last executing test programs:

14m18.655361199s ago: executing program 3 (id=366):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

14m18.559762961s ago: executing program 3 (id=369):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')

14m18.270479804s ago: executing program 3 (id=374):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r1)
setregid(0x0, r1)

14m17.961453559s ago: executing program 3 (id=377):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)

14m17.146668955s ago: executing program 3 (id=379):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

14m16.882186087s ago: executing program 3 (id=383):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a)

14m1.786770922s ago: executing program 32 (id=383):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a)

9m17.50262884s ago: executing program 5 (id=3703):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f00000001c0), 0x12)
bind$x25(r0, &(0x7f0000000080), 0x12)
close(r0)

9m17.172457448s ago: executing program 5 (id=3709):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0xfffffc97)

9m16.705145187s ago: executing program 5 (id=3714):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000480)="8a", 0x1, 0x4000050, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

9m16.415594415s ago: executing program 5 (id=3718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

9m16.230492662s ago: executing program 5 (id=3721):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

9m15.534966593s ago: executing program 5 (id=3729):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ppoll(&(0x7f00000002c0)=[{r0, 0x4400}, {r0, 0x410}], 0x2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)

9m14.95131863s ago: executing program 33 (id=3729):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ppoll(&(0x7f00000002c0)=[{r0, 0x4400}, {r0, 0x410}], 0x2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)

8m25.994777543s ago: executing program 1 (id=4008):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3b9aca03, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8})

8m25.384632172s ago: executing program 1 (id=4013):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000240)="927b788360", 0x5}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

8m25.145006774s ago: executing program 1 (id=4015):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00006dbffc)=0x400c1, 0x4f)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7", 0x17}], 0x1}, 0x0)

8m24.89368493s ago: executing program 1 (id=4020):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

8m24.673127729s ago: executing program 1 (id=4023):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r1, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}, {&(0x7f0000000500)="82", 0x1}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)

8m24.005570569s ago: executing program 1 (id=4028):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5366}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x800, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0)

8m23.645364237s ago: executing program 34 (id=4028):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5366}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x800, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0)

6m19.119469712s ago: executing program 4 (id=5302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

6m18.948209092s ago: executing program 4 (id=5304):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8d}, 0x2}, 0x8d0)

6m18.814150073s ago: executing program 4 (id=5306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0xc4fc9e906872338b, 0x70bd28, 0x0, {{0x15}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x26044050}, 0x20048000)
mknod$loop(0x0, 0xfff, 0x1)

6m18.419294332s ago: executing program 4 (id=5312):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')

6m18.245669252s ago: executing program 4 (id=5316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x3, 0x2c})

6m17.475988118s ago: executing program 4 (id=5331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x2}}, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x20, 0x65dbdbfb, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

6m16.980565706s ago: executing program 35 (id=5331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x2}}, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x20, 0x65dbdbfb, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4.621602195s ago: executing program 7 (id=8942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"])

4.27790438s ago: executing program 7 (id=8946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0)

4.12861342s ago: executing program 7 (id=8949):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x55}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}]}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000ac0)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0xffffffff}, 0x8)

3.9978579s ago: executing program 2 (id=8951):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

3.815051322s ago: executing program 2 (id=8953):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67)

3.561713689s ago: executing program 0 (id=8955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.526543495s ago: executing program 8 (id=8956):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x39, 0x1a, r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

3.232295464s ago: executing program 8 (id=8957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x80, &(0x7f0000002300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)

3.04167444s ago: executing program 7 (id=8959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.695660259s ago: executing program 7 (id=8961):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_io_uring_setup(0x2f67, &(0x7f00000003c0)={0x0, 0x1035, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

2.645028776s ago: executing program 0 (id=8962):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0)
read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020)

2.443644484s ago: executing program 6 (id=8963):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x19}, 0x94)
r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.432303864s ago: executing program 0 (id=8964):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x101, 0x1)
getdents(r2, 0x0, 0x64)

2.425318935s ago: executing program 7 (id=8965):
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
timerfd_create(0x0, 0x800)
openat$uinput(0xffffffffffffff9c, &(0x7f0000004d00), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

2.264025086s ago: executing program 6 (id=8966):
socket$netlink(0x10, 0x3, 0x0)
fanotify_init(0x202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.147935931s ago: executing program 0 (id=8967):
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0xffe, 0x8)
r3 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2df0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.029232092s ago: executing program 8 (id=8968):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2)
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005)

1.935785743s ago: executing program 8 (id=8969):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
r1 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1})

1.885888457s ago: executing program 0 (id=8970):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x4)
writev(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000600)="c1555229ffa084a0ba769805948fdff2c90e7cdebc3dd8b4274e4c4eb1c89fd63387ce8749bed98a3e8e16d70534d29366503163e0c735", 0x37}], 0x2)

1.859659734s ago: executing program 8 (id=8971):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
r2 = fanotify_init(0x20, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB])

1.475552552s ago: executing program 6 (id=8972):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044068}, 0x0)

862.054947ms ago: executing program 6 (id=8973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x200}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

855.647052ms ago: executing program 8 (id=8974):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000))

663.930155ms ago: executing program 2 (id=8975):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="1b17", 0x2}], 0x1}}], 0x1, 0x4048014)

531.255848ms ago: executing program 2 (id=8976):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0)

349.660164ms ago: executing program 2 (id=8977):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
pipe2$9p(0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x1, 0xc040)

281.653928ms ago: executing program 6 (id=8978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

236.764908ms ago: executing program 2 (id=8979):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r3, 0x0, &(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r4})

131.672473ms ago: executing program 0 (id=8980):
timer_create(0x1, 0x0, &(0x7f0000000000)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
exit(0x0)
rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280))

