last executing test programs:

7.725019155s ago: executing program 2 (id=720):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchown(r3, 0x0, 0x0)

6.735374739s ago: executing program 2 (id=724):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x27fdfefff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@private0, 0x0, 0x0, 0x4}]}, 0x38}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000023cd04c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0xb, 0x1f, {0x1f, 0xf, "81c3ff98c55211741caa611f438c9eebd194ba92d0266a3ce4865d8304"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000240)={0x0, 0xc, 0xb7, "87337a15dfebf50fa87bed06f283329f90452c89a4a046f5b8b2bcabd4fc270b1f6e6359d7aba0ec75101780db0db859d244d6d0130b69caa6aef0ed7beb420b3e71d18943634ee53026743da5e0cd30ef6d9c50d0bfb596749f39d1e3ec21db195a99458379965d07bdcba9901655511a6da20ddb0ac89fe40e1bb7629e2117da6a4adc4bc037667eaac8bdd010c5cc7a32537b4f64742b3749ca953900ced918089af4210dbda461b19f3ce0e2c60cbc3eb18e3e6104"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x4d, {0x4b, "31bacf2a43dd2e03b7b42e32df80223730c451e29d461511ff2377f76437022362f76f725b673aa1c2a880f7a0537862676e84e85a31c6c11ad1249aaf9a9472fda94c09de589c5e00ed63"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x1}})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000262c61756469742c61756469742c66756e633d4d4d41505f434845434b2c6f626a5e6d6dbd"])

6.018091262s ago: executing program 4 (id=725):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
gettid()
r4 = getpid()
tgkill(r4, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
open(0x0, 0x80000, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001fe0285d96333447c52eff9547a4583e590e56ac31c641d89fcd6e64a7b5e656ff3548545e05f23c39dea15a4a459b8e9324b0d4f931a322a4996befbdc7b817a35cea5350da24ddbe1519167623e25df9f0bf8803c21cd78f", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b403000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

5.655946604s ago: executing program 3 (id=728):
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x110, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0xfc, 0xc, "4be59262881df85a1d855a6d6ca5ec5f65986ae111f4e6ff2399734de1ef58b0e1b2f9b0d8d374b49281f2f878868b8b7436d5e138a26d54ec0fba9e51abb34170c915016c8579b1ebcef1ff14d0e92cc68d83e0153e1fb6d9c7080325114942ea5d5003fa3e1f45c7ad6b0022fb910357231b633a63343f6492ec7d64bc194de52704ec1777cecc45d2e6bca4fced94ba2fb602a1963ca5d781304d6b3f8f445a86960b45e510f729571d094222922cedf9a365c72905f3587aa2e41571b27129561e079e7583174e865d1857c40d588051bfef0c2646004d17e570f7b299a61ab746a6d49dd98ff9956367eb701bec51f42d7b8792aa68"}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '-&&\x89\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x4, 0x0, {0xa}}}, 0x1a0}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r2, 0x0, 0x14)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000500)={0x0, 0xd, 0x8084})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
syz_io_uring_setup(0x402b, &(0x7f0000000440)={0x0, 0x2e3f, 0x1000, 0x0, 0x8, 0x0, r4}, &(0x7f0000000380), &(0x7f00000004c0))
unshare(0x20400)
fstat(r4, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
ioperm(0x0, 0x6, 0x10000)
bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETOFFLOAD(r1, 0x40047459, 0x37c4eebb97359361)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r5, &(0x7f0000000f80)=[{{&(0x7f0000000080)={0xa, 0x1, 0x8, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000880)="ac77", 0x2}], 0x1}}], 0x1, 0xc0c0)
r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000402505a8a44000010203010902240001010160000904000301070101c102f70302030609058202080005081c"], &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0x40, 0xa0}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xcb, &(0x7f00000001c0)=@string={0xcb, 0x3, "5ae4515de28b7334a61816b84bf39cfb4d525e76183340747d3c386ecfd5ab5c69565472144d625626f5ae076645b93af819e6271425645f148fc1cca1d1ddaaaea31980d9159bba7784b91780b09dce5380e4046c1dd98a387538b60df30bb37e55c97b07b485e5bf9790a34757dce17526cb0dd4d85b21ccaabda16119b6a21d8c831e0ef72571990bff14696ae9638644660f31f5d54f9aeeb1c32d4202bcf3b216f3144682d4114a2b3996c02166523182fec15eadb2c5cf78f52263ef468bdda5aba7ad7aa3b0"}}, {0xa1, &(0x7f00000002c0)=@string={0xa1, 0x3, "fd138faacceb2c672de9e361674c036a2318e9f12fff0910840ffc72475eac7a993173b0373a8fad4ff02a279be463abea98acd25209ef4c27fd782357335d69050dce1e86d561d1d1bad5fd04efe45f5dba4fa95e99fc6c0751516a23387cd732b7c862ec1550f1a0e7d15039cc133250be7ccfbd0a4c48295fb2bda2d20209ded0fb76d0d17662c07ee7289baca29b8e90a572430595cceecfef17051c9f"}}]})
syz_usb_disconnect(r6)

5.108273448s ago: executing program 4 (id=729):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
close_range(r0, 0xffffffffffffffff, 0x0)

4.895135493s ago: executing program 4 (id=732):
socket(0x40000000015, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
membarrier(0x10, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

4.665003409s ago: executing program 4 (id=733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r6, &(0x7f0000000280)=""/4096, 0x1000, 0x0)
io_setup(0x5, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r7, 0x0, 0x0)
pread64(r1, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1)
r8 = fanotify_init(0x0, 0x400)
readv(r8, &(0x7f00000001c0), 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x32)

4.253902777s ago: executing program 4 (id=735):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2f, 0xce, 0x2d, 0x8, 0xbc7, 0x8, 0xed34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfc, 0x0, 0x0, 0x96, 0x1e, 0x6a, 0xfc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4.081019357s ago: executing program 1 (id=736):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x8}, 0x1c)
socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x0, "601ef77d68664c53a906ed020ec56df9583a5cec7e491e45d7ffca41ec051de6"}})
sendto$inet6(r0, &(0x7f00000003c0)='A', 0x1, 0x20040005, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x20020084, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

3.691348512s ago: executing program 0 (id=737):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
dup(0xffffffffffffffff)
creat(0x0, 0x20)
r0 = open(&(0x7f0000000300)='./bus\x00', 0x143043, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ftruncate(r0, 0x2008002)

3.521208542s ago: executing program 0 (id=738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000002060500000000180000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000e0ffff070006400000000005000500020000000500010006"], 0x6c}}, 0x0)

3.482627856s ago: executing program 2 (id=739):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4095}, 0x40)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x6, 0xf62, 0x9, 0x4, 0x0, 0x8, 0x7, 0x637e5110, 0x7fffffff, 0x9, 0x1, 0x8000000000000000, 0x81, 0x9, 0x9], 0x4000, 0x240})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.425633453s ago: executing program 0 (id=740):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x200000100000011, 0xa, 0x0)
bind$packet(r2, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r4})
socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000080)=0x9)
write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getsockname$packet(r7, 0x0, &(0x7f0000001480))

