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=283831 res=0 errno=0
[  535.079351][   T33] audit: type=1800 audit(2000524724.002:2646): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283890 res=0 errno=0
[  535.079963][   T33] audit: type=1800 audit(2000524724.002:2647): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=283832 res=0 errno=0
[  535.175046][   T33] audit: type=1800 audit(2000524724.102:2648): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=283833 res=0 errno=0
[  535.223106][   T33] audit: type=1800 audit(2000524724.152:2649): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283873 res=0 errno=0
[  535.265574][T18774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.265869][T18774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.305382][   T10] usb 7-1: GET_CAPABILITIES returned 0
[  535.305410][   T10] usbtmc 7-1:16.0: can't read capabilities
[  535.326888][   T33] audit: type=1800 audit(2000524724.252:2650): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283964 res=0 errno=0
[  535.327363][T18762] FAULT_INJECTION: forcing a failure.
[  535.327363][T18762] name failslab, interval 1, probability 0, space 0, times 0
[  535.327380][T18762] CPU: 0 UID: 0 PID: 18762 Comm: syz.8.4791 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  535.327395][T18762] Tainted: [L]=SOFTLOCKUP
[  535.327399][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  535.327406][T18762] Call Trace:
[  535.327411][T18762]  <TASK>
[  535.327416][T18762]  dump_stack_lvl+0xe8/0x150
[  535.327435][T18762]  should_fail_ex+0x3eb/0x540
[  535.327454][T18762]  should_failslab+0xa8/0x100
[  535.327468][T18762]  __kmalloc_noprof+0xf9/0x710
[  535.327478][T18762]  ? rcu_is_watching+0x16/0xb0
[  535.327493][T18762]  ? tomoyo_realpath_from_path+0xef/0x640
[  535.327508][T18762]  ? tomoyo_realpath_from_path+0xef/0x640
[  535.327526][T18762]  tomoyo_realpath_from_path+0xef/0x640
[  535.327546][T18762]  ? tomoyo_path_number_perm+0x219/0x5f0
[  535.327559][T18762]  tomoyo_path_number_perm+0x246/0x5f0
[  535.327573][T18762]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  535.327585][T18762]  ? __lock_acquire+0x747/0x2de0
[  535.327615][T18762]  ? __fget_files+0x2a/0x420
[  535.327626][T18762]  ? __fget_files+0x2a/0x420
[  535.327636][T18762]  ? __fget_files+0x2a/0x420
[  535.327648][T18762]  security_file_ioctl+0xc3/0x2a0
[  535.327662][T18762]  __se_sys_ioctl+0x47/0x170
[  535.327676][T18762]  do_syscall_64+0x166/0x520
[  535.327691][T18762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.327702][T18762]  ? clear_bhb_loop+0x70/0xc0
[  535.327715][T18762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.327725][T18762] RIP: 0033:0x7fd5ab39e159
[  535.327735][T18762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.327744][T18762] RSP: 002b:00007fd5a95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  535.327756][T18762] RAX: ffffffffffffffda RBX: 00007fd5ab625fa0 RCX: 00007fd5ab39e159
[  535.327764][T18762] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[  535.327771][T18762] RBP: 00007fd5a95f6090 R08: 0000000000000000 R09: 0000000000000000
[  535.327777][T18762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.327784][T18762] R13: 00007fd5ab626038 R14: 00007fd5ab625fa0 R15: 00007ffce6d68288
[  535.327799][T18762]  </TASK>
[  535.327804][T18762] ERROR: Out of memory at tomoyo_realpath_from_path.