0s ago: executing program 6 (id=8981):
memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\xe3\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\x1e\xa4\x00O\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xcbI\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\x00\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00\x8dFJ`i\xad\xbd\xaa\xafe\xab\x88mY\x14\xee\xe0\x89\xf6h~\xf6\"\xe7\xb8MLZ\x92\x1e\xa6\xb4\xa1\xa8>@~:\t\xb3\xc8o\xb6;\xa4p*Rs\x92\x14\xab\x86\x11\x92\xa0\x1b\xb5\xd3,\xed\x15\xc5f\x86\xafB', 0x6)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x0
[  636.698348][T20657] batman_adv: batadv0: Interface deactivated: macvtap1
[  636.739274][T20657] bridge0 (unregistering): left allmulticast mode
[  636.885172][T20657] batman_adv: batadv0: Removing interface: macvtap1
[  637.850387][T20479] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  637.882533][T20479] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  637.945374][T20479] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  637.991058][T20682] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5419'.
[  638.032290][T20479] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  638.339030][T20479] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.419335][T20479] 8021q: adding VLAN 0 to HW filter on device team0
[  638.440142][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.446860][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.536982][T17822] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.537154][T17822] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.557682][T20479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.808035][T20479] veth0_vlan: entered promiscuous mode
[  640.856178][T20479] veth1_vlan: entered promiscuous mode
[  640.877809][T20749] Invalid ELF header magic: != ELF
[  641.090100][T20479] veth0_macvtap: entered promiscuous mode
[  641.112199][T20479] veth1_macvtap: entered promiscuous mode
[  641.212986][T20479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.261747][T20479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.316461][T17835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.316762][T17835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.318152][T17835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.318194][T17835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.618800][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5447'.
[  642.151044][ T2317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.151061][ T2317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.349521][T17835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.349541][T17835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.737987][T20789] Bluetooth: hci0: invalid length 4, exp 2 for type 27
[  643.079490][T20797] netlink: 'syz.2.5462': attribute type 11 has an invalid length.
[  644.447677][T20848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  647.394775][T20933] lo speed is unknown, defaulting to 1000
[  649.642648][T20992] fuse: Bad value for 'fd'
[  649.649888][T20993] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5540'.
[  649.677896][T20993] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5540'.
[  650.200358][ T1238] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  650.350237][ T1238] usb 9-1: Using ep0 maxpacket: 32
[  650.352747][ T1238] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  650.352777][ T1238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.368761][ T1238] usb 9-1: config 0 descriptor??
[  650.580601][ T1238] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  650.598309][ T1238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  650.606984][ T1238] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  650.607057][ T1238] usb 9-1: media controller created
[  650.738641][ T1238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  650.876944][ T1238] DVB: Unable to find symbol dib7000p_attach()
[  650.876961][ T1238] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  650.980012][ T1238] rc_core: IR keymap rc-dib0700-rc5 not found
[  650.980034][ T1238] Registered IR keymap rc-empty
[  650.980307][ T1238] dvb-usb: could not initialize remote control.
[  650.980316][ T1238] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  650.989278][ T1238] usb 9-1: USB disconnect, device number 2
[  651.098967][T21030] binder: 21029:21030 ioctl c0306201 0 returned -14
[  651.099248][T21030] binder: 21029:21030 ioctl c018620c 200000000280 returned -1
[  651.188332][T21032] netlink: 'syz.0.5556': attribute type 29 has an invalid length.
[  651.188674][T21035] netlink: 'syz.0.5556': attribute type 29 has an invalid length.
[  651.198228][ T1238] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  651.201353][T21032] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5556'.
[  651.321678][    C0] vkms_vblank_simulate: vblank timer overrun
[  651.502712][    C0] vkms_vblank_simulate: vblank timer overrun
[  651.612180][    C0] vkms_vblank_simulate: vblank timer overrun
[  652.332939][T21049] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.333892][T21049] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.031686][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  653.073517][T21073] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5574'.
[  653.181213][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.181239][ T5923] usb 7-1: config 0 has no interfaces?
[  653.181269][ T5923] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  653.181292][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.191683][ T5923] usb 7-1: config 0 descriptor??
[  653.316583][T21049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.331869][T21049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.422910][   T49] usb 7-1: USB disconnect, device number 12
[  654.664859][T17822] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.693952][T17822] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.694066][T17822] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.694110][T17822] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.108024][ T5923] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  655.270479][ T5923] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[  655.270507][ T5923] usb 7-1: config 0 has no interface number 0
[  655.270539][ T5923] usb 7-1: config 0 interface 255 has no altsetting 0
[  655.270575][ T5923] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  655.270597][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.296193][ T5923] usb 7-1: config 0 descriptor??
[  655.305444][ T5923] cp210x 7-1:0.255: cp210x converter detected
[  655.741217][ T5923] cp210x 7-1:0.255: failed to get vendor val 0x000e size 3: -32
[  655.820818][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5596'.
[  655.946220][ T5923] cp210x 7-1:0.255: GPIO initialisation failed: -19
[  655.953449][ T5923] usb 7-1: cp210x converter now attached to ttyUSB0
[  656.156360][ T1195] usb 7-1: USB disconnect, device number 13
[  656.167957][ T1195] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  656.168573][ T1195] cp210x 7-1:0.255: device disconnected
[  657.146868][ T5844] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  657.298972][ T5844] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  657.299025][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.300409][ T5844] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  657.300436][ T5844] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  657.300456][ T5844] usb 9-1: Manufacturer: syz
[  657.358546][ T5844] usb 9-1: config 0 descriptor??
[  657.603593][T21173] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  657.646644][ T5844] rc_core: IR keymap rc-hauppauge not found
[  657.646663][ T5844] Registered IR keymap rc-empty
[  657.648201][ T5844] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  657.651272][ T5844] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input60
[  657.717307][    C0] igorplugusb 9-1:0.0: Error: urb status = -32
[  657.874289][ T5923] usb 9-1: USB disconnect, device number 3
[  658.105004][T21190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  658.105085][ T1195] lo speed is unknown, defaulting to 1000
[  658.536184][ T5844] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  658.697839][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.697871][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  658.697891][ T5844] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  658.697931][ T5844] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  658.697953][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.766273][ T5844] usb 7-1: config 0 descriptor??
[  659.227452][ T5844] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  659.754520][ T1195] usb 7-1: USB disconnect, device number 14
[  660.334971][T21235] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5640'.
[  660.509281][T21237] netlink: 'syz.7.5642': attribute type 3 has an invalid length.
[  664.165479][T21322] netlink: 'syz.7.5677': attribute type 2 has an invalid length.
[  664.165502][T21322] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5677'.
[  665.578208][T21348] ip6tnl0: Caught tx_queue_len zero misconfig
[  666.076572][T21361] netlink: 'syz.2.5693': attribute type 4 has an invalid length.
[  666.143744][T21363] netlink: 'syz.2.5693': attribute type 4 has an invalid length.
[  666.979632][T21384] netlink: 'syz.2.5701': attribute type 5 has an invalid length.
[  666.979655][T21384] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5701'.
[  669.750658][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5728'.
[  669.750683][T21445] bridge: RTM_NEWNEIGH with invalid ether address
[  670.231796][T21452] netlink: 'syz.6.5731': attribute type 1 has an invalid length.
[  670.341861][T21452] 8021q: adding VLAN 0 to HW filter on device bond1
[  670.400329][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  670.559228][   T10] usb 9-1: Using ep0 maxpacket: 32
[  670.608600][   T10] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  670.608632][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.608651][   T10] usb 9-1: Product: syz
[  670.608665][   T10] usb 9-1: Manufacturer: syz
[  670.608678][   T10] usb 9-1: SerialNumber: syz
[  670.646438][   T10] usb 9-1: config 0 descriptor??
[  670.671915][   T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  671.373497][T21456] bond1: (slave veth3): Enslaving as an active interface with a down link
[  671.802029][T21471] netlink: 'syz.7.5738': attribute type 5 has an invalid length.
[  671.802051][T21471] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.5738'.
[  671.933122][   T10] gspca_topro: reg_w err -71
[  671.959636][   T10] gspca_topro: Sensor soi763a
[  671.992466][   T10] usb 9-1: USB disconnect, device number 4
[  672.443259][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5747'.
[  672.883329][   T37] audit: type=1800 audit(672.918:2181): pid=21509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.5756" name="nullb0" dev="tmpfs" ino=6366 res=0 errno=0
[  672.888987][ T1195] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  673.079503][ T1195] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.079530][ T1195] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  673.089498][ T1195] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  673.089528][ T1195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.089548][ T1195] usb 9-1: Product: syz
[  673.089562][ T1195] usb 9-1: Manufacturer: syz
[  673.089576][ T1195] usb 9-1: SerialNumber: syz
[  673.355536][ T1195] usb 9-1: 0:2 : does not exist
[  673.383944][ T1195] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  673.427075][ T1195] usb 9-1: USB disconnect, device number 5
[  675.307171][T21567] netlink: 'syz.2.5780': attribute type 19 has an invalid length.
[  675.307193][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'.
[  675.360318][T21567] netlink: 'syz.2.5780': attribute type 19 has an invalid length.
[  675.360342][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'.
[  675.361830][T17822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  675.367034][T17822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.367081][T17822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.367116][T17822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  675.937520][T21576] block nbd6: NBD_DISCONNECT
[  675.980554][   T37] audit: type=1326 audit(676.020:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  675.980601][   T37] audit: type=1326 audit(676.020:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  675.986133][T21576] block nbd6: Send disconnect failed -107
[  676.081811][   T37] audit: type=1326 audit(676.120:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.081865][   T37] audit: type=1326 audit(676.120:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.095850][T21573] block nbd6: Disconnected due to user request.
[  676.149558][   T37] audit: type=1326 audit(676.120:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.168016][   T37] audit: type=1326 audit(676.190:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.168067][   T37] audit: type=1326 audit(676.200:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.189135][   T37] audit: type=1326 audit(676.230:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.189187][   T37] audit: type=1326 audit(676.230:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21577 comm="syz.2.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  676.206696][T21573] block nbd6: shutting down sockets
[  676.889341][T21603] binder: 21601:21603 ioctl c0306201 2000000001c0 returned -22
[  677.704513][T21627] netlink: 'syz.6.5806': attribute type 1 has an invalid length.
[  677.704528][T21627] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5806'.
[  678.684464][T21657]  nullb0: AHDI p1
[  679.149667][T21671] Bluetooth: hci0: load_link_keys: too big key_count value 65280
[  680.380306][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5839'.
[  680.498153][T21706] syzkaller1: entered promiscuous mode
[  680.498182][T21706] syzkaller1: entered allmulticast mode
[  681.739840][T21726] cgroup: Unknown subsys name 'cpuset'
[  681.946523][T21731] input: syz1 as /devices/virtual/input/input61
[  682.544380][T21741] input: syz1 as /devices/virtual/input/input62
[  683.098136][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  683.098154][   T37] audit: type=1326 audit(683.143:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21749 comm="syz.8.5857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x0
[  683.556017][T21767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input63
[  684.083819][T21777] syzkaller1: entered promiscuous mode
[  684.083849][T21777] syzkaller1: entered allmulticast mode
[  684.213661][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  684.366703][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  684.366737][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  684.366776][   T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  684.366799][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.372085][   T10] usb 7-1: config 0 descriptor??
[  684.401540][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'.
[  684.735597][T21790] block nbd2: NBD_DISCONNECT
[  684.753530][T21790] block nbd2: Send disconnect failed -22
[  684.754051][T21790] block nbd2: Disconnected due to user request.
[  684.754069][T21790] block nbd2: shutting down sockets
[  684.897796][   T10] pyra 0003:1E7D:2CF6.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0
[  685.692835][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  685.692908][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  686.098108][   T10] pyra 0003:1E7D:2CF6.0045: couldn't init struct pyra_device
[  686.099484][   T10] pyra 0003:1E7D:2CF6.0045: couldn't install mouse
[  686.198509][   T10] pyra 0003:1E7D:2CF6.0045: probe with driver pyra failed with error -71
[  686.214937][   T10] usb 7-1: USB disconnect, device number 15
[  686.232256][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  686.306881][T21814] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5882'.