3.294864738s ago: executing program 0 (id=741):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
gettid()
r4 = getpid()
tgkill(r4, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
open(0x0, 0x80000, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001fe0285d96333447c52eff9547a4583e590e56ac31c641d89fcd6e64a7b5e656ff3548545e05f23c39dea15a4a459b8e9324b0d4f931a322a4996befbdc7b817a35cea5350da24ddbe1519167623e25df9f0bf8803c21cd78f", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b403000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.519459588s ago: executing program 2 (id=742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0xf000, 0xed9d, 0x3, 0x6, 0x0, [{0x10, 0xd, 0x3, '\x00', 0x6}, {0x61, 0x1, 0x40, '\x00', 0x4c}, {0x3, 0x5, 0x40, '\x00', 0x4}, {0x22, 0x4, 0x9, '\x00', 0x4}, {0x4, 0xfe, 0x51, '\x00', 0x1}, {0x1, 0x81, 0x7b, '\x00', 0xf8}, {0x8, 0x9, 0x7, '\x00', 0x9}, {0x6, 0xdd, 0x8, '\x00', 0x7}, {0xff, 0x10, 0x0, '\x00', 0x8}, {0x5, 0x4, 0x7, '\x00', 0xa9}, {0x3, 0xbd, 0x81}, {0xb3, 0x0, 0x4, '\x00', 0x9}, {0x5, 0x6, 0x0, '\x00', 0x81}, {0x4, 0xe2, 0x0, '\x00', 0x9}, {0x6, 0xff, 0xa, '\x00', 0x4e}, {0x0, 0x1, 0x8e, '\x00', 0x7}, {0x3, 0xb, 0x5, '\x00', 0x9}, {0x6, 0xa8, 0x8, '\x00', 0x2}, {0x6, 0x9, 0xc, '\x00', 0x5}, {0xe, 0x1, 0x56, '\x00', 0x81}, {0x8, 0x97, 0x5, '\x00', 0x1}, {0x80, 0x6, 0x5, '\x00', 0x71}, {0x46, 0x6, 0xe8, '\x00', 0x81}, {0x53, 0x0, 0xc}]}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x170001, 0x0, [0x5, 0xa, 0x2, 0x10, 0x100, 0x6, 0x2, 0x3]})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x208400, 0x0)
getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000080)=0x5, &(0x7f0000000140)=0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)

2.511127209s ago: executing program 1 (id=743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.426940409s ago: executing program 1 (id=744):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
syz_open_dev$dmmidi(0x0, 0x200, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000021c0)='\x00', 0x0)
futex(&(0x7f0000004000), 0x100, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004280)=@filter={'filter\x00', 0x42, 0x4, 0x1348, 0xffffffff, 0x11a8, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x12b0, 0x12b0, 0x12b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'syzkaller0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13a8)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f0000004380)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e20, @local}})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="c99b57381801238c09d0ff0fcaa7a68cc36e2a717b1ae4db3dcd2a04370554375a", 0x21)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)

2.404735742s ago: executing program 0 (id=745):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendto(r3, &(0x7f0000000500)="dfe2", 0x2, 0x4000085, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

2.261121518s ago: executing program 0 (id=746):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

1.98215968s ago: executing program 3 (id=747):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="03", 0x1, 0x10000040, &(0x7f0000000100)={0xa, 0x4ea3, 0x0, @loopback={0xa3540200}}, 0x1c)

1.909336679s ago: executing program 3 (id=748):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x00\x00\x00\x00\xe48\xa24\xa9am\xde\xb2\xd3KZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1\x8e\x17sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xb8\x9eo\xebF(\x9dL\x01vRk\xaac$\xfb\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x165\x8b\x00'/270, 0x1)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="8af13582e13885f8b8473718d6beaa4a55941d1290769d3c5ed59c86d6351ea860c2ac2937f5421c4a8f433a179a03c6bafb021f777128f1634f1c4beff550579c07c20bf5e3ce3b4a9352b2575ad80a2f638beed914a790d051929e10312e2f473e0dd51d1617ee4dad820d97a619799af256fcc5a116707c37219e3febd8feb5c6c91167aec9637ac40ca513aa6102a96ef0fcacb8c768e2017101dc88f9e567fed4d7b6096a6e9d51d4011726c3317706e90187a39356c42381ff80db86419413c4c45516e1c1d5b6a81fc9a8c2201dfbba7a441f62799be0bbbb8b9f8d", 0xdf}], 0x1, 0x6d71a7ce, 0x400, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0)
bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
chdir(&(0x7f0000001180)='./bus\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)

1.839170857s ago: executing program 3 (id=749):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000026c0), 0x4c, 0xff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, 0x0, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00')
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000180)=""/105, 0x69)

1.645079709s ago: executing program 4 (id=750):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x27fdfefff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@private0, 0x0, 0x0, 0x4}]}, 0x38}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000023cd04c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0xb, 0x1f, {0x1f, 0xf, "81c3ff98c55211741caa611f438c9eebd194ba92d0266a3ce4865d8304"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000240)={0x0, 0xc, 0xb7, "87337a15dfebf50fa87bed06f283329f90452c89a4a046f5b8b2bcabd4fc270b1f6e6359d7aba0ec75101780db0db859d244d6d0130b69caa6aef0ed7beb420b3e71d18943634ee53026743da5e0cd30ef6d9c50d0bfb596749f39d1e3ec21db195a99458379965d07bdcba9901655511a6da20ddb0ac89fe40e1bb7629e2117da6a4adc4bc037667eaac8bdd010c5cc7a32537b4f64742b3749ca953900ced918089af4210dbda461b19f3ce0e2c60cbc3eb18e3e6104"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x4d, {0x4b, "31bacf2a43dd2e03b7b42e32df80223730c451e29d461511ff2377f76437022362f76f725b673aa1c2a880f7a0537862676e84e85a31c6c11ad1249aaf9a9472fda94c09de589c5e00ed63"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x1}})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000262c61756469742c61756469742c66756e633d4d4d41505f434845434b2c6f626a5e6d6dbd"])

1.001601034s ago: executing program 2 (id=751):
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

927.146873ms ago: executing program 3 (id=752):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x8}, 0x1c)
socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x0, "601ef77d68664c53a906ed020ec56df9583a5cec7e491e45d7ffca41ec051de6"}})
sendto$inet6(r0, &(0x7f00000003c0)='A', 0x1, 0x20040005, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x20020084, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

486.160774ms ago: executing program 1 (id=753):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4095}, 0x40)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x6, 0xf62, 0x9, 0x4, 0x0, 0x8, 0x7, 0x637e5110, 0x7fffffff, 0x9, 0x1, 0x8000000000000000, 0x81, 0x9, 0x9], 0x4000, 0x240})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

423.237531ms ago: executing program 2 (id=754):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed}, 0x8)

136.573384ms ago: executing program 1 (id=755):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioperm(0x0, 0x4, 0x2)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x1c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0)

7.923959ms ago: executing program 3 (id=756):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
gettid()
r4 = getpid()
tgkill(r4, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
open(0x0, 0x80000, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001fe0285d96333447c52eff9547a4583e590e56ac31c641d89fcd6e64a7b5e656ff3548545e05f23c39dea15a4a459b8e9324b0d4f931a322a4996befbdc7b817a35cea5350da24ddbe1519167623e25df9f0bf8803c21cd78f", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b403000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

0s ago: executing program 1 (id=757):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000180)=0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x1f8, 0x1170, 0x1170, 0x1f8, 0x1170, 0x338, 0x1398, 0x1398, 0x338, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x1d0, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x5, 0x20, 0x0, 'syz0\x00', 0x3}}, @common=@srh={{0x30}, {0x73, 0x0, 0x7, 0x8, 0xfffd, 0x2080, 0x100}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)

kernel console output (not intermixed with test programs):

Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.337069][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.372256][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.379214][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.405208][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.452678][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.459644][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.485875][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.500623][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.507577][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.533508][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.617959][ T4166] device hsr_slave_0 entered promiscuous mode
[   52.624825][ T4166] device hsr_slave_1 entered promiscuous mode
[   52.632675][ T2377] Bluetooth: hci4: command 0x0409 tx timeout
[   52.638968][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.639338][ T2377] Bluetooth: hci3: command 0x0409 tx timeout
[   52.647322][ T4166] Cannot create hsr debugfs directory
[   52.652882][ T2377] Bluetooth: hci1: command 0x0409 tx timeout
[   52.653064][ T2377] Bluetooth: hci0: command 0x0409 tx timeout
[   52.698591][ T4170] device hsr_slave_0 entered promiscuous mode
[   52.704889][ T2377] Bluetooth: hci2: command 0x0409 tx timeout
[   52.711724][ T4170] device hsr_slave_1 entered promiscuous mode
[   52.718228][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.725973][ T4170] Cannot create hsr debugfs directory
[   52.881236][ T4176] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   52.892658][ T4176] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   52.903717][ T4176] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   52.916157][ T4176] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   52.955350][ T4164] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.976252][ T4164] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.989308][ T4164] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.998133][ T4164] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.059515][ T4165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.076813][ T4165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.086619][ T4165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.115142][ T4165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.141606][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.161524][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.175555][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.192655][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.202520][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.238011][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.247557][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.268173][ T4176] 8021q: adding VLAN 0 to HW filter on device team0
[   53.291681][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.309169][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   53.319330][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   53.329060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.337659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.349545][ T4164] 8021q: adding VLAN 0 to HW filter on device team0
[   53.361700][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   53.372601][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   53.392801][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.402320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.411898][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.419095][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.427740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.462359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.472434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.481566][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.488788][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.497015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.506784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.515362][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.522449][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.530089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.538664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.547495][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.554603][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.563647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.599507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.608366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.618590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.628444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.642890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.652529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.666956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.685277][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.695906][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.704384][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.714161][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.732018][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.756631][ T4164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.767491][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.786769][ T4176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.798363][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.811446][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.821875][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.830475][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.838735][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.847609][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.857296][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.865647][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.874365][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.883029][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.892308][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.900795][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.908974][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.917580][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.952145][ T4165] 8021q: adding VLAN 0 to HW filter on device team0
[   53.959627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.974574][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.996918][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.016997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.027615][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.037327][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.044422][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.053927][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.062702][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.071899][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.078941][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.086873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.108092][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.125525][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.150671][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.189051][ T4170] 8021q: adding VLAN 0 to HW filter on device team0
[   54.199359][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   54.212558][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.223612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.232241][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.242872][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.251689][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.261477][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.270355][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.278621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.287381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.295162][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.303793][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.312536][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.321047][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.328069][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.335864][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.343894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.355526][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.365005][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.394581][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.407408][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.416809][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.425891][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.435125][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.442205][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.449982][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.458483][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.467208][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.474290][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.483433][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.492111][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.499531][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.507042][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.515902][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.525010][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.534654][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.541738][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.556662][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.584817][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.597071][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.612390][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.627083][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.636272][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.645396][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.654373][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.663554][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.672283][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.681607][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.691102][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.707708][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.715837][ T4214] Bluetooth: hci0: command 0x041b tx timeout
[   54.722002][ T4214] Bluetooth: hci1: command 0x041b tx timeout
[   54.722193][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.728049][ T4214] Bluetooth: hci3: command 0x041b tx timeout
[   54.742355][ T4214] Bluetooth: hci4: command 0x041b tx timeout
[   54.749296][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.760346][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.790427][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.798791][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.807454][ T4209] Bluetooth: hci2: command 0x041b tx timeout
[   54.816937][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.826079][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.834991][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.843974][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.854532][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.863379][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.872105][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.881257][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.889399][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.898128][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.906771][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.925308][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.937208][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.965299][ T4164] device veth0_vlan entered promiscuous mode
[   54.973892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.985176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.994055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.002304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.010056][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.018279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.027720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.035813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.053306][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.067151][ T4164] device veth1_vlan entered promiscuous mode