[  535.623060][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  535.653404][T18776] Bluetooth: hci0: Opcode 0x080f failed: -4
[  535.706893][   T10] usb 9-1: USB disconnect, device number 11
[  535.768010][T18389] usb 7-1: USB disconnect, device number 51
[  535.860400][   T33] audit: type=1800 audit(2000524724.782:2651): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  536.117550][   T33] audit: type=1800 audit(2000524725.042:2652): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  536.169037][T18801] syzkaller0: entered promiscuous mode
[  536.169053][T18801] syzkaller0: entered allmulticast mode
[  536.622937][T18813] wg2 speed is unknown, defaulting to 1000
[  536.628228][T18816] MTD: Couldn't look up './file0': -15
[  536.730727][T18389] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  536.760846][   T10] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  536.805488][T18813] virt_wifi0 speed is unknown, defaulting to 1000
[  536.889417][T18389] usb 8-1: unable to get BOS descriptor or descriptor too short
[  536.889448][T18389] usb 8-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40
[  536.890246][T18389] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.890284][T18389] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  536.890305][T18389] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  536.890318][T18389] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  536.909663][   T10] usb 7-1: device descriptor read/64, error -71
[  536.965425][T18389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.965443][T18389] usb 8-1: Product: syz
[  536.965451][T18389] usb 8-1: Manufacturer: syz
[  536.965459][T18389] usb 8-1: SerialNumber: syz
[  537.141109][   T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  537.271492][   T10] usb 7-1: device descriptor read/64, error -71
[  537.311136][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  537.381051][   T10] usb usb7-port1: attempt power cycle
[  537.441216][    T9] usb 9-1: device descriptor read/64, error -71
[  537.459785][T18389] usb 8-1: USB disconnect, device number 13
[  537.608719][T17696] udevd[17696]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  537.690726][    T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  537.720739][   T10] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  537.745556][   T10] usb 7-1: device descriptor read/8, error -71
[  537.821323][    T9] usb 9-1: device descriptor read/64, error -71
[  537.930925][    T9] usb usb9-port1: attempt power cycle
[  537.980672][   T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  538.004423][   T10] usb 7-1: device descriptor read/8, error -71
[  538.080870][T18389] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  538.113454][   T10] usb usb7-port1: unable to enumerate USB device
[  538.231800][T18389] usb 8-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00
[  538.232224][T18389] usb 8-1: config 0 has no interfaces?
[  538.232243][T18389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.234366][T18389] usb 8-1: config 0 descriptor??
[  538.272745][    T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  538.294669][    T9] usb 9-1: device descriptor read/8, error -71
[  538.440331][T18829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.440569][T18829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.469402][T18389] usb 8-1: USB disconnect, device number 14
[  538.535276][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  538.553067][    T9] usb 9-1: device descriptor read/8, error -71
[  538.666576][    T9] usb usb9-port1: unable to enumerate USB device
[  539.112603][T18389] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  539.283098][T18389] usb 8-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  539.283892][T18389] usb 8-1: config index 0 descriptor too short (expected 551, got 45)
[  539.283908][T18389] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  539.286228][T18389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.286242][T18389] usb 8-1: Product: syz
[  539.286250][T18389] usb 8-1: Manufacturer: syz
[  539.286257][T18389] usb 8-1: SerialNumber: syz
[  539.363989][T18389] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  539.930876][ T5703] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  539.965810][T18829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.966221][T18829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.083336][ T5703] usb 7-1: Using ep0 maxpacket: 32
[  540.085712][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  540.085738][   T33] audit: type=1800 audit(2000524729.012:2682): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15967 res=0 errno=0
[  540.087648][ T5703] usb 7-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  540.088495][ T5703] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  540.088509][ T5703] usb 7-1: config 0 has no interface number 0
[  540.090135][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.090149][ T5703] usb 7-1: Product: syz
[  540.090156][ T5703] usb 7-1: Manufacturer: syz
[  540.090164][ T5703] usb 7-1: SerialNumber: syz
[  540.181017][ T5703] usb 7-1: config 0 descriptor??