[  686.332224][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  686.790201][T21822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5886'.
[  688.852648][T21863] 8021q: adding VLAN 0 to HW filter on device bond1
[  689.056887][T21872] loop2: detected capacity change from 0 to 7
[  689.058063][T21872] Dev loop2: unable to read RDB block 7
[  689.058105][T21872]  loop2: unable to read partition table
[  689.058333][T21872] loop2: partition table beyond EOD, truncated
[  689.058349][T21872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  692.314498][T21939] netlink: 51 bytes leftover after parsing attributes in process `syz.8.5935'.
[  694.146433][T21980] : entered promiscuous mode
[  694.168303][ T5844] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  694.328335][ T5844] usb 9-1: Using ep0 maxpacket: 16
[  694.330650][ T5844] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  694.330675][ T5844] usb 9-1: config 0 has no interface number 0
[  694.333792][ T5844] usb 9-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  694.333821][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.333848][ T5844] usb 9-1: Product: syz
[  694.333862][ T5844] usb 9-1: Manufacturer: syz
[  694.333876][ T5844] usb 9-1: SerialNumber: syz
[  694.390545][ T5844] usb 9-1: config 0 descriptor??
[  694.408964][ T5844] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  694.443265][ T5844] snd-usb-audio 9-1:0.1: probe with driver snd-usb-audio failed with error -2
[  694.665874][ T5923] usb 9-1: USB disconnect, device number 6
[  694.775594][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5960'.
[  696.850154][T22034] binder: 22033:22034 ioctl c0306201 2000000003c0 returned -14
[  697.182740][T22041] netlink: set zone limit has 4 unknown bytes
[  697.522951][T22056] netlink: 240 bytes leftover after parsing attributes in process `syz.8.5985'.
[  697.792719][T22061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  697.917258][T22063] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  698.514680][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5999'.
[  698.567321][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5999'.
[  698.579724][T22084] macvtap0: entered promiscuous mode
[  698.579748][T22084] vlan0: entered promiscuous mode
[  698.580285][T22084] macvtap0: entered allmulticast mode
[  698.580299][T22084] vlan0: entered allmulticast mode
[  698.580311][T22084] veth0_vlan: entered allmulticast mode
[  698.692670][T22087] macvtap1: entered promiscuous mode
[  698.692931][T22087] macvtap1: entered allmulticast mode
[  699.263593][T22103] netlink: 'syz.6.6006': attribute type 4 has an invalid length.
[  699.326170][T22105] netlink: 'syz.6.6006': attribute type 4 has an invalid length.
[  699.370691][ T1238] lo speed is unknown, defaulting to 1000
[  699.383239][ T5923] lo speed is unknown, defaulting to 1000
[  699.774839][T22120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6014'.
[  699.774864][T22120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  699.774892][T22120] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.933565][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.452189][T22136] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  701.482730][T22167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6034'.
[  701.676818][T22172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6035'.
[  701.995234][T22184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6040'.
[  702.331916][T22193] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6044'.
[  702.554137][   T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  702.706723][   T10] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[  702.706751][   T10] usb 9-1: config 0 has no interface number 0
[  702.710082][   T10] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  702.710109][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.710129][   T10] usb 9-1: Product: syz
[  702.710142][   T10] usb 9-1: Manufacturer: syz
[  702.710156][   T10] usb 9-1: SerialNumber: syz
[  702.765997][   T10] usb 9-1: config 0 descriptor??
[  703.177401][   T10] usb 9-1: Firmware: major: 224, minor: 10, hardware type: UNKNOWN (89)
[  703.392849][   T10] usb 9-1: Firmware: build 
[  703.594786][   T10] usb 9-1: failed to fetch extended address, random address set
[  703.594817][   T10] usb 9-1: atusb_probe: initialization failed, error = -524
[  703.595068][   T10] atusb 9-1:0.128: probe with driver atusb failed with error -524
[  703.638285][   T10] usb 9-1: USB disconnect, device number 7
[  704.623936][ T1195] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  704.773237][ T1195] usb 7-1: Using ep0 maxpacket: 16
[  704.783427][ T1195] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  704.783452][ T1195] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.783469][ T1195] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  704.788870][ T1195] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  704.788897][ T1195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.788915][ T1195] usb 7-1: Product: syz
[  704.788929][ T1195] usb 7-1: Manufacturer: syz
[  704.788941][ T1195] usb 7-1: SerialNumber: syz
[  705.233874][ T1195] usb 7-1: 0:2 : does not exist
[  706.072370][   T10] usb 7-1: USB disconnect, device number 16
[  706.500909][T22282] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6081'.
[  706.529468][   T37] audit: type=1326 audit(707.587:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.532111][   T37] audit: type=1326 audit(707.587:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.547804][   T37] audit: type=1326 audit(707.607:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.547871][   T37] audit: type=1326 audit(707.607:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.547909][   T37] audit: type=1326 audit(707.607:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.548570][   T37] audit: type=1326 audit(707.607:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.548858][   T37] audit: type=1326 audit(707.607:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.549192][   T37] audit: type=1326 audit(707.607:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.550659][   T37] audit: type=1326 audit(707.607:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.552008][   T37] audit: type=1326 audit(707.607:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22281 comm="syz.2.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  706.573946][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6081'.
[  707.809549][T22304] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  708.741115][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  708.913301][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  708.913336][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  708.913362][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  708.913383][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  708.913432][   T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  708.913456][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.992504][   T10] usb 9-1: config 0 descriptor??
[  709.222305][ T1195] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  709.374872][ T1195] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  709.374904][ T1195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.383502][ T1195] usb 7-1: config 0 descriptor??
[  709.400435][ T1195] cp210x 7-1:0.0: cp210x converter detected
[  709.413625][   T10] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max
[  709.449563][   T10] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  709.814955][ T1195] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  709.835606][ T1195] usb 7-1: cp210x converter now attached to ttyUSB0
[  710.034611][ T1238] usb 7-1: USB disconnect, device number 17
[  710.056126][ T1238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  710.174353][ T1238] cp210x 7-1:0.0: device disconnected
[  711.075096][ T1443] Bluetooth: hci5: Frame reassembly failed (-84)
[  711.501516][ T1195] usb 9-1: USB disconnect, device number 8
[  713.088848][ T5841] Bluetooth: hci5: command 0x1003 tx timeout
[  713.088878][   T59] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  714.080804][T22422] lo speed is unknown, defaulting to 1000
[  714.668726][   T37] kauditd_printk_skb: 199 callbacks suppressed
[  714.668744][   T37] audit: type=1326 audit(715.721:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.674559][   T37] audit: type=1326 audit(715.731:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.674714][   T37] audit: type=1326 audit(715.731:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.674756][   T37] audit: type=1326 audit(715.731:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.674794][   T37] audit: type=1326 audit(715.731:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.675246][   T37] audit: type=1326 audit(715.731:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  714.675288][   T37] audit: type=1326 audit(715.731:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22442 comm="syz.0.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  715.019793][T22448] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  715.231963][T22448] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  716.455936][T22475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input64
[  717.186787][ T1195] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  717.345517][T22489] hsr0: entered promiscuous mode
[  717.357882][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6163'.
[  717.376966][ T1195] usb 9-1: Using ep0 maxpacket: 32
[  717.378990][ T1195] usb 9-1: config 0 has an invalid interface number: 155 but max is 0
[  717.379005][ T1195] usb 9-1: config 0 has no interface number 0
[  717.381281][ T1195] usb 9-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  717.381296][ T1195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.381307][ T1195] usb 9-1: Product: syz
[  717.381314][ T1195] usb 9-1: Manufacturer: syz
[  717.381322][ T1195] usb 9-1: SerialNumber: syz
[  717.384398][ T1195] usb 9-1: config 0 descriptor??
[  717.442643][T22489] hsr_slave_0: left promiscuous mode
[  717.479644][T22489] hsr_slave_1: left promiscuous mode
[  717.630937][ T1195] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.155/input/input65
[  717.658271][ T5194] bcm5974 9-1:0.155: could not read from device
[  717.692944][T22489] hsr0 (unregistering): left promiscuous mode
[  717.718044][ T1195] usb 9-1: USB disconnect, device number 9
[  718.061491][T22494] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6165'.
[  718.543740][T22506] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  718.956421][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6176'.
[  721.217306][    C1] vkms_vblank_simulate: vblank timer overrun
[  721.427913][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.427946][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.427970][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.427995][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.428019][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x2
[  721.428042][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.428074][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.428099][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.429348][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.430472][ T1195] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0
[  721.534655][ T1195] hid-generic 00A0:0006:0003.0047: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  721.674761][ T1238] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  721.826785][ T1238] usb 7-1: Using ep0 maxpacket: 16
[  721.829980][ T1238] usb 7-1: config 0 has no interfaces?
[  721.832578][ T1238] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  721.832604][ T1238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.832623][ T1238] usb 7-1: Product: syz
[  721.832637][ T1238] usb 7-1: Manufacturer: syz
[  721.832650][ T1238] usb 7-1: SerialNumber: syz
[  721.838932][ T1238] usb 7-1: config 0 descriptor??
[  722.097002][ T1195] usb 7-1: USB disconnect, device number 18
[  722.416936][   T37] audit: type=1326 audit(723.485:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22573 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7fc00000
[  723.024168][ T1238] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  723.142648][   T37] audit: type=1326 audit(724.206:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22573 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7fc00000
[  723.184747][ T1238] usb 7-1: Using ep0 maxpacket: 16
[  723.189586][ T1238] usb 7-1: config 0 has an invalid interface number: 180 but max is 0
[  723.189615][ T1238] usb 7-1: config 0 has no interface number 0
[  723.196796][ T1238] usb 7-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[  723.196826][ T1238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.196845][ T1238] usb 7-1: Product: syz
[  723.196858][ T1238] usb 7-1: Manufacturer: syz
[  723.196871][ T1238] usb 7-1: SerialNumber: syz
[  723.203019][ T1238] usb 7-1: config 0 descriptor??
[  723.209895][ T1238] usb 7-1: bad CDC descriptors
[  723.451405][ T1195] usb 7-1: USB disconnect, device number 19
[  725.937786][T22638] Bluetooth: hci0: invalid len left 7, exp >= 52
[  726.047026][T22644] lo speed is unknown, defaulting to 1000
[  727.737972][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6239'.
[  727.770205][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6239'.
[  728.394674][T22696] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  729.500844][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6252'.
[  730.810079][T22747] netlink: 67 bytes leftover after parsing attributes in process `syz.7.6259'.
[  731.385112][T22753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input67
[  731.721914][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.764529][T22765] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  731.979497][T22774] sctp: [Deprecated]: syz.8.6272 (pid 22774) Use of struct sctp_assoc_value in delayed_ack socket option.
[  731.979497][T22774] Use struct sctp_sack_info instead
[  734.226961][T22853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6303'.
[  734.226994][T22853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6303'.
[  734.230250][T22853] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  734.610790][ T5923] delete_channel: no stack
[  734.615709][T22861] Invalid source name
[  734.615726][T22861] UBIFS error (pid: 22861): cannot open "./file0", error -22
[  736.407420][   T49] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  736.557042][   T49] usb 7-1: Using ep0 maxpacket: 32
[  736.559781][   T49] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  736.559809][   T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.594052][   T49] usb 7-1: config 0 descriptor??
[  736.611377][   T49] gspca_main: sunplus-2.14.0 probing 041e:400b
[  737.326969][ T5923] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  737.466758][T22933] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  737.466783][T22933] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  737.497331][ T5923] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  737.497612][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  737.497639][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  737.497665][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  737.497692][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  737.497802][ T5923] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  737.497825][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.588384][ T5923] usb 9-1: config 0 descriptor??
[  737.592991][T22939] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  737.630137][   T49] gspca_sunplus: reg_w_riv err -71
[  737.630303][   T49] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  737.650086][   T49] usb 7-1: USB disconnect, device number 20
[  738.007871][ T5923] hid_parser_main: 3 callbacks suppressed