[   55.082035][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.094004][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.124255][ T4176] device veth0_vlan entered promiscuous mode
[   55.141231][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.155692][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.200949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.210472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.219440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.228567][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.238255][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.246045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.267080][ T4176] device veth1_vlan entered promiscuous mode
[   55.282213][ T4165] device veth0_vlan entered promiscuous mode
[   55.293508][ T4164] device veth0_macvtap entered promiscuous mode
[   55.308165][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.316586][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.325516][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.334205][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.347538][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.355518][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.373642][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.383155][ T4164] device veth1_macvtap entered promiscuous mode
[   55.392837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.402135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.413308][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.422148][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.431934][ T4165] device veth1_vlan entered promiscuous mode
[   55.447673][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.469518][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.494135][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.506709][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.515072][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   55.525136][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.539326][ T4176] device veth0_macvtap entered promiscuous mode
[   55.552866][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.565251][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.574656][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.584961][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.594365][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.604049][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.623396][ T4176] device veth1_macvtap entered promiscuous mode
[   55.643017][ T4164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.652726][ T4164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.661761][ T4164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.670656][ T4164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.684688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.692925][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.702351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.711277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.720189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.728720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.737723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.751448][ T4165] device veth0_macvtap entered promiscuous mode
[   55.772991][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.784077][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.795346][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.823731][ T4166] device veth0_vlan entered promiscuous mode
[   55.830827][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.838855][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   55.851609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.860651][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.868795][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.880055][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.890738][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.902462][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.915528][ T4165] device veth1_macvtap entered promiscuous mode
[   55.928009][ T4166] device veth1_vlan entered promiscuous mode
[   55.934972][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.944249][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.952351][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.960925][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.968849][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.977978][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.014413][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.025193][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.037582][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.048155][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.059158][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.070905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.079169][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.088407][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.097244][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.111617][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.121035][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.130021][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.138706][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.160660][ T4170] device veth0_vlan entered promiscuous mode
[   56.167493][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.178154][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.188283][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.199171][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.211149][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.233042][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.241288][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.248933][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.258074][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.267187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.275936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.303677][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.311672][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.313358][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.329443][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.329907][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.338902][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.357048][ T4166] device veth0_macvtap entered promiscuous mode
[   56.389041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.398705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.418455][ T4170] device veth1_vlan entered promiscuous mode
[   56.447168][ T4166] device veth1_macvtap entered promiscuous mode
[   56.486906][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.495839][ T4170] device veth0_macvtap entered promiscuous mode
[   56.507125][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.533688][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.547327][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.559239][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.567278][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   56.575189][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.585906][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.594995][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.624251][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.632616][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.640800][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.649293][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.671123][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.672296][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.681328][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.706175][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.717106][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.727861][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.740152][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.748215][ T4170] device veth1_macvtap entered promiscuous mode
[   56.758523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.766899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.775243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.783214][ T4245] Bluetooth: hci4: command 0x040f tx timeout
[   56.787574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.789447][ T4245] Bluetooth: hci3: command 0x040f tx timeout
[   56.798459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.804254][ T4245] Bluetooth: hci1: command 0x040f tx timeout
[   56.817956][ T4245] Bluetooth: hci0: command 0x040f tx timeout
[   56.848385][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.861294][ T4214] Bluetooth: hci2: command 0x040f tx timeout
[   56.868737][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.895272][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.907023][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.917521][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.930626][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.942101][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.958949][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.972034][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.987792][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.998770][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.015229][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.027393][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.037711][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.048457][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.064479][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.078048][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.092677][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.106552][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.119464][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.141208][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.153663][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.168891][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.176642][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.185791][ T4250] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   57.194946][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.213243][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.223123][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.238893][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.249334][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.267496][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.282313][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.314553][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.324752][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.335001][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.345440][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.356192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.368401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.380662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.392725][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.407776][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.416996][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.434693][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.452545][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.471782][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.520675][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.637262][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.657570][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.716960][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.735147][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.762068][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.826618][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.851177][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.879946][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.959628][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.984795][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.990181][ T4255] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   58.003687][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.022263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.120174][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.400209][ T4255] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[   58.408614][ T4255] usb 3-1: config 0 has no interface number 0