[  540.194022][   T33] audit: type=1800 audit(2000524729.122:2683): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288443 res=0 errno=0
[  540.202222][ T5703] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  540.202314][ T5703] usb 7-1: selecting invalid altsetting 1
[  540.202325][ T5703] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  540.255107][   T33] audit: type=1800 audit(2000524729.182:2684): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=288475 res=0 errno=0
[  540.255141][   T33] audit: type=1800 audit(2000524729.182:2685): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=288450 res=0 errno=0
[  540.308325][   T33] audit: type=1800 audit(2000524729.232:2686): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=288451 res=0 errno=0
[  540.393087][T18843] ------------[ cut here ]------------
[  540.393099][T18843] usb 8-1: BOGUS control dir, pipe 80000f80 doesn't match bRequestType c0
[  540.393115][T18843] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.6.4815/18843
[  540.421210][T18843] Modules linked in:
[  540.426074][T18843] CPU: 0 UID: 0 PID: 18843 Comm: syz.6.4815 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  540.437187][T18843] Tainted: [L]=SOFTLOCKUP
[  540.441953][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  540.452260][T18843] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  540.457896][T18843] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  540.478113][T18843] RSP: 0018:ffffc900059c7718 EFLAGS: 00010246
[  540.484244][T18843] RAX: 0000000000000000 RBX: ffff888074cf8000 RCX: 0000000080000f80
[  540.492371][T18843] RDX: ffff88802b432fe0 RSI: ffffffff8ce6e8a0 RDI: ffffffff90ca1490
[  540.500526][T18843] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  540.509655][T18843] R10: ffffc900059c7800 R11: fffff52000b38f0c R12: 1ffff1100e9d727c
[  540.518280][T18843] R13: ffff888074eb93e0 R14: ffff88802b432fe0 R15: 0000000080000f80
[  540.526542][T18843] FS:  00007f99ea84a6c0(0000) GS:ffff88812462e000(0000) knlGS:0000000000000000
[  540.535554][T18843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  540.542691][T18843] CR2: 000000110c2412f7 CR3: 000000003d078000 CR4: 00000000003526f0
[  540.550841][T18843] Call Trace:
[  540.554218][T18843]  <TASK>
[  540.557149][T18843]  usb_start_wait_urb+0x13f/0x5b0
[  540.562480][T18843]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  540.568152][T18843]  usb_control_msg+0x234/0x3e0
[  540.573023][T18843]  gl861_ctrl_msg+0x207/0x420
[  540.577978][T18843]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  540.583379][T18843]  ? aa_file_perm+0x4ed/0x15f0
[  540.588250][T18843]  gl861_i2c_master_xfer+0x439/0x6a0
[  540.593688][T18843]  __i2c_transfer+0x7bf/0x1fe0
[  540.598557][T18843]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  540.604467][T18843]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  540.611155][T18843]  ? rt_mutex_lock_nested+0x149/0x1c0
[  540.616566][T18843]  ? i2c_transfer+0xc7/0x2d0
[  540.621754][T18843]  i2c_transfer+0x1cb/0x2d0
[  540.626260][T18843]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  540.631980][T18843]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  540.638178][T18843]  ? i2cdev_read+0xe8/0x250
[  540.642901][T18843]  i2cdev_read+0x10d/0x250
[  540.647424][T18843]  ? __pfx_i2cdev_read+0x10/0x10
[  540.652734][T18843]  vfs_read+0x213/0xa80
[  540.656916][T18843]  ? __pfx_vfs_read+0x10/0x10
[  540.662582][T18843]  ? __fget_files+0x2a/0x420
[  540.667539][T18843]  ? __fget_files+0x3a2/0x420
[  540.672292][T18843]  ? __fget_files+0x2a/0x420
[  540.677000][T18843]  ? fdget+0x1ac/0x250
[  540.681188][T18843]  ksys_read+0x150/0x270
[  540.685523][T18843]  ? __pfx_ksys_read+0x10/0x10
[  540.690310][T18843]  do_syscall_64+0x166/0x520
[  540.694977][T18843]  ? trace_irq_disable+0x3b/0x140
[  540.700082][T18843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.706249][T18843]  ? clear_bhb_loop+0x70/0xc0
[  540.710962][T18843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.717696][T18843] RIP: 0033:0x7f99e999e159
[  540.722745][T18843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.743053][T18843] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  540.751847][T18843] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  540.759920][T18843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  540.768053][T18843] RBP: 00007f99e9a3506b R08: 0000000000000000 R09: 0000000000000000