[  738.007893][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.007923][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.007950][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.007977][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.008003][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.008029][ T5923] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[  738.014217][ T5923] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  738.299486][ T1238] usb 9-1: USB disconnect, device number 10
[  738.486650][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6346'.
[  739.590498][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6355'.
[  739.797843][ T5841] Bluetooth: hci5: command 0x1003 tx timeout
[  739.805763][   T59] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  740.016224][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.139652][T23084] netlink: 'syz.0.6400': attribute type 10 has an invalid length.
[  743.139690][T23084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6400'.
[  743.140386][T23084] veth0_vlan: entered allmulticast mode
[  743.142085][T23084] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  743.516983][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6405'.
[  744.478425][ T1238] Process accounting resumed
[  745.728624][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728661][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728685][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728710][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728735][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728760][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728785][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728809][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728833][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.728857][ T1238] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[  745.816041][ T1238] hid-generic 0000:0000:0000.0049: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz1
[  746.410843][T23190] netlink: 'syz.7.6443': attribute type 12 has an invalid length.
[  746.410864][T23190] netlink: 'syz.7.6443': attribute type 29 has an invalid length.
[  746.410877][T23190] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6443'.
[  746.411603][T23190] netlink: 'syz.7.6443': attribute type 12 has an invalid length.
[  746.411619][T23190] netlink: 'syz.7.6443': attribute type 29 has an invalid length.
[  746.411631][T23190] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6443'.
[  747.084331][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  747.084403][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  747.142781][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6451'.
[  747.145909][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6451'.
[  747.559955][T17831] Bluetooth: hci5: Frame reassembly failed (-84)
[  748.043449][ T1238] libceph: connect (1)[c::]:6789 error -101
[  748.043666][ T1238] libceph: mon0 (1)[c::]:6789 connect error
[  748.048925][ T1238] libceph: connect (1)[c::]:6789 error -101
[  748.049130][ T1238] libceph: mon0 (1)[c::]:6789 connect error
[  748.155712][   T10] libceph: connect (1)[c::]:6789 error -101
[  748.155925][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  748.156389][   T10] libceph: connect (1)[c::]:6789 error -101
[  748.156585][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  748.306214][   T10] libceph: connect (1)[c::]:6789 error -101
[  748.306440][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  748.417526][   T10] libceph: connect (1)[c::]:6789 error -101
[  748.417764][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  748.812845][ T1238] libceph: connect (1)[c::]:6789 error -101
[  748.813064][ T1238] libceph: mon0 (1)[c::]:6789 connect error
[  748.816981][T23236] ceph: No mds server is up or the cluster is laggy
[  748.818912][T23239] ceph: No mds server is up or the cluster is laggy
[  748.922774][   T10] libceph: connect (1)[c::]:6789 error -101
[  748.922993][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  749.011561][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.170822][T23264] lo: Caught tx_queue_len zero misconfig
[  749.202479][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.313518][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.383705][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.489866][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6474'.
[  749.540097][T23274] netlink: 'syz.8.6475': attribute type 1 has an invalid length.
[  749.568346][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.630723][   T59] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  749.662357][    C0] vkms_vblank_simulate: vblank timer overrun
[  749.705448][T23274] 8021q: adding VLAN 0 to HW filter on device bond2
[  749.768439][T23277] 8021q: adding VLAN 0 to HW filter on device batadv1
[  749.784765][T23277] bond2: (slave batadv1): making interface the new active one
[  749.787583][T23277] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  750.504003][ T1238] kernel read not supported for file /admmidi2 (pid: 1238 comm: kworker/0:3)
[  751.569644][ T1238] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  751.736444][ T1238] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.736495][ T1238] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  751.736518][ T1238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.791420][ T1238] usb 9-1: config 0 descriptor??
[  752.103906][ T1238] usbhid 9-1:0.0: can't add hid device: -71
[  752.104025][ T1238] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  752.124342][ T1238] usb 9-1: USB disconnect, device number 11
[  753.053310][T23383] sit0: entered allmulticast mode
[  753.594626][ T1238] libceph: connect (1)[c::]:6789 error -101
[  753.594851][ T1238] libceph: mon0 (1)[c::]:6789 connect error
[  753.600939][ T1238] libceph: connect (1)[c::]:6789 error -101
[  753.601153][ T1238] libceph: mon0 (1)[c::]:6789 connect error
[  753.620059][T23402] ceph: No mds server is up or the cluster is laggy
[  754.162592][T23421] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  755.034383][T23452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  755.959425][T23483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  756.565659][   T49] hid_parser_main: 33 callbacks suppressed
[  756.565681][   T49] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0
[  756.599692][   T49] hid-generic 0000:0000:0000.004A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  758.427090][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6585'.
[  758.620664][    C1] vkms_vblank_simulate: vblank timer overrun
[  758.620923][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804f532400: rx timeout, send abort
[  758.706304][T23555] kvm: kvm [23554]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076)
[  759.116345][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804f530000: rx timeout, send abort
[  759.123869][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804f532400: abort rx timeout. Force session deactivation
[  759.336923][T23586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6597'.
[  759.557796][    C1] vkms_vblank_simulate: vblank timer overrun
[  759.616159][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804f530000: abort rx timeout. Force session deactivation
[  759.896426][T17824] Bluetooth: hci5: Frame reassembly failed (-84)
[  761.947973][   T59] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  762.168814][T23658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6624'.
[  762.413958][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6624'.
[  762.856412][T23687] netlink: 'syz.6.6637': attribute type 9 has an invalid length.
[  762.856433][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6637'.
[  762.887201][T23687] netlink: 'syz.6.6637': attribute type 9 has an invalid length.
[  762.887223][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6637'.
[  762.887267][T17822] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  762.893959][T17822] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  762.894008][T17822] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  762.894044][T17822] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  764.575815][T23738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6658'.
[  765.949424][   T37] audit: type=1326 audit(1023.037:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.8.6672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f358a52eec9 code=0x0
[  769.007071][ T1238] kernel write not supported for file /cpu/0/msr (pid: 1238 comm: kworker/0:3)
[  769.121762][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6699'.
[  769.123018][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6699'.
[  770.103490][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'.
[  770.103506][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6705'.
[  770.103523][T23861] netlink: 'syz.2.6705': attribute type 20 has an invalid length.
[  770.104426][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'.
[  770.104439][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6705'.
[  770.104454][T23861] netlink: 'syz.2.6705': attribute type 20 has an invalid length.
[  770.180308][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x1
[  770.180332][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180347][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180362][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180376][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180419][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180433][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180448][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x2
[  770.180462][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.180476][ T5923] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0
[  770.187375][ T5923] hid-generic 0000:0000:0000.004B: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  770.544312][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6711'.
[  771.607139][T23905] tipc: Started in network mode
[  771.607161][T23905] tipc: Node identity 4, cluster identity 4711
[  771.607174][T23905] tipc: Node number set to 4
[  772.402183][T23925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  773.247534][T23951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  774.825313][ T1238] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  774.960283][T24001] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6769'.
[  774.978487][ T1238] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  774.978517][ T1238] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  774.978559][ T1238] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  774.978582][ T1238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.049900][T24001] gretap0: entered promiscuous mode
[  775.080026][T24004] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6769'.
[  775.100483][T24004] 0ªî{X¹¦: renamed from gretap0
[  775.143431][T24004] 0ªî{X¹¦: left promiscuous mode
[  775.143461][T24004] 0ªî{X¹¦: entered allmulticast mode
[  775.153429][T24004] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  775.251049][ T1238] usb 9-1: usb_control_msg returned -32
[  775.251096][ T1238] usbtmc 9-1:16.0: can't read capabilities
[  775.506623][T24017] netlink: 'syz.0.6776': attribute type 2 has an invalid length.
[  775.506646][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6776'.
[  775.513212][T24017] netlink: 'syz.0.6776': attribute type 2 has an invalid length.
[  775.513232][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6776'.
[  775.929072][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6784'.
[  776.030950][   T37] audit: type=1326 audit(1033.117:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.031170][   T37] audit: type=1326 audit(1033.117:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.031995][   T37] audit: type=1326 audit(1033.117:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.050226][   T37] audit: type=1326 audit(1033.137:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.060054][   T37] audit: type=1326 audit(1033.147:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.060106][   T37] audit: type=1326 audit(1033.147:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.060215][   T37] audit: type=1326 audit(1033.147:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.070508][   T37] audit: type=1326 audit(1033.157:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.070558][   T37] audit: type=1326 audit(1033.157:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  776.070597][   T37] audit: type=1326 audit(1033.157:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24037 comm="syz.6.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  777.643459][   T49] usb 9-1: USB disconnect, device number 12
[  777.813566][T24068] bond0: left promiscuous mode
[  777.813590][T24068] bond_slave_0: left promiscuous mode
[  777.813814][T24068] bond_slave_1: left promiscuous mode
[  777.814036][T24068] dummy0: left promiscuous mode
[  778.895205][   T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  779.047523][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  779.047556][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  779.047579][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  779.047621][   T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  779.047644][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.052111][   T10] usb 9-1: config 0 descriptor??
[  779.495159][   T10] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  779.795380][ T1238] lo speed is unknown, defaulting to 1000
[  779.795427][ T1238] syz2: Port: 1 Link DOWN
[  779.796087][T17824] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  779.796116][T17824] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.801454][T24101] vcan0: entered allmulticast mode
[  779.804814][T17824] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  779.804846][T17824] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.804888][T17824] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  779.805315][T17824] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.806960][T14249] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  779.806987][T14249] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.811178][T24099] vcan0: left allmulticast mode
[  781.092993][T24144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6831'.
[  781.093007][T24144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6831'.
[  781.093135][T24144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6831'.
[  781.641241][   T49] usb 9-1: USB disconnect, device number 13
[  781.760620][T24129] kexec: Could not allocate control_code_buffer
[  781.769208][T24149] veth3: entered promiscuous mode
[  783.393711][T24190] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6850'.
[  783.393843][T24190] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  783.452753][T24190] 0ªî{X¹¦: entered allmulticast mode
[  783.453066][T24190] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  783.646117][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6851'.
[  783.646155][T24193] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6851'.
[  783.684266][T17835] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  783.684434][T17835] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  783.684465][T17835] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  783.684484][T17835] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  783.720297][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6851'.
[  783.720320][T24193] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6851'.
[  783.812920][T24196] binder: 24195:24196 ioctl 4018620d 0 returned -22
[  784.040725][T24199] binder: 24198:24199 ioctl 40046205 0 returned -22
[  784.390857][T24211] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  784.910216][T24223] netlink: 'syz.0.6864': attribute type 1 has an invalid length.
[  784.988351][T24223] 8021q: adding VLAN 0 to HW filter on device bond1