[   58.427762][ T4255] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   58.450262][ T4211] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   58.485102][ T4281] ODEBUG: Out of memory. ODEBUG disabled
[   58.559853][ T1105] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   58.640286][ T4255] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28
[   58.649866][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.650014][   T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   58.657974][ T4255] usb 3-1: Product: syz
[   58.657995][ T4255] usb 3-1: Manufacturer: syz
[   58.658008][ T4255] usb 3-1: SerialNumber: syz
[   58.663343][ T4255] usb 3-1: config 0 descriptor??
[   58.694603][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.703877][   T23] usb 1-1: Product: syz
[   58.708051][   T23] usb 1-1: Manufacturer: syz
[   58.713572][   T23] usb 1-1: SerialNumber: syz
[   58.727785][   T23] usb 1-1: config 0 descriptor??
[   58.799909][ T1105] usb 2-1: Using ep0 maxpacket: 8
[   58.810559][ T4211] usb 5-1: unable to get BOS descriptor or descriptor too short
[   58.860536][ T4212] Bluetooth: hci0: command 0x0419 tx timeout
[   58.868011][ T4212] Bluetooth: hci1: command 0x0419 tx timeout
[   58.874286][ T4212] Bluetooth: hci3: command 0x0419 tx timeout
[   58.876266][ T4279] device vlan2 entered promiscuous mode
[   58.880531][ T4212] Bluetooth: hci4: command 0x0419 tx timeout
[   58.889763][ T4211] usb 5-1: unable to read config index 0 descriptor/start: -71
[   58.895145][ T4279] device nlmon0 entered promiscuous mode
[   58.906014][ T4211] usb 5-1: can't read configurations, error -71
[   58.909413][ T4279] bond0: (slave vlan2): Enslaving as an active interface with an up link
[   58.950729][ T4255] usb 3-1: Found UVC 0.00 device syz (05ac:8600)
[   58.957739][ T4255] usb 3-1: No valid video chain found.
[   58.979392][ T4255] Bluetooth: hci2: command 0x0419 tx timeout
[   58.980104][ T1105] usb 2-1: unable to get BOS descriptor or descriptor too short
[   58.993698][ T1105] usb 2-1: no configurations
[   58.998290][ T1105] usb 2-1: can't read configurations, error -22
[   59.149935][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   59.189466][   T21] usb 3-1: USB disconnect, device number 2
[   59.399787][ T4255] usb 4-1: Using ep0 maxpacket: 32
[   59.409903][   T23] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71
[   59.417922][   T23] usb 1-1: Firmware version (0.0) predates our first public release.
[   59.427893][   T23] usb 1-1: Please update to version 0.2 or newer
[   59.449928][   T23] usb 1-1: atusb_probe: initialization failed, error = -71
[   59.477743][   T23] atusb: probe of 1-1:0.0 failed with error -71
[   59.505775][   T23] usb 1-1: USB disconnect, device number 2
[   59.585345][ T4255] usb 4-1: unable to get BOS descriptor or descriptor too short
[   59.691633][ T4310] Zero length message leads to an empty skb
[   59.705722][ T4255] usb 4-1: config 125 has an invalid interface number: 7 but max is 0
[   59.727631][ T4255] usb 4-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config
[   59.764773][ T4255] usb 4-1: config 125 has no interface number 0
[   59.784994][ T4255] usb 4-1: config 125 interface 7 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   59.805047][ T4255] usb 4-1: config 125 interface 7 has no altsetting 0
[   60.014137][ T4255] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70
[   60.028281][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.047975][ T4255] usb 4-1: Product: syz
[   60.057799][ T4255] usb 4-1: Manufacturer: syz
[   60.069576][ T4255] usb 4-1: SerialNumber: syz
[   60.098136][ T4330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'.
[   60.174364][ T4335] mmap: syz.0.36 (4335) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   60.449837][ T1105] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   60.450606][ T4255] hub 4-1:125.7: bad descriptor, ignoring hub
[   60.464204][ T4255] hub: probe of 4-1:125.7 failed with error -5
[   60.471134][ T4255] usb 4-1: Expected 3 endpoints, found: 0
[   60.501536][ T4255] usb 4-1: USB disconnect, device number 2
[   60.599847][   T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   60.649829][ T1105] usb 5-1: device descriptor read/64, error -71
[   60.860022][   T13] usb 1-1: Using ep0 maxpacket: 16
[   60.919969][ T1105] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   60.989920][ T4211] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   61.100981][   T13] usb 1-1: config index 0 descriptor too short (expected 24929, got 18)
[   61.109541][   T13] usb 1-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[   61.188811][   T13] usb 1-1: config 97 descriptor has 1 excess byte, ignoring
[   61.322771][   T13] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[   61.630641][   T13] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   61.660594][ T1105] usb 5-1: device descriptor read/64, error -71
[   61.668789][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.700987][   T13] usb 1-1: Product: syz
[   61.705265][   T13] usb 1-1: Manufacturer: syz
[   61.711561][   T13] usb 1-1: SerialNumber: syz
[   61.781418][ T1105] usb usb5-port1: attempt power cycle
[   61.816011][ T4211] usb 2-1: Using ep0 maxpacket: 32
[   61.939912][ T4211] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   61.949115][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.959437][ T4211] usb 2-1: config 0 descriptor??
[   62.002625][ T4211] gspca_main: nw80x-2.14.0 probing 055f:d001
[   62.019926][   T13] r8152-cfgselector 1-1: Unknown version 0x0000
[   62.028501][   T13] r8152-cfgselector 1-1: USB disconnect, device number 3
[   62.099836][ T4210] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   62.189847][ T1105] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   62.279906][ T1105] usb 5-1: device descriptor read/8, error -71
[   62.520502][ T4210] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   62.529629][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.549626][ T4210] usb 3-1: config 0 descriptor??
[   62.549797][ T1105] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   62.659984][ T1105] usb 5-1: device descriptor read/8, error -71
[   62.780094][ T1105] usb usb5-port1: unable to enumerate USB device
[   62.909925][ T4268] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   62.915764][ T4390] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   62.915764][ T4390] The task syz.3.58 (4390) triggered the difference, watch for misbehavior.
[   62.934940][    C0] vkms_vblank_simulate: vblank timer overrun
[   63.269846][ T4268] usb 1-1: unable to get BOS descriptor or descriptor too short
[   63.329781][ T4268] usb 1-1: unable to read config index 0 descriptor/start: -71
[   63.337441][ T4268] usb 1-1: can't read configurations, error -71
[   63.540444][ T4255] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   63.763149][ T4211] gspca_nw80x: reg_w err -71
[   63.768190][ T4211] nw80x: probe of 2-1:0.0 failed with error -71
[   63.782911][ T4211] usb 2-1: USB disconnect, device number 4
[   63.910347][ T4255] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[   63.926457][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.943285][ T4255] usb 5-1: config 0 descriptor??
[   63.985170][ T4255] pwc: Samsung MPC-C10 USB webcam detected.
[   64.195131][ T4255] pwc: send_video_command error -71
[   64.200567][ T4255] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   64.208258][ T4255] Philips webcam: probe of 5-1:0.0 failed with error -71
[   64.228885][ T4255] usb 5-1: USB disconnect, device number 8
[   64.229776][ T4268] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   64.380089][ T4210] pegasus 3-1:0.0: setup Pegasus II specific registers
[   64.490896][ T4268] usb 1-1: Using ep0 maxpacket: 8
[   64.570175][ T4398] device vlan2 entered promiscuous mode
[   64.577539][ T4398] device nlmon0 entered promiscuous mode
[   64.585370][ T4398] bond0: (slave vlan2): Enslaving as an active interface with an up link
[   64.650028][ T4268] usb 1-1: unable to get BOS descriptor or descriptor too short
[   64.657853][ T4268] usb 1-1: no configurations
[   64.663391][ T4268] usb 1-1: can't read configurations, error -22
[   64.671297][ T4268] usb usb1-port1: attempt power cycle
[   64.729893][ T4210] pegasus 3-1:0.0: can't locate MII phy, using default
[   64.760119][ T4210] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, d6:8f:7d:b1:77:ea
[   64.772761][ T4210] usb 3-1: USB disconnect, device number 3
[   64.799823][ T4255] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   64.959973][ T1344] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   65.207374][ T4255] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[   65.222312][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.244273][ T1344] usb 4-1: Using ep0 maxpacket: 8
[   65.257495][ T4255] usb 5-1: config 0 descriptor??
[   65.302058][ T4255] pwc: Samsung MPC-C10 USB webcam detected.
[   65.360126][ T1344] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   65.373729][ T1344] usb 4-1: config 179 has no interface number 0
[   65.381714][ T1344] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   65.397239][ T1344] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   65.424061][ T1344] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   65.435480][ T1344] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   65.447229][ T1344] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   65.461400][ T1344] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   65.470746][ T1344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.510015][ T4420] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   65.739580][ T4420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   65.745160][ T4255] pwc: recv_control_msg error -32 req 02 val 2b00
[   65.746282][ T4420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.763284][ T4420] vhci_hcd vhci_hcd.0: Device attached
[   65.800127][ T4255] pwc: recv_control_msg error -32 req 02 val 2700
[   65.855929][ T4466] vhci_hcd: connection closed
[   65.858445][  T154] vhci_hcd: stop threads
[   65.884607][ T1344] usb 4-1: USB disconnect, device number 3
[   65.909779][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   65.918367][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   65.955348][  T154] vhci_hcd: release socket
[   66.130455][  T154] vhci_hcd: disconnect device
[   66.220227][ T4255] pwc: recv_control_msg error -32 req 02 val 2c00
[   66.289799][ T4255] pwc: recv_control_msg error -71 req 04 val 1000
[   66.360215][ T4255] pwc: recv_control_msg error -71 req 04 val 1300
[   66.461014][ T4255] pwc: recv_control_msg error -71 req 04 val 1400
[   66.510445][ T4255] pwc: recv_control_msg error -71 req 02 val 2000
[   66.680143][ T4255] pwc: recv_control_msg error -71 req 02 val 2100
[   66.699900][ T4255] pwc: recv_control_msg error -71 req 02 val 2200
[   66.729818][ T4255] pwc: recv_control_msg error -71 req 06 val 0600
[   66.749848][ T4255] pwc: recv_control_msg error -71 req 04 val 1500
[   66.831988][ T4255] pwc: recv_control_msg error -71 req 02 val 2500
[   66.880411][ T4255] pwc: recv_control_msg error -71 req 02 val 2400
[   67.021101][ T4255] pwc: recv_control_msg error -71 req 02 val 2600
[   67.160109][ T4255] pwc: recv_control_msg error -71 req 02 val 2900
[   67.374023][ T4255] pwc: recv_control_msg error -71 req 02 val 2800
[   67.440310][ T4255] pwc: recv_control_msg error -71 req 04 val 1100
[   67.495523][ T4255] pwc: recv_control_msg error -71 req 04 val 1200
[   67.556930][ T4255] pwc: Registered as video103.
[   67.609885][ T1344] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   67.626098][ T4255] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[   67.705946][ T4255] usb 5-1: USB disconnect, device number 9
[   67.894215][ T1344] usb 1-1: Using ep0 maxpacket: 16
[   67.980568][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[   68.039857][ T1344] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   68.051698][ T1344] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[   68.065355][ T1344] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   68.094840][ T4518] bond1 (unregistering): Released all slaves
[   68.140678][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'.
[   68.169916][ T4255] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   68.960002][ T1344] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   68.969069][ T1344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.989763][ T1344] usb 1-1: Product: syz