[  540.776075][T18843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.784402][T18843] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  540.792536][T18843]  </TASK>
[  540.795566][T18843] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  540.802838][T18843] CPU: 0 UID: 0 PID: 18843 Comm: syz.6.4815 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  540.813847][T18843] Tainted: [L]=SOFTLOCKUP
[  540.818192][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  540.828262][T18843] Call Trace:
[  540.831540][T18843]  <TASK>
[  540.834478][T18843]  vpanic+0x26f/0x710
[  540.838470][T18843]  panic+0xc5/0xd0
[  540.842193][T18843]  ? __pfx_panic+0x10/0x10
[  540.846632][T18843]  __warn+0x315/0x4c0
[  540.850612][T18843]  ? usb_submit_urb+0x1057/0x18b0
[  540.855636][T18843]  ? usb_submit_urb+0x1057/0x18b0
[  540.860668][T18843]  __report_bug+0x276/0x570
[  540.865305][T18843]  ? usb_submit_urb+0x1057/0x18b0
[  540.870334][T18843]  ? __pfx___report_bug+0x10/0x10
[  540.875452][T18843]  ? stack_depot_save_flags+0x404/0x7f0
[  540.881006][T18843]  report_bug_entry+0x19b/0x290
[  540.885870][T18843]  ? usb_submit_urb+0x1100/0x18b0
[  540.890909][T18843]  ? usb_submit_urb+0x1105/0x18b0
[  540.895938][T18843]  handle_bug+0xce/0x200
[  540.900188][T18843]  exc_invalid_op+0x1a/0x50
[  540.904674][T18843]  asm_exc_invalid_op+0x1a/0x20
[  540.909506][T18843] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  540.915150][T18843] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  540.935053][T18843] RSP: 0018:ffffc900059c7718 EFLAGS: 00010246
[  540.941213][T18843] RAX: 0000000000000000 RBX: ffff888074cf8000 RCX: 0000000080000f80
[  540.949179][T18843] RDX: ffff88802b432fe0 RSI: ffffffff8ce6e8a0 RDI: ffffffff90ca1490
[  540.957142][T18843] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  540.965104][T18843] R10: ffffc900059c7800 R11: fffff52000b38f0c R12: 1ffff1100e9d727c
[  540.973066][T18843] R13: ffff888074eb93e0 R14: ffff88802b432fe0 R15: 0000000080000f80
[  540.981120][T18843]  ? usb_submit_urb+0x1091/0x18b0
[  540.986146][T18843]  usb_start_wait_urb+0x13f/0x5b0
[  540.991161][T18843]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  540.996796][T18843]  usb_control_msg+0x234/0x3e0
[  541.001565][T18843]  gl861_ctrl_msg+0x207/0x420
[  541.006262][T18843]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  541.011456][T18843]  ? aa_file_perm+0x4ed/0x15f0
[  541.016390][T18843]  gl861_i2c_master_xfer+0x439/0x6a0
[  541.021671][T18843]  __i2c_transfer+0x7bf/0x1fe0
[  541.026518][T18843]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  541.032334][T18843]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  541.038143][T18843]  ? rt_mutex_lock_nested+0x149/0x1c0
[  541.043590][T18843]  ? i2c_transfer+0xc7/0x2d0
[  541.048190][T18843]  i2c_transfer+0x1cb/0x2d0
[  541.052688][T18843]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  541.058727][T18843]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  541.064979][T18843]  ? i2cdev_read+0xe8/0x250
[  541.069503][T18843]  i2cdev_read+0x10d/0x250
[  541.073928][T18843]  ? __pfx_i2cdev_read+0x10/0x10
[  541.078874][T18843]  vfs_read+0x213/0xa80
[  541.083139][T18843]  ? __pfx_vfs_read+0x10/0x10
[  541.087848][T18843]  ? __fget_files+0x2a/0x420
[  541.092476][T18843]  ? __fget_files+0x3a2/0x420
[  541.097144][T18843]  ? __fget_files+0x2a/0x420
[  541.101726][T18843]  ? fdget+0x1ac/0x250
[  541.105873][T18843]  ksys_read+0x150/0x270
[  541.110221][T18843]  ? __pfx_ksys_read+0x10/0x10
[  541.115063][T18843]  do_syscall_64+0x166/0x520
[  541.119650][T18843]  ? trace_irq_disable+0x3b/0x140
[  541.124658][T18843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.130709][T18843]  ? clear_bhb_loop+0x70/0xc0
[  541.135397][T18843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.141294][T18843] RIP: 0033:0x7f99e999e159
[  541.145699][T18843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.165290][T18843] RSP: 002b:00007f99ea84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  541.173719][T18843] RAX: ffffffffffffffda RBX: 00007f99e9c25fa0 RCX: 00007f99e999e159
[  541.182055][T18843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  541.190032][T18843] RBP: 00007f99e9a3506b R08: 0000000000000000 R09: 0000000000000000
[  541.198107][T18843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  541.206083][T18843] R13: 00007f99e9c26038 R14: 00007f99e9c25fa0 R15: 00007fff25be1d18
[  541.214502][T18843]  </TASK>
[  541.217664][T18843] Kernel Offset: disabled
[  541.222006][T18843] Rebooting in 86400 seconds..