[  785.049692][T24226] 8021q: adding VLAN 0 to HW filter on device bond1
[  785.050420][T24226] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  785.052942][T24226] bond1: (slave vcan1): Error -95 calling set_mac_address
[  786.817035][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6879'.
[  787.014718][T24272] netlink: 'syz.8.6883': attribute type 1 has an invalid length.
[  787.131102][T24272] 8021q: adding VLAN 0 to HW filter on device bond3
[  787.203008][T24275] bond3: (slave ip6gretap1): making interface the new active one
[  787.221147][T24275] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  787.541980][T24288] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6889'.
[  787.619353][T24284] nbd: socks must be embedded in a SOCK_ITEM attr
[  787.622234][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6889'.
[  787.660937][T24284] block nbd2: shutting down sockets
[  791.643767][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6932'.
[  792.023376][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6938'.
[  792.027420][T24404] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  792.027443][T24404] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  793.391725][T24430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  794.863699][T24471] netlink: 'syz.2.6965': attribute type 1 has an invalid length.
[  795.076639][T24471] 8021q: adding VLAN 0 to HW filter on device bond1
[  795.171051][T24477] bond1: (slave ip6erspan0): making interface the new active one
[  795.173765][T24477] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  795.180337][T24482] veth0: entered promiscuous mode
[  795.183271][T24481] veth0: left promiscuous mode
[  796.406584][T24537] kvm: user requested TSC rate below hardware speed
[  796.940232][T24551] pim6reg1: entered promiscuous mode
[  796.940260][T24551] pim6reg1: entered allmulticast mode
[  797.068069][T24557] netlink: 'syz.0.6998': attribute type 4 has an invalid length.
[  797.736517][T24575] netlink: 208252 bytes leftover after parsing attributes in process `syz.7.7005'.
[  797.736553][T24575] netlink: 'syz.7.7005': attribute type 1 has an invalid length.
[  797.736568][T24575] netlink: 'syz.7.7005': attribute type 2 has an invalid length.
[  797.736580][T24575] netlink: 'syz.7.7005': attribute type 3 has an invalid length.
[  797.736594][T24575] netlink: 'syz.7.7005': attribute type 4 has an invalid length.
[  798.486010][ T5844] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  798.653603][ T5844] usb 9-1: unable to get BOS descriptor or descriptor too short
[  798.654985][ T5844] usb 9-1: not running at top speed; connect to a high speed hub
[  798.659357][ T5844] usb 9-1: config 1 has an invalid interface descriptor of length 5, skipping
[  798.659380][ T5844] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  798.659399][ T5844] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[  798.659479][ T5844] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4
[  798.659520][ T5844] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  798.668005][ T5844] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  798.668033][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.668053][ T5844] usb 9-1: Product: syz
[  798.668067][ T5844] usb 9-1: Manufacturer: syz
[  798.668081][ T5844] usb 9-1: SerialNumber: syz
[  798.875171][   T49] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  798.930441][ T5844] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  799.029759][ T5844] usb 9-1: USB disconnect, device number 14
[  799.041803][   T49] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  799.041866][   T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  799.043251][   T49] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  799.043276][   T49] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  799.043296][   T49] usb 7-1: Manufacturer: syz
[  799.108106][   T49] usb 7-1: config 0 descriptor??
[  799.295055][   T49] rc_core: IR keymap rc-hauppauge not found
[  799.295076][   T49] Registered IR keymap rc-empty
[  799.296647][   T49] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  799.305158][   T49] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input69
[  799.348768][    C1] igorplugusb 7-1:0.0: Error: urb status = -32
[  799.422228][ T5844] usb 7-1: USB disconnect, device number 21
[  800.775174][ T5844] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[  800.927794][ T5844] usb 9-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  800.927825][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.937468][ T5844] usb 9-1: config 0 descriptor??
[  800.946622][ T5844] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  801.585157][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00
[  801.586110][ T5844] pwc: recv_control_msg error -32 req 02 val 2700
[  801.681127][T24642] netlink: 'syz.7.7034': attribute type 4 has an invalid length.
[  801.789225][ T5844] pwc: recv_control_msg error -71 req 02 val 2c00
[  801.789718][ T5844] pwc: recv_control_msg error -71 req 04 val 1000
[  801.790316][ T5844] pwc: recv_control_msg error -71 req 04 val 1300
[  801.791165][ T5844] pwc: recv_control_msg error -71 req 04 val 1400
[  801.805068][ T5844] pwc: recv_control_msg error -71 req 02 val 2000
[  801.805561][ T5844] pwc: recv_control_msg error -71 req 02 val 2100
[  801.806222][ T5844] pwc: recv_control_msg error -71 req 06 val 0600
[  801.806681][ T5844] pwc: recv_control_msg error -71 req 04 val 1500
[  801.807136][ T5844] pwc: recv_control_msg error -71 req 02 val 2500
[  801.807585][ T5844] pwc: recv_control_msg error -71 req 02 val 2400
[  801.815290][ T5844] pwc: recv_control_msg error -71 req 02 val 2600
[  801.815786][ T5844] pwc: recv_control_msg error -71 req 02 val 2900
[  801.816264][ T5844] pwc: recv_control_msg error -71 req 02 val 2800
[  801.816902][ T5844] pwc: recv_control_msg error -71 req 04 val 1100
[  801.817416][ T5844] pwc: recv_control_msg error -71 req 04 val 1200
[  801.819866][ T5844] pwc: Registered as video103.
[  801.822889][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input70
[  801.872618][ T5844] usb 9-1: USB disconnect, device number 15
[  802.115588][   T59] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  802.192678][T24658] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7040'.
[  803.042123][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7049'.
[  804.277823][T24708] netlink: 'syz.2.7060': attribute type 4 has an invalid length.
[  804.301089][T24708] netlink: 'syz.2.7060': attribute type 4 has an invalid length.
[  804.411230][T24712] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7063'.
[  808.526184][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  808.526341][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  809.841677][T24866] block nbd7: shutting down sockets
[  810.554341][T24883] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  813.259146][T24935] loop2: detected capacity change from 0 to 7
[  813.267674][T24935] Dev loop2: unable to read RDB block 7
[  813.267718][T24935]  loop2: unable to read partition table
[  813.267940][T24935] loop2: partition table beyond EOD, truncated
[  813.267958][T24935] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  813.480961][   T37] audit: type=1326 audit(1070.547:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.481010][   T37] audit: type=1326 audit(1070.567:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.481051][   T37] audit: type=1326 audit(1070.567:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.481091][   T37] audit: type=1326 audit(1070.567:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.541102][   T37] audit: type=1326 audit(1070.627:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.541151][   T37] audit: type=1326 audit(1070.627:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.541191][   T37] audit: type=1326 audit(1070.627:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.543740][   T37] audit: type=1326 audit(1070.627:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24939 comm="syz.8.7157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  813.658813][   T12] kworker/u8:0 (12) used greatest stack depth: 12760 bytes left
[  813.681687][ T3644] kworker/u8:14 (3644) used greatest stack depth: 12184 bytes left
[  815.436391][T24985] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  815.828416][T24996] netlink: 'syz.6.7182': attribute type 4 has an invalid length.
[  815.833503][T24996] netlink: 'syz.6.7182': attribute type 4 has an invalid length.
[  815.838253][ T5844] lo speed is unknown, defaulting to 1000
[  815.838279][ T5844] syz2: Port: 1 Link ACTIVE
[  816.993826][T25031] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  817.184884][T25037] netlink: 'syz.6.7200': attribute type 4 has an invalid length.
[  817.184907][T25037] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.7200'.
[  817.399508][T25044] overlayfs: failed to clone lowerpath
[  817.741847][T25058] netlink: 'syz.0.7209': attribute type 1 has an invalid length.
[  817.894068][T25058] 8021q: adding VLAN 0 to HW filter on device bond2
[  817.965073][T25060] bond2: (slave gretap0): making interface the new active one
[  817.988134][T25060] bond2: (slave gretap0): Enslaving as an active interface with an up link
[  818.246051][   T37] audit: type=1326 audit(1075.327:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25062 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  818.246105][   T37] audit: type=1326 audit(1075.337:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25062 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03054eeec9 code=0x7ffc0000
[  818.469603][T25067] Invalid ELF header len 8
[  820.697098][T25116] netlink: 'syz.8.7233': attribute type 1 has an invalid length.
[  820.697124][T25116] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7233'.
[  820.697141][T25116] netlink: 'syz.8.7233': attribute type 2 has an invalid length.
[  820.697155][T25116] netlink: 'syz.8.7233': attribute type 1 has an invalid length.
[  820.913593][   T37] kauditd_printk_skb: 7 callbacks suppressed
[  820.913610][   T37] audit: type=1326 audit(1077.997:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  820.914131][   T37] audit: type=1326 audit(1077.997:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a4caf79 code=0x7ffc0000
[  820.914851][   T37] audit: type=1326 audit(1077.997:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a4caf79 code=0x7ffc0000
[  820.988759][   T37] audit: type=1326 audit(1078.067:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  820.994113][   T37] audit: type=1326 audit(1078.077:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  820.994508][   T37] audit: type=1326 audit(1078.077:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  821.058964][   T37] audit: type=1326 audit(1078.077:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  821.059980][   T37] audit: type=1326 audit(1078.147:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a4caf79 code=0x7ffc0000
[  821.060548][   T37] audit: type=1326 audit(1078.147:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a52eec9 code=0x7ffc0000
[  821.061302][   T37] audit: type=1326 audit(1078.147:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25124 comm="syz.8.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a4caf79 code=0x7ffc0000
[  821.355375][T25129] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7238'.
[  821.525296][T25135] ieee802154 phy0 wpan0: encryption failed: -22
[  821.644598][T25144] input: syz1 as /devices/virtual/input/input71
[  823.876157][T25204] input: syz0 as /devices/virtual/input/input72
[  823.957138][T25207] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7270'.
[  824.254681][T25215] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7274'.
[  825.251747][ T5844] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  825.405081][ T5844] usb 9-1: Using ep0 maxpacket: 32
[  825.415918][ T5844] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  825.415946][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.448674][ T5844] usb 9-1: config 0 descriptor??
[  825.660876][T25257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7293'.
[  825.661778][ T5844] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  825.681762][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  825.682884][ T5844] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  825.682939][ T5844] usb 9-1: media controller created
[  825.720929][T25257] veth1_macvtap: left promiscuous mode
[  825.763938][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  825.874286][ T5844] az6027: usb out operation failed. (-71)
[  825.874719][ T5844] az6027: usb out operation failed. (-71)
[  825.874733][ T5844] stb0899_attach: Driver disabled by Kconfig
[  825.874744][ T5844] az6027: no front-end attached
[  825.874744][ T5844] 
[  825.875716][ T5844] az6027: usb out operation failed. (-71)
[  825.875732][ T5844] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  825.880824][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input73
[  825.884189][ T5844] dvb-usb: schedule remote query interval to 400 msecs.
[  825.884208][ T5844] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  825.918249][ T5844] usb 9-1: USB disconnect, device number 16
[  826.149400][ T5844] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  826.265376][   T49] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  826.415389][   T49] usb 7-1: Using ep0 maxpacket: 8
[  826.417508][   T49] usb 7-1: config 0 has an invalid interface number: 38 but max is 0
[  826.417539][   T49] usb 7-1: config 0 has no interface number 0
[  826.417572][   T49] usb 7-1: config 0 interface 38 has no altsetting 0
[  826.419995][   T49] usb 7-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[  826.420023][   T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.420043][   T49] usb 7-1: Product: syz
[  826.420058][   T49] usb 7-1: Manufacturer: syz
[  826.420074][   T49] usb 7-1: SerialNumber: syz
[  826.485864][   T49] usb 7-1: config 0 descriptor??
[  826.491468][   T49] usb-storage 7-1:0.38: USB Mass Storage device detected
[  826.701319][ T5844] usb 7-1: USB disconnect, device number 22
[  828.014297][T25319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7317'.
[  828.413252][T25288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  829.932422][T25288] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  829.932758][T25288] macsec1: left promiscuous mode
[  830.408661][T25319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  830.674216][T25365] kvm: kvm [25364]: vcpu2, guest rIP: 0x8000000 Unhandled WRMSR(0x40000056) = 0x0
[  830.772479][T25319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.105779][T14249] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  831.105813][T14249] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  831.113372][T25383] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  831.113399][T25383] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  831.153877][T14249] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  831.153909][T14249] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  831.153948][T14249] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  831.153969][T14249] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  831.154001][T14249] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  831.154025][T14249] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  831.670607][T25399] hsr0: entered allmulticast mode
[  831.670630][T25399] hsr_slave_0: entered allmulticast mode
[  831.670656][T25399] hsr_slave_1: entered allmulticast mode
[  831.707995][T25399] hsr_slave_0: left promiscuous mode
[  831.745547][T25399] hsr_slave_1: left promiscuous mode
[  831.878257][T25399] hsr0 (unregistering): left allmulticast mode
[  831.895617][ T1238] kernel write not supported for file bpf-prog (pid: 1238 comm: kworker/0:3)
[  831.897375][T25401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  832.078097][T25407] overlayfs: failed to clone lowerpath
[  832.373822][   T37] kauditd_printk_skb: 109 callbacks suppressed