[   68.993951][ T1344] usb 1-1: Manufacturer: syz
[   68.998541][ T1344] usb 1-1: SerialNumber: syz
[   69.021584][ T1344] usb 1-1: config 0 descriptor??
[   69.040976][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   69.061049][ T1344] appledisplay 1-1:0.0: Could not find int-in endpoint
[   69.068785][ T1344] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   69.101037][ T2377] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   69.169835][ T4255] usb 5-1: Using ep0 maxpacket: 32
[   69.266713][ T4268] usb 1-1: USB disconnect, device number 7
[   69.490024][ T4255] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   69.499376][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.513895][ T4255] usb 5-1: Product: syz
[   69.518175][ T4255] usb 5-1: Manufacturer: syz
[   69.524561][ T2377] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[   69.538712][ T4255] usb 5-1: SerialNumber: syz
[   69.543615][ T2377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.567627][ T4255] usb 5-1: config 0 descriptor??
[   69.575354][ T2377] usb 3-1: config 0 descriptor??
[   69.626172][ T4255] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   69.633021][ T2377] pwc: Samsung MPC-C10 USB webcam detected.
[   69.830039][ T2377] pwc: send_video_command error -71
[   69.836795][ T2377] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   69.855634][ T2377] Philips webcam: probe of 3-1:0.0 failed with error -71
[   69.874397][ T2377] usb 3-1: USB disconnect, device number 4
[   70.803793][ T4562] vivid-001: =================  START STATUS  =================
[   70.812389][ T4562] vivid-001: Radio HW Seek Mode: Bounded
[   70.818192][ T4562] vivid-001: Radio Programmable HW Seek: false
[   70.824590][ T4562] vivid-001: RDS Rx I/O Mode: Block I/O
[   70.830208][ T4562] vivid-001: Generate RBDS Instead of RDS: false
[   70.836564][ T4562] vivid-001: RDS Reception: true
[   70.843045][ T4562] vivid-001: RDS Program Type: 0 inactive
[   70.848804][ T4562] vivid-001: RDS PS Name:  inactive
[   70.855218][ T4562] vivid-001: RDS Radio Text:  inactive
[   70.864655][ T4562] vivid-001: RDS Traffic Announcement: false inactive
[   70.874035][ T4562] vivid-001: RDS Traffic Program: false inactive
[   70.880720][ T4562] vivid-001: RDS Music: false inactive
[   70.886239][ T4562] vivid-001: ==================  END STATUS  ==================
[   71.035471][ T1105] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   71.140241][ T2377] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   71.156828][ T4584] input: syz1 as /devices/virtual/input/input6
[   71.263430][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.270129][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.400257][ T1105] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping
[   71.579938][ T1105] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   71.595402][ T1105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.616656][ T1105] usb 4-1: Product: syz
[   71.621540][ T1105] usb 4-1: Manufacturer: syz
[   71.630341][ T1105] usb 4-1: SerialNumber: syz
[   71.637727][ T1105] usb 4-1: config 0 descriptor??
[   71.639875][ T2377] usb 3-1: device descriptor read/all, error -71
[   71.680051][ T4554] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   71.701886][ T1105] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[   71.915014][ T4214] usb 4-1: USB disconnect, device number 4
[   72.535090][ T4602] netlink: 'syz.0.125': attribute type 4 has an invalid length.
[   72.556159][ T4600] vivid-002: =================  START STATUS  =================
[   72.584954][ T4600] vivid-002: Radio HW Seek Mode: Bounded
[   72.591240][ T4603] netlink: 'syz.0.125': attribute type 4 has an invalid length.
[   72.615417][ T4600] vivid-002: Radio Programmable HW Seek: false
[   72.633730][ T4603] syz.0.125 (4603) used greatest stack depth: 18968 bytes left
[   72.642058][ T4600] vivid-002: RDS Rx I/O Mode: Block I/O
[   72.647642][ T4600] vivid-002: Generate RBDS Instead of RDS: false
[   72.704816][ T4255] gspca_stk1135: reg_w 0x350 err -71
[   72.711984][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.718421][ T4600] vivid-002: RDS Reception: true
[   72.738553][ T4255] gspca_stk1135: Sensor write failed
[   72.744360][ T4600] vivid-002: RDS Program Type: 0 inactive
[   72.759725][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.769238][ T4600] vivid-002: RDS PS Name:  inactive
[   72.779796][ T4255] gspca_stk1135: Sensor write failed
[   72.785113][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.799768][ T4600] vivid-002: RDS Radio Text:  inactive
[   72.815533][ T4600] vivid-002: RDS Traffic Announcement: false inactive
[   72.823735][ T4255] gspca_stk1135: Sensor read failed
[   72.848222][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.854995][ T4600] vivid-002: RDS Traffic Program: false inactive
[   72.869712][ T4255] gspca_stk1135: Sensor read failed
[   72.880257][ T4600] vivid-002: RDS Music: false inactive
[   72.890489][ T4255] gspca_stk1135: Detected sensor type unknown (0x0)
[   72.897129][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.911707][ T4600] vivid-002: ==================  END STATUS  ==================
[   72.940276][ T4255] gspca_stk1135: Sensor read failed
[   72.971394][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   72.977758][ T4255] gspca_stk1135: Sensor read failed
[   73.015521][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   73.038814][ T4255] gspca_stk1135: Sensor write failed
[   73.059482][ T4255] gspca_stk1135: serial bus timeout: status=0x00
[   73.076390][ T4255] gspca_stk1135: Sensor write failed
[   73.086498][ T4255] stk1135: probe of 5-1:0.0 failed with error -71
[   73.106114][ T4255] usb 5-1: USB disconnect, device number 10
[   73.399774][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   73.553149][ T4635] kvm: emulating exchange as write
[   73.669960][   T13] usb 4-1: Using ep0 maxpacket: 8
[   73.744881][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[   73.757968][ T4619] device vlan2 entered promiscuous mode
[   73.989971][   T13] usb 4-1: unable to get BOS descriptor or descriptor too short
[   74.009794][   T13] usb 4-1: no configurations
[   74.020918][   T13] usb 4-1: can't read configurations, error -22
[   74.416609][ T4489] tipc: Subscription rejected, illegal request
[   74.980038][   T13] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   75.429994][   T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.516764][   T13] usb 4-1: config 0 has no interfaces?
[   75.741239][ T4688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.160'.
[   75.759931][   T13] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[   75.781992][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.797879][   T13] usb 4-1: Product: syz
[   75.806785][   T13] usb 4-1: Manufacturer: syz
[   75.814817][   T13] usb 4-1: SerialNumber: syz
[   75.825358][   T13] usb 4-1: config 0 descriptor??
[   75.999823][ T4210] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   76.122770][   T13] usb 4-1: USB disconnect, device number 6
[   76.279833][ T4210] usb 5-1: Using ep0 maxpacket: 16
[   76.320252][ T4210] usb 5-1: too many configurations: 33, using maximum allowed: 8
[   76.384223][    T7] cfg80211: failed to load regulatory.db
[   76.628698][ T4702] netlink: 'syz.1.165': attribute type 4 has an invalid length.
[   76.698667][ T4705] netlink: 'syz.1.165': attribute type 4 has an invalid length.
[   77.089703][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   77.098694][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   77.107777][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   77.116772][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   77.126001][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   77.140173][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.149214][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.909854][ T4210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   77.948038][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.009062][ T4210] usb 5-1: Product: syz
[   78.023477][ T4210] usb 5-1: Manufacturer: syz
[   78.037401][ T4210] usb 5-1: SerialNumber: syz
[   78.058543][ T4210] r8152-cfgselector 5-1: config 0 descriptor??
[   78.071729][ T4718] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   78.188965][ T4732] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.201893][ T4731] device erspan0 entered promiscuous mode
[   78.221458][ T4731] device erspan0 left promiscuous mode
[   78.315124][ T4210] r8152-cfgselector 5-1: Unknown version 0x0000
[   78.329996][   T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   78.369923][ T4210] r8152-cfgselector 5-1: Unknown version 0x0000
[   78.383047][ T4210] r8152-cfgselector 5-1: USB disconnect, device number 11
[   79.305527][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'.
[   79.409903][   T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.629970][   T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.639086][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.659767][   T13] usb 2-1: Product: syz
[   79.664007][   T13] usb 2-1: Manufacturer: syz
[   79.668604][   T13] usb 2-1: SerialNumber: syz
[   79.965379][ T4225] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   80.329858][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.349739][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.359526][ T4225] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   80.399758][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.423986][ T4225] usb 1-1: config 0 descriptor??
[   80.789812][ T4268] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   80.830017][   T13] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[   80.836507][   T13] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   80.844264][   T13] cdc_ncm 2-1:1.0: setting rx_max = 2048
[   80.933427][ T4225] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[   81.029794][ T4268] usb 5-1: Using ep0 maxpacket: 16
[   81.040116][   T13] cdc_ncm 2-1:1.0: setting tx_max = 88
[   81.055125][   T13] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[   81.128498][ T4225] usb 1-1: USB disconnect, device number 8
[   81.149974][ T4268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.162383][ T4268] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   81.171749][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.190138][ T4268] usb 5-1: config 0 descriptor??
[   81.232648][ T4268] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[   81.256151][ T4210] usb 2-1: USB disconnect, device number 5
[   81.271940][ T4210] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[   81.464493][ T3529] bcm5974 5-1:0.0: could not read from device
[   81.487773][ T4268] usb 5-1: USB disconnect, device number 12
[   81.514540][ T3529] bcm5974 5-1:0.0: could not read from device
[   81.546272][ T4183] bcm5974 5-1:0.0: could not read from device
[   81.552875][ T4814] process 'syz.2.203' launched './file1' with NULL argv: empty string added
[   81.577169][ T4816] input: syz1 as /devices/virtual/input/input8
[   81.712412][ T4826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.206'.
[   82.109890][ T4843] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   82.329758][   T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   82.459014][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   82.469741][ T4851] netlink: 'syz.1.215': attribute type 30 has an invalid length.
[   82.561497][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   82.620462][   T13] usb 5-1: Using ep0 maxpacket: 8
[   82.759894][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[   82.768958][   T13] usb 5-1: no configurations
[   82.773621][   T13] usb 5-1: can't read configurations, error -22
[   83.267147][ T4882] tipc: Started in network mode
[   83.287234][ T4882] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   83.309362][ T4882] tipc: Enabled bearer <eth:vlan0>, priority 10
[   83.354860][ T4882] tipc: Resetting bearer <eth:vlan0>
[   83.430011][ T4882] tipc: Disabling bearer <eth:vlan0>
[   84.701519][   T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   84.904940][ T4268] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   85.149770][ T4268] usb 4-1: Using ep0 maxpacket: 8
[   85.190224][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.269967][ T4268] usb 4-1: unable to get BOS descriptor or descriptor too short
[   85.288038][ T4268] usb 4-1: no configurations
[   85.298116][ T4268] usb 4-1: can't read configurations, error -22
[   85.409931][   T13] usb 5-1: config 103 has an invalid interface number: 171 but max is 0
[   85.418304][   T13] usb 5-1: config 103 has no interface number 0
[   85.462331][   T13] usb 5-1: config 103 interface 171 has no altsetting 0
[   85.690500][   T13] usb 5-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=25.1d
[   85.754912][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.950245][   T13] usb 5-1: Product: syz
[   86.107743][   T13] usb 5-1: Manufacturer: syz
[   86.107765][   T13] usb 5-1: SerialNumber: syz
[   86.499720][   T13] belkin_sa 5-1:103.171: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[   86.634978][   T13] usb 5-1: bcdDevice: 251d, bfc: 0
[   86.749198][   T13] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[   86.857375][   T13] usb 5-1: USB disconnect, device number 15
[   86.993302][ T4932] netlink: 56 bytes leftover after parsing attributes in process `syz.3.246'.
[   87.013615][   T13] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[   87.058144][   T13] belkin_sa 5-1:103.171: device disconnected
[   87.200998][ T4942] input: syz1 as /devices/virtual/input/input9
[   87.756343][ T4957] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   87.794804][ T4957] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   88.153114][   T26] audit: type=1326 audit(1730061146.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6bfd719 code=0x7ffc0000
[   88.225630][   T26] audit: type=1326 audit(1730061146.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fcfd6bfd719 code=0x7ffc0000
[   88.328560][   T26] audit: type=1326 audit(1730061146.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6bfd719 code=0x7ffc0000
[   88.543008][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   88.611468][ T4991] device bridge_slave_1 left promiscuous mode
[   88.631816][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.648140][ T4991] bridge1: port 1(bridge_slave_1) entered blocking state
[   88.665813][ T4991] bridge1: port 1(bridge_slave_1) entered disabled state
[   88.677075][ T4991] device bridge_slave_1 entered promiscuous mode
[   88.952454][ T5006] tap0: tun_chr_ioctl cmd 1074812118
[   90.169895][ T1344] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   90.340636][ T5054] input: syz0 as /devices/virtual/input/input10
[   90.580099][ T1344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   90.799963][ T1344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.817059][ T1344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.829782][ T1344] usb 5-1: Product: syz
[   90.838655][ T1344] usb 5-1: Manufacturer: syz
[   90.849304][ T1344] usb 5-1: SerialNumber: syz
[   91.189755][   T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   91.337392][ T5089] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   91.350426][ T5089] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   91.449742][   T21] usb 3-1: Using ep0 maxpacket: 16
[   91.573241][   T21] usb 3-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[   91.587316][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.604278][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 149, changing to 11
[   91.615960][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 17459, setting to 1024
[   91.635284][   T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.732981][   T21] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   91.743419][   T21] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   91.756909][   T21] usb 3-1: Manufacturer: syz
[   91.766627][   T21] usb 3-1: config 0 descriptor??
[   91.989883][ T1344] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[   91.997552][ T1344] cdc_ncm 5-1:1.0: setting rx_max = 16384
[   92.142575][   T21] rc_core: IR keymap rc-hauppauge not found
[   92.149476][   T21] Registered IR keymap rc-empty
[   92.180887][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.209837][ T1344] cdc_ncm 5-1:1.0: setting tx_max = 184
[   92.239840][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.249086][ T1344] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[   92.293353][   T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   92.319864][ T1344] usb 5-1: USB disconnect, device number 16
[   92.332746][   T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[   92.356732][ T1344] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[   92.381197][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.439938][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.479937][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.542611][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.599897][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.639861][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.680386][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.719860][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.779874][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.839998][   T21] mceusb 3-1:0.0: Error: mce write urb status = -71
[   92.871262][   T21] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   92.893435][   T21] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   93.017176][   T26] audit: type=1326 audit(1730061151.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe783e4c719 code=0x7ffc0000
[   93.124503][   T26] audit: type=1326 audit(1730061151.140:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe783e4c719 code=0x7ffc0000
[   93.152384][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'.
[   93.210155][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'.
[   93.236566][   T26] audit: type=1326 audit(1730061151.140:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe783e4c719 code=0x7ffc0000
[   93.239751][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'.
[   93.317274][   T26] audit: type=1326 audit(1730061151.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe783e4c719 code=0x7ffc0000
[   93.825340][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   93.941071][   T13] usb 3-1: USB disconnect, device number 7
[   94.586048][ T5168] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   95.762903][ T5192] program syz.1.340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.859751][ T1344] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   96.279954][ T1344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.305535][ T1344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.461270][ T1344] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[   96.482892][ T1344] usb 3-1: New USB device strings: Mfr=8, Product=128, SerialNumber=0
[   96.499555][ T1344] usb 3-1: Product: syz
[   96.507769][ T1344] usb 3-1: Manufacturer: syz
[   96.525399][ T1344] usb 3-1: config 0 descriptor??
[   97.633577][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.683049][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.754670][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.780081][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.813243][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.833554][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.873754][ T1344] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0
[   97.929773][   T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   97.940175][ T1344] usb 3-1: USB disconnect, device number 8
[   98.334311][ T5223] x_tables: duplicate underflow at hook 2
[   98.481140][   T21] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   98.502304][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.512701][   T21] usb 5-1: Product: syz
[   98.516989][   T21] usb 5-1: Manufacturer: syz
[   98.544769][   T21] usb 5-1: SerialNumber: syz
[   98.572523][   T21] usb 5-1: config 0 descriptor??
[   98.831100][   T21] hso 5-1:0.0: Failed to find BULK IN ep
[   98.839601][   T21] usb-storage 5-1:0.0: USB Mass Storage device detected
[   99.019752][ T4268] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   99.038372][ T5214] udc-core: couldn't find an available UDC or it's busy
[   99.076648][ T5214] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   99.089370][   T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.106555][ T1105] usb 5-1: USB disconnect, device number 17
[   99.269754][ T4268] usb 1-1: Using ep0 maxpacket: 8
[   99.339748][   T21] usb 3-1: Using ep0 maxpacket: 32
[   99.389951][ T4268] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.400478][ T4268] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   99.414000][ T4268] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[   99.424309][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.444005][ T4268] usb 1-1: config 0 descriptor??
[   99.459929][   T21] usb 3-1: config 191 has an invalid interface descriptor of length 8, skipping
[   99.471177][   T21] usb 3-1: config 191 descriptor has 1 excess byte, ignoring
[   99.478809][   T21] usb 3-1: config 191 has 0 interfaces, different from the descriptor's value: 1
[   99.491588][ T4268] qmi_wwan: probe of 1-1:0.0 failed with error -22
[   99.639831][   T21] usb 3-1: New USB device found, idVendor=1e72, idProduct=0071, bcdDevice=27.9b
[   99.653295][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[   99.673775][   T21] usb 3-1: Product: syz
[   99.681104][   T21] usb 3-1: Manufacturer: syz
[   99.688708][   T21] usb 3-1: SerialNumber: syz
[   99.707760][ T1344] usb 1-1: USB disconnect, device number 9
[   99.786802][ T5258] device syzkaller1 entered promiscuous mode
[  100.011736][   T21] usb 3-1: USB disconnect, device number 9
[  100.829818][ T1344] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  101.091730][ T1344] usb 3-1: Using ep0 maxpacket: 8
[  101.204693][ T5283] device vlan2 entered promiscuous mode
[  101.279871][ T1344] usb 3-1: unable to get BOS descriptor or descriptor too short
[  101.287911][ T1344] usb 3-1: no configurations
[  101.292582][ T1344] usb 3-1: can't read configurations, error -22
[  101.470032][ T4225] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  101.769824][ T4210] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  101.830071][ T4225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.841274][ T4225] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  101.851716][ T4225] usb 1-1: config 1 has no interface number 0
[  101.865762][ T4225] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  102.042729][ T5322] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.055576][ T4225] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.059818][ T4210] usb 4-1: Using ep0 maxpacket: 8
[  102.076255][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.099770][ T4225] usb 1-1: Product: syz
[  102.126346][ T4225] usb 1-1: Manufacturer: syz
[  102.136545][ T4225] usb 1-1: SerialNumber: syz
[  102.180575][ T4225] usb 1-1: selecting invalid altsetting 1
[  102.199819][ T1344] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  102.230047][ T4210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.240373][ T4210] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  102.254389][ T4210] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  102.268868][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.288544][ T4210] usb 4-1: config 0 descriptor??
[  102.289890][ T1105] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  102.340874][ T4210] qmi_wwan: probe of 4-1:0.0 failed with error -22
[  102.479762][ T1344] usb 3-1: Using ep0 maxpacket: 32
[  102.539877][ T1105] usb 2-1: Using ep0 maxpacket: 16
[  102.565718][ T4268] usb 4-1: USB disconnect, device number 9
[  102.639731][ T4225] usb 1-1: selecting invalid altsetting 1
[  102.645697][ T4225] cdc_ncm 1-1:1.1: bind() failure
[  102.669851][ T1105] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.686045][ T1105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.699859][ T1105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  102.710397][ T1105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  102.720618][ T1105] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.820010][ T1105] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  102.823222][ T4210] usb 1-1: USB disconnect, device number 10
[  102.834871][ T1105] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  102.835702][ T1344] usb 3-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43
[  102.845520][ T1105] usb 2-1: Manufacturer: syz
[  102.889043][ T1344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.889626][ T1105] usb 2-1: config 0 descriptor??
[  102.909760][ T1344] usb 3-1: Product: syz
[  102.914030][ T1344] usb 3-1: Manufacturer: syz
[  102.918739][ T1344] usb 3-1: SerialNumber: syz