[  832.373840][   T37] audit: type=1326 audit(1089.457:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4183f2af79 code=0x7ffc0000
[  832.374309][   T37] audit: type=1326 audit(1089.457:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  832.375296][   T37] audit: type=1326 audit(1089.457:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4183f2af79 code=0x7ffc0000
[  832.448983][   T37] audit: type=1326 audit(1089.537:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4183f2af79 code=0x7ffc0000
[  832.449536][   T37] audit: type=1326 audit(1089.537:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  832.450229][   T37] audit: type=1326 audit(1089.537:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  832.519653][   T37] audit: type=1326 audit(1089.607:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  832.519707][   T37] audit: type=1326 audit(1089.607:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183f8eec9 code=0x7ffc0000
[  832.521490][   T37] audit: type=1326 audit(1089.607:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4183f2af79 code=0x7ffc0000
[  832.521540][   T37] audit: type=1326 audit(1089.607:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25413 comm="syz.0.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4183f2af79 code=0x7ffc0000
[  832.918207][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7359'.
[  832.918232][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7359'.
[  834.428394][T25484] netlink: 2 bytes leftover after parsing attributes in process `syz.7.7380'.
[  834.839563][T25500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7386'.
[  834.839648][T25500] netlink: 'syz.2.7386': attribute type 18 has an invalid length.
[  835.336998][T25517] vlan2: entered allmulticast mode
[  835.337022][T25517] dummy0: entered allmulticast mode
[  835.343464][T25519] loop2: detected capacity change from 0 to 7
[  835.449515][T25523] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7398'.
[  835.538537][T25527] overlayfs: failed to clone lowerpath
[  835.981866][T25542] overlayfs: failed to clone lowerpath
[  837.557218][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7426'.
[  839.701222][ T1238] hid_parser_main: 27 callbacks suppressed
[  839.701244][ T1238] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0
[  839.746147][ T1238] hid-generic 0000:0000:0000.004D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  840.518418][T25647] batadv_slave_1: entered promiscuous mode
[  840.520870][T25646] batadv_slave_1: left promiscuous mode
[  840.667671][T25649] Bluetooth: MGMT ver 1.23
[  840.757724][T25653] netlink: 'syz.8.7451': attribute type 12 has an invalid length.
[  840.757747][T25653] netlink: 'syz.8.7451': attribute type 29 has an invalid length.
[  840.757762][T25653] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7451'.
[  840.757791][T25653] netlink: 'syz.8.7451': attribute type 1 has an invalid length.
[  840.757806][T25653] netlink: 'syz.8.7451': attribute type 2 has an invalid length.
[  840.757819][T25653] netlink: 39 bytes leftover after parsing attributes in process `syz.8.7451'.
[  841.154482][T25664] syzkaller1: entered promiscuous mode
[  841.154511][T25664] syzkaller1: entered allmulticast mode
[  841.299395][T25668] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7459'.
[  841.485537][T25670] overlayfs: failed to clone upperpath
[  841.769544][T25679] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7464'.
[  841.774507][T25679] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7464'.
[  842.772619][T25707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  843.739291][   T37] kauditd_printk_skb: 132 callbacks suppressed
[  843.739308][   T37] audit: type=1326 audit(1101.821:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25731 comm="syz.7.7488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a75b5eec9 code=0x0
[  844.385197][T25752] bridge0: entered allmulticast mode
[  844.386492][T25752] bridge0: left allmulticast mode
[  844.478230][T25754] netlink: 'syz.2.7497': attribute type 3 has an invalid length.
[  844.478253][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7497'.
[  844.926578][   T37] audit: type=1326 audit(1103.011:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.927208][   T37] audit: type=1326 audit(1103.011:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.927755][   T37] audit: type=1326 audit(1103.011:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.928320][   T37] audit: type=1326 audit(1103.011:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.928727][   T37] audit: type=1326 audit(1103.011:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.929306][   T37] audit: type=1326 audit(1103.011:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.932620][   T37] audit: type=1326 audit(1103.011:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.933174][   T37] audit: type=1326 audit(1103.011:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  844.933639][   T37] audit: type=1326 audit(1103.011:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25765 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  845.303980][T25773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  845.338037][T25773] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  845.845171][T25333] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  846.031165][T25333] usb 7-1: Using ep0 maxpacket: 32
[  846.033826][T25333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.033858][T25333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.033898][T25333] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  846.033920][T25333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.060162][T25333] usb 7-1: config 0 descriptor??
[  846.070033][T25333] hub 7-1:0.0: USB hub found
[  846.275366][T25333] hub 7-1:0.0: 1 port detected
[  846.883809][T25333] usb 7-1: USB disconnect, device number 23
[  846.889623][    C1] vkms_vblank_simulate: vblank timer overrun
[  847.290407][T25817] 9pnet_fd: p9_fd_create_unix (25817): problem connecting socket: ./file0: -111
[  847.968405][T25813] overlayfs: statfs failed on './file0'
[  848.343854][T25841] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7531'.
[  848.396099][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7528'.
[  848.702520][T25842] vxlan1: entered promiscuous mode
[  848.730989][T17831] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  848.732345][T17831] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  848.732389][T17831] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  848.732423][T17831] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  848.799689][T25854] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7536'.
[  849.022875][T17831] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  849.022924][T17831] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  849.022968][T17831] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  849.023000][T17831] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  849.567877][T25877] netlink: 'syz.7.7546': attribute type 29 has an invalid length.
[  849.574138][T25877] netlink: 'syz.7.7546': attribute type 29 has an invalid length.
[  849.576452][T25877] netlink: 500 bytes leftover after parsing attributes in process `syz.7.7546'.
[  849.739334][T25885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7547'.
[  851.577135][   T37] kauditd_printk_skb: 199 callbacks suppressed
[  851.577162][   T37] audit: type=1804 audit(1109.631:2912): pid=25936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.7569" name="bus" dev="ramfs" ino=97493 res=1 errno=0
[  852.530541][T25968] loop3: detected capacity change from 0 to 1
[  853.595617][T25339] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  853.745358][T25339] usb 7-1: Using ep0 maxpacket: 8
[  853.749003][T25339] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  853.749065][T25339] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  853.749088][T25339] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  853.749113][T25339] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  853.749138][T25339] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  853.749181][T25339] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  853.749211][T25339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.075372][T25339] usb 7-1: usb_control_msg returned -32
[  854.075426][T25339] usbtmc 7-1:16.0: can't read capabilities
[  854.439681][T26012] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  854.732118][T26018] sctp: [Deprecated]: syz.8.7608 (pid 26018) Use of int in max_burst socket option.
[  854.732118][T26018] Use struct sctp_assoc_value instead
[  855.204594][T26032] 9pnet_fd: Insufficient options for proto=fd
[  855.376632][T26030] kvm: MWAIT instruction emulated as NOP!
[  856.408014][ T1238] usb 7-1: USB disconnect, device number 24
[  858.448544][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7650'.
[  859.375466][T26143] 9pnet_fd: Insufficient options for proto=fd
[  859.392157][T26142] loop7: detected capacity change from 0 to 16384
[  859.765743][T26146] loop7: detected capacity change from 16384 to 0
[  859.769806][    C0] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2
[  859.816601][T26156] 0ªî{X¹¦: left allmulticast mode
[  859.817251][T26156] sit0: left allmulticast mode
[  859.820096][T26156] bridge_slave_0: left allmulticast mode
[  859.828256][T26156] veth0_vlan: left allmulticast mode
[  859.837796][T26156] ip6gretap1: left allmulticast mode
[  859.838203][T26156] macsec1: left allmulticast mode
[  859.838391][T26156] hsr1: left allmulticast mode
[  859.838406][T26156] batadv0: left allmulticast mode
[  859.838428][T26156] bond0: left allmulticast mode
[  859.838442][T26156] bond_slave_0: left allmulticast mode
[  859.838464][T26156] bond_slave_1: left allmulticast mode
[  860.196349][T26165] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  861.562568][T26185] ceph: No mds server is up or the cluster is laggy
[  861.572202][T26188] ceph: No mds server is up or the cluster is laggy
[  863.069306][T26235] loop2: detected capacity change from 0 to 7
[  863.097572][T26235] Dev loop2: unable to read RDB block 7
[  863.097609][T26235]  loop2: unable to read partition table
[  863.097747][T26235] loop2: partition table beyond EOD, truncated
[  863.097758][T26235] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  865.077235][T26298] support for the xor transformation has been removed.
[  866.045491][T25339] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  866.188804][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7745'.
[  866.188842][T26340] netlink: 'syz.8.7745': attribute type 30 has an invalid length.
[  866.198999][T25339] usb 7-1: Using ep0 maxpacket: 16
[  866.201408][T25339] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  866.201433][T25339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.201452][T25339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  866.210419][T25339] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  866.210448][T25339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.210467][T25339] usb 7-1: Product: syz
[  866.210481][T25339] usb 7-1: Manufacturer: syz
[  866.210494][T25339] usb 7-1: SerialNumber: syz
[  866.288354][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7745'.
[  866.288390][T26340] netlink: 'syz.8.7745': attribute type 30 has an invalid length.
[  866.288737][T17831] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  866.663357][T25339] usb 7-1: 0:2 : does not exist
[  866.684437][T25339] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1)
[  866.783198][T25339] usb 7-1: USB disconnect, device number 25
[  866.894683][T17831] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  866.894821][T17831] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  866.894857][T17831] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  867.151448][T26343] loop2: detected capacity change from 0 to 7
[  867.152558][T26343] Dev loop2: unable to read RDB block 7
[  867.152601][T26343]  loop2: unable to read partition table
[  867.152833][T26343] loop2: partition table beyond EOD, truncated
[  867.152850][T26343] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  869.389164][T26426] bond0: (slave bond_slave_0): Releasing backup interface
[  869.437886][T26426] bond_slave_0: left promiscuous mode
[  869.478773][T26426] bond0: (slave bond_slave_1): Releasing backup interface
[  869.517113][T26426] bond_slave_1: left promiscuous mode
[  869.558982][T26426] team0: Port device C removed
[  869.596991][T26426] team0: Port device team_slave_1 removed
[  869.597516][T26426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  869.667781][T26426] bond2: (slave gretap0): Releasing active interface
[  869.955412][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  869.955496][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  872.754844][T26544] loop2: detected capacity change from 0 to 7
[  872.763920][T26544] Dev loop2: unable to read RDB block 7
[  872.763949][T26544]  loop2: AHDI p2 p3
[  872.763978][T26544] loop2: partition table partially beyond EOD, truncated
[  872.764082][T26544] loop2: p3 start 335544320 is beyond EOD, truncated
[  873.753482][T26564] ptrace attach of "./syz-executor exec"[26566] was attempted by "./syz-executor exec"[26564]
[  874.348733][T26575] netlink: 'syz.8.7838': attribute type 1 has an invalid length.
[  874.488417][T26575] 8021q: adding VLAN 0 to HW filter on device bond4
[  876.595205][   T37] audit: type=1804 audit(1134.661:2913): pid=26632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.7861" name="file0" dev="tmpfs" ino=9197 res=1 errno=0
[  877.213047][T26649] netlink: 'syz.8.7870': attribute type 1 has an invalid length.
[  877.213072][T26649] netlink: 'syz.8.7870': attribute type 4 has an invalid length.
[  877.213087][T26649] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7870'.
[  878.831823][T26667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  878.831988][T26667] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  878.925956][T26669] 9pnet: p9_errstr2errno: server reported unknown error 00000004,group_id=
[  879.224433][T26667] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  879.233766][T26667] overlayfs: failed to look up (tracing) for ino (-66)
[  880.200077][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7891'.
[  880.455543][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'.
[  882.931259][T26763] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  883.821540][T26781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7920'.
[  883.887686][T26784] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7919'.
[  883.925285][T26784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7919'.
[  887.942625][T26853] netlink: 'syz.8.7947': attribute type 58 has an invalid length.
[  888.878976][T26883] lo speed is unknown, defaulting to 1000
[  890.041418][T26911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  890.124630][   T37] audit: type=1326 audit(1148.201:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26881 comm="syz.6.7958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x0
[  891.733166][T26938] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  892.062428][T26943] serio: Serial port ptm0
[  892.876601][T25333] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  893.167634][T25333] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  893.167668][T25333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  893.167695][T25333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  893.167721][T25333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  893.167762][T25333] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  893.167785][T25333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.377542][T25333] usb 7-1: config 0 descriptor??
[  893.456414][T26953] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  893.940457][T25333] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  894.200776][ T1238] usb 7-1: USB disconnect, device number 26
[  894.660307][T26974] lo: Caught tx_queue_len zero misconfig
[  896.394521][T14249] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.394893][T14249] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.418614][T14249] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.418657][T14249] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.994703][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8010'.
[  897.012033][T27018] binder: 27017:27018 ioctl c0306201 0 returned -14
[  898.649264][T27073] overlayfs: failed to clone upperpath
[  900.237313][T27106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  900.335716][T27110] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  900.889983][    C0] vkms_vblank_simulate: vblank timer overrun
[  900.926918][T27127] lo speed is unknown, defaulting to 1000
[  901.091707][T27127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  901.105332][T25339] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  901.263710][T25339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.263743][T25339] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  901.263785][T25339] usb 7-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  901.263808][T25339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.323055][T25339] usb 7-1: config 0 descriptor??
[  901.527967][T27143] overlayfs: failed to clone upperpath
[  901.933689][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933713][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933729][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933744][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933759][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933774][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  901.933789][T25339] a4tech 0003:09DA:000A.004F: unknown main item tag 0x0
[  902.026360][T25339] a4tech 0003:09DA:000A.004F: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.6-1/input0
[  902.480923][T25339] usb 7-1: USB disconnect, device number 27
[  902.621981][    C0] vkms_vblank_simulate: vblank timer overrun
[  902.745151][    C0] vkms_vblank_simulate: vblank timer overrun
[  903.505173][ T1238] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  903.655134][ T1238] usb 7-1: Using ep0 maxpacket: 16
[  903.657577][ T1238] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.657609][ T1238] usb 7-1: config 0 interface 0 has no altsetting 0
[  903.657646][ T1238] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  903.657675][ T1238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.690437][ T1238] usb 7-1: config 0 descriptor??
[  904.165468][ T1238] nzxt-smart2 0003:1E71:2009.0050: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0
[  904.695363][ T1238] usb 7-1: USB disconnect, device number 28
[  905.462493][T27243] netlink: 'syz.6.8103': attribute type 13 has an invalid length.
[  905.462515][T27243] netlink: 'syz.6.8103': attribute type 17 has an invalid length.
[  905.977990][T27243] 8021q: adding VLAN 0 to HW filter on device bond0
[  906.011597][T27243] 8021q: adding VLAN 0 to HW filter on device team0
[  906.170882][T27243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  907.854792][T27293] Invalid ELF header magic: != ELF
[  908.057106][T17837] libceph: connect (1)[c::]:6789 error -101
[  908.057326][T17837] libceph: mon0 (1)[c::]:6789 connect error
[  908.088079][T17837] libceph: connect (1)[c::]:6789 error -101
[  908.088299][T17837] libceph: mon0 (1)[c::]:6789 connect error
[  908.092638][T27297] ceph: No mds server is up or the cluster is laggy
[  909.516880][T27338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8141'.
[  910.258680][T27357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8149'.
[  910.311216][T27359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8148'.
[  910.542426][T27359] 8021q: adding VLAN 0 to HW filter on device bond1
[  910.715357][T27364] 8021q: adding VLAN 0 to HW filter on device bond1
[  910.716054][T27364] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  910.720603][T27364] bond1: (slave vti0): Error -95 calling set_mac_address
[  914.970179][T27479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8203'.
[  914.970359][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8203'.
[  915.348751][T27485] overlayfs: failed to clone upperpath
[  916.420873][T27515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8219'.
[  916.435690][T27506] block device autoloading is deprecated and will be removed.
[  916.594802][T27525] netlink: 'syz.6.8220': attribute type 10 has an invalid length.
[  916.664800][T27525] 8021q: adding VLAN 0 to HW filter on device team0
[  916.678359][T27525] bond0: (slave team0): Enslaving as an active interface with an up link
[  917.867986][T27555] netlink: 'syz.2.8233': attribute type 1 has an invalid length.
[  917.945874][T17837] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  918.107469][T17837] usb 7-1: config 0 has an invalid interface number: 28 but max is 0
[  918.107498][T17837] usb 7-1: config 0 has no interface number 0
[  918.107545][T17837] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.107572][T17837] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  918.107611][T17837] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  918.107635][T17837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.113129][T17837] usb 7-1: config 0 descriptor??
[  918.532035][T17837] logitech-djreceiver 0003:046D:C534.0051: unknown main item tag 0x0
[  918.532072][T17837] logitech-djreceiver 0003:046D:C534.0051: unknown main item tag 0x0
[  918.532099][T17837] logitech-djreceiver 0003:046D:C534.0051: unknown main item tag 0x0
[  918.532127][T17837] logitech-djreceiver 0003:046D:C534.0051: unknown main item tag 0x0
[  918.573423][T17837] logitech-djreceiver 0003:046D:C534.0051: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.6-1/input28
[  918.592854][T27573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8241'.
[  918.599496][T27573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8241'.
[  918.736386][T17837] usb 7-1: USB disconnect, device number 29
[  919.708045][T27593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8250'.
[  920.321935][T27617] batman_adv: batadv0: Adding interface: ip6gretap2
[  920.321955][T27617] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  920.321982][T27617] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  920.435593][T17837] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  920.597488][T17837] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  920.597514][T17837] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  920.598918][T17837] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  920.598946][T17837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  920.598964][T17837] usb 7-1: SerialNumber: syz
[  920.835559][T17837] usb 7-1: 0:2 : does not exist
[  920.850808][T17837] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  920.867049][T17837] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[  920.872072][T17837] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[  920.903775][T17837] usb 7-1: USB disconnect, device number 30
[  921.209752][T27629] netlink: 'syz.8.8266': attribute type 11 has an invalid length.
[  921.209777][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8266'.
[  921.210837][T27629] netlink: 'syz.8.8266': attribute type 11 has an invalid length.
[  921.210855][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8266'.
[  921.551281][T27645] veth0: entered promiscuous mode
[  921.552176][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8273'.
[  921.713451][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.920339][    C0] vkms_vblank_simulate: vblank timer overrun
[  922.059036][    C0] vkms_vblank_simulate: vblank timer overrun
[  922.333504][T27669] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  922.359012][T27669] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  922.677734][    C0] vkms_vblank_simulate: vblank timer overrun
[  924.486782][   T37] audit: type=1326 audit(1438.577:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27714 comm="syz.6.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  924.486832][   T37] audit: type=1326 audit(1438.577:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27714 comm="syz.6.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  924.494877][   T37] audit: type=1326 audit(1438.577:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27714 comm="syz.6.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  924.495010][   T37] audit: type=1326 audit(1438.577:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27714 comm="syz.6.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  924.495049][   T37] audit: type=1326 audit(1438.577:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27714 comm="syz.6.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  924.750829][T27724] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8304'.
[  925.523984][T27748] netlink: 'syz.8.8315': attribute type 3 has an invalid length.
[  925.687027][T27748] netlink: 'syz.8.8315': attribute type 3 has an invalid length.
[  926.885063][T27778] openvswitch: netlink: IPv4 tun info is not correct
[  927.128732][T27789] Failed to get privilege flags for destination (handle=0x0:0x0)
[  931.394549][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  931.394647][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  933.625971][T27900] netlink: 'syz.8.8375': attribute type 16 has an invalid length.
[  933.625994][T27900] netlink: 'syz.8.8375': attribute type 17 has an invalid length.
[  933.970364][T27900] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.982730][T27900] 8021q: adding VLAN 0 to HW filter on device team0
[  934.066413][T27900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  934.376595][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8380'.
[  934.377073][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8380'.
[  935.013350][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8389'.
[  935.039363][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8388'.
[  935.039399][T27932] netlink: 'syz.2.8388': attribute type 18 has an invalid length.
[  935.236942][T27931] batadv0 (unregistering): left promiscuous mode
[  935.712755][T27945] netlink: 'syz.8.8393': attribute type 3 has an invalid length.
[  935.712780][T27945] netlink: 'syz.8.8393': attribute type 8 has an invalid length.
[  935.712794][T27945] netlink: 'syz.8.8393': attribute type 10 has an invalid length.
[  935.712809][T27945] netlink: 'syz.8.8393': attribute type 11 has an invalid length.
[  935.712823][T27945] netlink: 201148 bytes leftover after parsing attributes in process `syz.8.8393'.
[  935.887405][T27946] uprobe: syz.8.8395:27946 failed to unregister, leaking uprobe
[  936.235917][T25338] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  936.442675][T25338] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  936.442710][T25338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.442729][T25338] usb 7-1: Product: syz
[  936.442744][T25338] usb 7-1: Manufacturer: syz
[  936.442758][T25338] usb 7-1: SerialNumber: syz
[  936.461202][T25338] usb 7-1: config 0 descriptor??
[  937.955568][T25338] usb 7-1: f81604_read: reg: 200f failed: -EPROTO
[  937.970158][T25338] usb 7-1: USB disconnect, device number 31
[  938.003928][T25338] usb 7-1: f81604_read: reg: 100f failed: -ENODEV
[  938.026517][T27985] 9pnet_fd: Insufficient options for proto=fd
[  938.089972][T27988] all: renamed from lo
[  938.093484][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8410'.
[  938.120199][T27992] 9pnet_fd: Insufficient options for proto=fd
[  938.221073][T25338] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  938.771768][T28012] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8421'.
[  939.304560][T28026] netlink: 'syz.8.8427': attribute type 1 has an invalid length.
[  939.622408][T28027] bond5: (slave bridge2): making interface the new active one
[  939.623059][T28027] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  939.977473][T28046] binder: 28045:28046 ioctl 4018620d 0 returned -22
[  940.030779][T28049] binder: 28045:28049 ioctl c018620c 0 returned -14
[  940.969438][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8446'.
[  942.016745][T28107] tipc: Failed to remove unknown binding: 66,3,3/0:1233933331/1233933332
[  942.550627][T28149] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  943.266676][   T37] audit: type=1326 audit(1457.357:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28170 comm="syz.6.8473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x0
[  946.361941][T28231] bond0: (slave syz_tun): Releasing backup interface
[  946.396234][T28231] syz_tun: left allmulticast mode
[  946.501557][T28231] bridge_slave_0: left allmulticast mode
[  946.501593][T28231] bridge_slave_0: left promiscuous mode
[  946.501883][T28231] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.580096][T28231] bridge_slave_1: left allmulticast mode
[  946.580130][T28231] bridge_slave_1: left promiscuous mode
[  946.580462][T28231] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.698226][T28231] bond0: (slave bond_slave_0): Releasing backup interface
[  946.782048][T28231] bond_slave_0: left promiscuous mode
[  946.782376][T28231] bond_slave_0: left allmulticast mode
[  946.828442][T28231] bond0: (slave bond_slave_1): Releasing backup interface
[  946.869819][T28231] bond_slave_1: left promiscuous mode
[  946.872936][T28231] bond_slave_1: left allmulticast mode
[  946.997265][T28231] team0: Port device team_slave_1 removed
[  947.002024][T28231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  947.002057][T28231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  947.737645][T28266] netlink: 'syz.0.8506': attribute type 10 has an invalid length.
[  949.259210][T28313] input: syz0 as /devices/virtual/input/input75
[  949.259489][T28313] input: failed to attach handler leds to device input75, error: -6
[  949.552820][   T37] audit: type=1326 audit(1463.627:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.552875][   T37] audit: type=1326 audit(1463.637:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.615932][   T37] audit: type=1326 audit(1463.707:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.615986][   T37] audit: type=1326 audit(1463.707:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.616027][   T37] audit: type=1326 audit(1463.707:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.631757][   T37] audit: type=1326 audit(1463.717:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.631810][   T37] audit: type=1326 audit(1463.717:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.631850][   T37] audit: type=1326 audit(1463.717:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.649589][   T37] audit: type=1326 audit(1463.727:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  949.649638][   T37] audit: type=1326 audit(1463.737:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28320 comm="syz.6.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x7ffc0000
[  950.016482][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8534'.
[  951.139533][T28355] veth0: entered promiscuous mode
[  951.141472][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8544'.
[  951.412585][T28355] veth0 (unregistering): left promiscuous mode
[  952.010601][T28376] overlayfs: failed to clone upperpath
[  955.269652][T28450] overlayfs: failed to clone upperpath
[  956.468504][T28481] lo speed is unknown, defaulting to 1000
[  956.623813][T28484] netlink: 'syz.0.8597': attribute type 2 has an invalid length.
[  956.642593][T28484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8597'.
[  957.234136][   T37] kauditd_printk_skb: 10 callbacks suppressed
[  957.234154][   T37] audit: type=1326 audit(1471.317:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28480 comm="syz.6.8595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f768274eec9 code=0x0
[  959.275750][T28530] netlink: 'syz.8.8617': attribute type 15 has an invalid length.
[  959.337096][T28535] netlink: 'syz.6.8618': attribute type 1 has an invalid length.
[  959.429692][T28535] 8021q: adding VLAN 0 to HW filter on device bond2
[  959.508473][T28539] bond2: (slave gretap2): making interface the new active one
[  959.524320][T28539] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  960.025127][T25338] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  960.112617][T28549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8622'.
[  960.204810][T25338] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  960.204855][T25338] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  960.205465][T25338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.221369][T25338] usb 7-1: config 0 descriptor??
[  960.498450][ T1238] usb 7-1: USB disconnect, device number 32
[  962.315206][ T1238] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  962.465101][ T1238] usb 7-1: Using ep0 maxpacket: 8
[  962.467421][ T1238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  962.467478][ T1238] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  962.467502][ T1238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.473640][ T1238] usb 7-1: config 0 descriptor??
[  962.530381][ T1238] gspca_main: vc032x-2.14.0 probing 046d:0892
[  963.891762][T28639] batadv_slave_0: entered promiscuous mode
[  963.915676][ T1238] gspca_vc032x: reg_w err -71
[  963.915770][ T1238] vc032x 7-1:0.0: probe with driver vc032x failed with error -71
[  963.918775][ T1238] usb 7-1: USB disconnect, device number 33
[  964.246415][T28651] policy can only be matched on NF_INET_PRE_ROUTING
[  964.246429][T28651] unable to load match
[  965.284817][T28695] netlink: 51 bytes leftover after parsing attributes in process `syz.0.8679'.
[  966.503140][T28722] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  967.132417][T28735] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.8694'.
[  967.192908][T28737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8695'.
[  967.259256][T28739] overlayfs: failed to clone upperpath
[  967.283028][T28741] input: syz1 as /devices/virtual/input/input77
[  967.896678][T25338] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  968.156298][T25338] usb 7-1: Using ep0 maxpacket: 32
[  968.295495][T25338] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  968.295515][T25338] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  968.298409][T25338] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  968.298425][T25338] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  968.298436][T25338] usb 7-1: Product: syz
[  968.298444][T25338] usb 7-1: Manufacturer: syz
[  968.376632][T25338] hub 7-1:4.0: USB hub found
[  968.598159][T25338] hub 7-1:4.0: 2 ports detected
[  969.030532][T25338] hub 7-1:4.0: set hub depth failed
[  969.044336][T25338] usb 7-1: USB disconnect, device number 34
[  969.416207][T28779] ipvlan0: entered promiscuous mode
[  969.416245][T28779] ipvlan0: entered allmulticast mode
[  969.582937][T28789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  969.601348][T28789] FAT-fs (loop1): unable to read boot sector
[  969.747554][T28793] binder: 28792:28793 ioctl c0306201 200000000640 returned -22
[  970.280936][T28814] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  971.055145][T25338] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  971.208094][T25338] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  971.208121][T25338] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  971.215526][T25338] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  971.215555][T25338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  971.215575][T25338] usb 7-1: SerialNumber: syz
[  971.460896][T25338] usb 7-1: 0:2 : does not exist
[  971.460985][T25338] usb 7-1: unit 5: unexpected type 0x0a
[  971.537086][T25338] usb 7-1: USB disconnect, device number 35
[  971.688050][T28846] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8740'.
[  971.794354][T28850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8742'.
[  972.011693][T28858] netem: change failed
[  973.378231][   T37] audit: type=1326 audit(1487.467:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28895 comm="syz.8.8762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f358a52eec9 code=0x0
[  973.856246][T28903] netlink: 'syz.2.8765': attribute type 12 has an invalid length.
[  973.856270][T28903] netlink: 'syz.2.8765': attribute type 29 has an invalid length.
[  973.856284][T28903] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8765'.
[  973.856315][T28903] netlink: 'syz.2.8765': attribute type 2 has an invalid length.
[  973.856328][T28903] netlink: 'syz.2.8765': attribute type 3 has an invalid length.
[  974.346545][T25333] libceph: connect (1)[c::]:6789 error -101
[  974.346775][T25333] libceph: mon0 (1)[c::]:6789 connect error
[  974.605473][T25333] libceph: connect (1)[c::]:6789 error -101
[  974.605709][T25333] libceph: mon0 (1)[c::]:6789 connect error
[  975.104584][T28915] ceph: No mds server is up or the cluster is laggy
[  975.124861][T25333] libceph: connect (1)[c::]:6789 error -101
[  975.125124][T25333] libceph: mon0 (1)[c::]:6789 connect error
[  975.220654][    C1] vkms_vblank_simulate: vblank timer overrun
[  975.306046][    C1] vkms_vblank_simulate: vblank timer overrun
[  975.837444][    C1] vkms_vblank_simulate: vblank timer overrun
[  978.411153][T29011] netlink: 'syz.8.8806': attribute type 12 has an invalid length.
[  981.094207][T29074] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8834'.
[  981.966638][T29095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8844'.
[  982.255178][T29095] bridge0 (unregistering): left promiscuous mode
[  982.841323][T29119] syz_tun: entered allmulticast mode
[  982.844100][T29118] syz_tun: left allmulticast mode
[  982.952789][T29122] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8855'.
[  983.468137][ T1238] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  983.468176][ T1238] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  983.468203][ T1238] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  983.499611][ T1238] hid-generic 0000:0004:0000.0052: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  984.226288][T29165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8872'.
[  984.616194][T29171] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  984.616232][T29171] overlayfs: failed to set xattr on upper
[  984.616242][T29171] overlayfs: ...falling back to redirect_dir=nofollow.
[  984.616251][T29171] overlayfs: ...falling back to index=off.
[  984.616259][T29171] overlayfs: ...falling back to uuid=null.
[  984.616269][T29171] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  984.616289][T29171] overlayfs: maximum fs stacking depth exceeded
[  986.613315][T29232] input: syz1 as /devices/virtual/input/input78
[  987.397507][T29255] netlink: 'syz.7.8910': attribute type 1 has an invalid length.
[  987.580201][T29259] bond2: (slave gretap1): making interface the new active one
[  987.581504][T29259] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  987.735925][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8912'.
[  987.911154][T29265] vlan2: entered promiscuous mode
[  987.911180][T29265] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  988.422984][T29284] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  989.359432][T29301] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8927'.
[  989.386043][T17819] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  989.387829][T29301] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8927'.
[  989.388384][T17819] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  989.388979][T17819] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  989.389024][T17819] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  990.809472][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'.
[  990.810420][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'.
[  991.992612][T29380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8955'.
[  992.448374][T29389] netlink: 'syz.7.8959': attribute type 21 has an invalid length.
[  992.448397][T29389] netlink: 'syz.7.8959': attribute type 22 has an invalid length.
[  992.448411][T29389] netlink: 'syz.7.8959': attribute type 23 has an invalid length.
[  992.448425][T29389] netlink: 'syz.7.8959': attribute type 25 has an invalid length.
[  992.448438][T29389] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8959'.
[  992.831014][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  992.831119][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  995.218457][T29434] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  995.625621][T14249] 
[  995.625633][T14249] ============================================
[  995.625640][T14249] WARNING: possible recursive locking detected
[  995.625654][T14249] syzkaller #0 Not tainted
[  995.625665][T14249] --------------------------------------------
[  995.625672][T14249] kworker/u8:16/14249 is trying to acquire lock:
[  995.625684][T14249] ffff888024e19318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70
[  995.625739][T14249] 
[  995.625739][T14249] but task is already holding lock:
[  995.625746][T14249] ffff888038ada398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70
[  995.625787][T14249] 
[  995.625787][T14249] other info that might help us debug this:
[  995.625793][T14249]  Possible unsafe locking scenario:
[  995.625793][T14249] 
[  995.625798][T14249]        CPU0
[  995.625803][T14249]        ----
[  995.625807][T14249]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  995.625824][T14249]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  995.625841][T14249] 
[  995.625841][T14249]  *** DEADLOCK ***
[  995.625841][T14249] 
[  995.625846][T14249]  May be due to missing lock nesting notation
[  995.625846][T14249] 
[  995.625853][T14249] 14 locks held by kworker/u8:16/14249:
[  995.625864][T14249]  #0: ffff888061592138 ((wq_completion)bond2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  995.625915][T14249]  #1: ffffc9000dd77bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  995.625959][T14249]  #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf2/0x1840
[  995.626003][T14249]  #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  995.626048][T14249]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  995.626092][T14249]  #5: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  995.626136][T14249]  #6: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  995.626180][T14249]  #7: ffffffff8d9a8de0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70
[  995.626228][T14249]  #8: ffff888038ada398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70
[  995.626276][T14249]  #9: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0xfa/0x180
[  995.626319][T14249]  #10: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[  995.626360][T14249]  #11: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0
[  995.626403][T14249]  #12: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  995.626446][T14249]  #13: ffffffff8d9a8de0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70
[  995.626488][T14249] 
[  995.626488][T14249] stack backtrace:
[  995.626500][T14249] CPU: 0 UID: 0 PID: 14249 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  995.626522][T14249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  995.626535][T14249] Workqueue: bond2 bond_alb_monitor
[  995.626555][T14249] Call Trace:
[  995.626563][T14249]  <TASK>
[  995.626572][T14249]  dump_stack_lvl+0x189/0x250
[  995.626597][T14249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  995.626620][T14249]  ? __pfx__printk+0x10/0x10
[  995.626640][T14249]  ? print_lock_name+0xde/0x100
[  995.626659][T14249]  print_deadlock_bug+0x28b/0x2a0
[  995.626685][T14249]  validate_chain+0x1a3f/0x2140
[  995.626708][T14249]  ? __lock_acquire+0xab9/0xd20
[  995.626732][T14249]  ? look_up_lock_class+0x74/0x170
[  995.626756][T14249]  ? register_lock_class+0x51/0x320
[  995.626780][T14249]  __lock_acquire+0xab9/0xd20
[  995.626803][T14249]  ? __dev_queue_xmit+0xd58/0x3b70
[  995.626821][T14249]  lock_acquire+0x120/0x360
[  995.626841][T14249]  ? __dev_queue_xmit+0xd58/0x3b70
[  995.626861][T14249]  ? __lock_acquire+0xab9/0xd20
[  995.626885][T14249]  rt_spin_lock+0x88/0x2c0
[  995.626904][T14249]  ? __dev_queue_xmit+0xd58/0x3b70
[  995.626924][T14249]  ? __pfx_rt_spin_lock+0x10/0x10
[  995.626943][T14249]  ? ip_vs_service_find+0xd25/0xf00
[  995.626970][T14249]  __dev_queue_xmit+0xd58/0x3b70
[  995.626992][T14249]  ? __dev_queue_xmit+0x26f/0x3b70
[  995.627018][T14249]  ? __pfx___dev_queue_xmit+0x10/0x10
[  995.627035][T14249]  ? read_seqbegin+0x128/0x2e0
[  995.627056][T14249]  ? lockdep_hardirqs_on+0x9c/0x150
[  995.627080][T14249]  ? read_seqbegin+0x27c/0x2e0
[  995.627100][T14249]  ? __pfx_ip_vs_in_hook+0x10/0x10
[  995.627121][T14249]  ? __pfx_read_seqbegin+0x10/0x10
[  995.627154][T14249]  ip_finish_output2+0xd94/0x11d0
[  995.627175][T14249]  ? ip_finish_output2+0x452/0x11d0
[  995.627198][T14249]  ? __pfx_ip_finish_output2+0x10/0x10
[  995.627223][T14249]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  995.627241][T14249]  ? ip_skb_dst_mtu+0x866/0xab0
[  995.627260][T14249]  ? ip_finish_output+0x33a/0x3f0
[  995.627279][T14249]  ip_output+0x2a1/0x3c0
[  995.627296][T14249]  ? ip_output+0x60/0x3c0
[  995.627314][T14249]  iptunnel_xmit+0x592/0xa40
[  995.627343][T14249]  ip_tunnel_xmit+0x1c44/0x2390
[  995.627374][T14249]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  995.627392][T14249]  ? gre_build_header+0x31c/0xa40
[  995.627414][T14249]  ? __pfx_gre_build_header+0x10/0x10
[  995.627436][T14249]  gre_tap_xmit+0x590/0x7a0
[  995.627457][T14249]  ? __pfx_gre_tap_xmit+0x10/0x10
[  995.627478][T14249]  dev_hard_start_xmit+0x2f0/0x870
[  995.627498][T14249]  ? __lock_acquire+0xab9/0xd20
[  995.627523][T14249]  sch_direct_xmit+0x241/0x4b0
[  995.627547][T14249]  ? __pfx_sch_direct_xmit+0x10/0x10
[  995.627568][T14249]  ? rt_spin_trylock+0x162/0x180
[  995.627590][T14249]  __dev_queue_xmit+0x1826/0x3b70
[  995.627612][T14249]  ? __dev_queue_xmit+0x26f/0x3b70
[  995.627638][T14249]  ? __pfx___dev_queue_xmit+0x10/0x10
[  995.627655][T14249]  ? kmalloc_reserve+0xbd/0x290
[  995.627677][T14249]  ? rcu_is_watching+0x15/0xb0
[  995.627700][T14249]  ? kmalloc_reserve+0xbd/0x290
[  995.627721][T14249]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  995.627743][T14249]  ? kmem_cache_alloc_node_noprof+0x19c/0x330
[  995.627768][T14249]  ? __build_skb_around+0x257/0x3e0
[  995.627797][T14249]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  995.627820][T14249]  ? __update_load_avg_se+0x751/0xbc0
[  995.627840][T14249]  ? alb_send_lp_vid+0x139/0x510
[  995.627862][T14249]  alb_send_lp_vid+0x324/0x510
[  995.627884][T14249]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  995.627912][T14249]  alb_send_learning_packets+0x10d/0x2c0
[  995.627934][T14249]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  995.627959][T14249]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  995.627984][T14249]  bond_alb_monitor+0x3dc/0x1840
[  995.628005][T14249]  ? bond_alb_monitor+0xf2/0x1840
[  995.628025][T14249]  ? process_scheduled_works+0x9ef/0x17b0
[  995.628046][T14249]  ? __pfx_bond_alb_monitor+0x10/0x10
[  995.628067][T14249]  ? _raw_spin_unlock_irq+0x23/0x50
[  995.628090][T14249]  ? process_scheduled_works+0x9ef/0x17b0
[  995.628109][T14249]  ? process_scheduled_works+0x9ef/0x17b0
[  995.628130][T14249]  process_scheduled_works+0xade/0x17b0
[  995.628162][T14249]  ? __pfx_process_scheduled_works+0x10/0x10
[  995.628189][T14249]  worker_thread+0x8a0/0xda0
[  995.628216][T14249]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  995.628243][T14249]  ? __kthread_parkme+0x7b/0x200
[  995.628269][T14249]  kthread+0x70e/0x8a0
[  995.628293][T14249]  ? __pfx_worker_thread+0x10/0x10
[  995.628313][T14249]  ? __pfx_kthread+0x10/0x10
[  995.628338][T14249]  ? __pfx_kthread+0x10/0x10
[  995.628360][T14249]  ret_from_fork+0x436/0x7d0
[  995.628383][T14249]  ? __pfx_ret_from_fork+0x10/0x10
[  995.628406][T14249]  ? __switch_to_asm+0x39/0x70
[  995.628422][T14249]  ? __switch_to_asm+0x33/0x70
[  995.628438][T14249]  ? __pfx_kthread+0x10/0x10
[  995.628460][T14249]  ret_from_fork_asm+0x1a/0x30
[  995.628484][T14249]  </TASK>