[  102.940497][ T1344] usb 3-1: config 0 descriptor??
[  102.964283][ T5324] CUSE: info not properly terminated
[  103.200063][ T1344] dvb-usb: found a 'Pinnacle PCTV 282e' in warm state.
[  103.217505][ T1344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  103.229914][ T1105] rc_core: IR keymap rc-hauppauge not found
[  103.235985][ T1105] Registered IR keymap rc-empty
[  103.244163][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.250152][ T1344] dvbdev: DVB: registering new adapter (Pinnacle PCTV 282e)
[  103.259017][ T1344] usb 3-1: media controller created
[  103.272133][ T1344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.280107][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.310209][ T1344] DVB: Unable to find symbol dib7000p_attach()
[  103.316524][ T1344] dvb-usb: no frontend was attached by 'Pinnacle PCTV 282e'
[  103.323542][ T1105] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  103.344447][ T1105] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12
[  103.366648][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.380432][ T1344] rc_core: IR keymap rc-dib0700-rc5 not found
[  103.380769][ T5320] udc-core: couldn't find an available UDC or it's busy
[  103.393970][ T5320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.395395][ T1344] Registered IR keymap rc-empty
[  103.414298][ T1344] dvb-usb: could not initialize remote control.
[  103.419863][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.422504][ T1344] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected.
[  103.449911][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.463475][ T1344] usb 3-1: USB disconnect, device number 11
[  103.469841][ T4210] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  103.479963][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.493492][ T1344] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected.
[  103.518159][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.569860][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.610728][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.639938][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.669860][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.700061][ T1105] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  103.741605][ T1105] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  103.752673][ T1105] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  103.870015][ T4210] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  104.632108][ T5354] syz.0.403 uses obsolete (PF_INET,SOCK_PACKET)
[  104.688485][ T5354] device syzkaller1 entered promiscuous mode
[  104.720068][ T4210] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.729559][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.738476][ T4210] usb 4-1: Product: syz
[  104.742939][ T4210] usb 4-1: Manufacturer: syz
[  104.747596][ T4210] usb 4-1: SerialNumber: syz
[  104.787706][ T5358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  104.915360][ T5369] sctp: [Deprecated]: syz.4.409 (pid 5369) Use of int in max_burst socket option deprecated.
[  104.915360][ T5369] Use struct sctp_assoc_value instead
[  104.968449][ T4225] usb 2-1: USB disconnect, device number 6
[  105.269874][ T1344] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  105.549776][ T1344] usb 1-1: Using ep0 maxpacket: 8
[  105.628973][ T5373] device vlan3 entered promiscuous mode
[  105.689890][ T1344] usb 1-1: unable to get BOS descriptor or descriptor too short
[  105.698178][ T1344] usb 1-1: no configurations
[  105.703147][ T1344] usb 1-1: can't read configurations, error -22
[  105.889879][ T4210] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  105.896741][ T4210] cdc_ncm 4-1:1.0: setting rx_max = 16384
[  105.951709][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'.
[  105.970937][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[  106.099963][ T4210] cdc_ncm 4-1:1.0: setting tx_max = 184
[  106.116883][ T4210] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42
[  106.130661][ T4210] usb 4-1: USB disconnect, device number 10
[  106.138635][ T4210] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM
[  107.402749][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  107.453880][ T5454] xt_nfacct: accounting object `syz0' does not exists
[  108.033695][ T5499] ptrace attach of "./syz-executor exec"[5508] was attempted by "òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ
[  108.489844][ T1344] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.740325][ T5448] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  108.961179][ T4210] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  108.999739][ T5448] usb 5-1: Using ep0 maxpacket: 32
[  109.062137][ T1344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.079274][ T1344] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  109.095750][ T1344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.109351][ T1344] usb 2-1: config 0 descriptor??
[  109.121067][ T5448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.149868][ T5540] batman_adv: Cannot find parent device
[  109.157911][ T5448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.180699][ T5448] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  109.197335][ T5448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.223843][ T5448] usb 5-1: config 0 descriptor??
[  109.229848][ T4210] usb 4-1: Using ep0 maxpacket: 8
[  109.315142][ T5520] device vlan2 entered promiscuous mode
[  109.376563][   T13] usb 2-1: USB disconnect, device number 7
[  109.382652][ T4210] usb 4-1: unable to get BOS descriptor or descriptor too short
[  109.406471][ T4210] usb 4-1: no configurations
[  109.418053][ T4210] usb 4-1: can't read configurations, error -22
[  109.702498][ T5448] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  109.715852][ T5448] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  109.920003][ T5448] ft260 0003:0403:6030.0003: chip code: 5e81 abf2
[  110.359868][ T5448] ft260 0003:0403:6030.0003: failed to retrieve status: -71
[  110.380162][ T5448] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71
[  110.403789][ T5448] usb 5-1: USB disconnect, device number 18
[  111.569339][ T5606] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.711575][ T5603] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  111.904937][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  111.953668][ T5621] device vlan3 entered promiscuous mode
[  111.979425][ T5621] device bridge0 entered promiscuous mode
[  111.986566][ T5626] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  112.008034][ T5621] device bridge0 left promiscuous mode
[  112.510017][   T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  112.517816][ T1344] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  112.780005][ T1344] usb 3-1: Using ep0 maxpacket: 8
[  112.785168][   T13] usb 2-1: Using ep0 maxpacket: 8
[  112.930576][ T1344] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  112.979836][ T1344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.023813][ T1344] usb 3-1: config 0 descriptor??
[  113.129884][   T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  113.144986][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.153507][   T13] usb 2-1: Product: syz
[  113.158070][   T13] usb 2-1: Manufacturer: syz
[  113.163353][   T13] usb 2-1: SerialNumber: syz
[  113.169543][   T13] usb 2-1: config 0 descriptor??
[  113.315176][ T1344] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  113.430016][   T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  113.759002][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  113.772641][ T5664] device macsec0 entered promiscuous mode
[  113.844603][   T26] audit: type=1326 audit(1730061171.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  113.846151][ T5653] kvm [5652]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  113.873007][   T26] audit: type=1326 audit(1730061171.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  113.881408][ T5653] kvm [5652]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000
[  113.905033][   T26] audit: type=1326 audit(1730061172.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  113.988855][   T26] audit: type=1326 audit(1730061172.020:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  114.035752][   T26] audit: type=1326 audit(1730061172.020:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  114.093793][   T26] audit: type=1326 audit(1730061172.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  114.126273][   T26] audit: type=1326 audit(1730061172.050:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  114.157359][   T26] audit: type=1326 audit(1730061172.050:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412188d719 code=0x7ffc0000
[  114.389748][ T4255] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  114.680756][ T5683] syz.3.544 (5683): drop_caches: 2
[  114.800251][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  114.811660][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.823077][ T4255] usb 5-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00
[  114.832202][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.848883][ T4255] usb 5-1: config 0 descriptor??
[  114.903657][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  115.059884][ T4719] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  115.333499][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.340767][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.347682][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.355124][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.362122][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.369048][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.376012][ T4255] wacom 0003:056A:00C0.0004: unknown main item tag 0x0
[  115.384685][ T4255] wacom 0003:056A:00C0.0004: hidraw0: USB HID v9.6d Device [HID 056a:00c0] on usb-dummy_hcd.4-1/input0
[  115.420768][ T4719] usb 4-1: config 0 has an invalid interface number: 201 but max is 0
[  115.429574][ T4719] usb 4-1: config 0 has no interface number 0
[  115.436581][ T4719] usb 4-1: config 0 interface 201 has no altsetting 0
[  115.541900][ T4210] usb 5-1: USB disconnect, device number 19
[  115.569951][   T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  115.585825][   T13] usb 2-1: USB disconnect, device number 8
[  115.600054][ T4719] usb 4-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=34.bb
[  115.609363][ T4719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.617669][ T4719] usb 4-1: Product: syz
[  115.622079][ T4719] usb 4-1: Manufacturer: syz
[  115.626675][ T4719] usb 4-1: SerialNumber: syz
[  115.633737][ T4719] usb 4-1: config 0 descriptor??
[  115.867360][ T5699] bridge0: port 3(veth0_to_bridge) entered blocking state
[  115.875557][ T5699] bridge0: port 3(veth0_to_bridge) entered disabled state
[  115.886915][ T5699] device veth0_to_bridge entered promiscuous mode
[  115.894596][ T5699] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  115.908282][ T5699] bridge0: port 3(veth0_to_bridge) entered blocking state
[  115.916031][ T5699] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  115.948094][ T4719] upd78f0730 4-1:0.201: upd78f0730 converter detected
[  115.957037][ T4719] usb 4-1: upd78f0730 converter now attached to ttyUSB0
[  115.970026][ T1344] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  115.970424][ T4719] usb 4-1: USB disconnect, device number 13
[  115.995187][ T1344] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  116.016841][ T1344] asix: probe of 3-1:0.0 failed with error -71
[  116.024115][ T4719] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  116.031553][ T1344] usb 3-1: USB disconnect, device number 12
[  116.036924][ T4719] upd78f0730 4-1:0.201: device disconnected
[  116.399934][   T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  116.661069][   T21] usb 1-1: Using ep0 maxpacket: 16
[  116.723538][ T5733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.566'.
[  116.780098][   T21] usb 1-1: config 0 interface 0 has no altsetting 0
[  117.092803][ T5743] netlink: 56 bytes leftover after parsing attributes in process `syz.4.570'.
[  117.690118][   T21] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  117.699214][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.707360][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  117.715453][   T21] usb 1-1: Product: syz
[  117.719613][   T21] usb 1-1: Manufacturer: syz
[  117.724485][   T21] usb 1-1: SerialNumber: syz
[  117.734742][   T21] usb 1-1: config 0 descriptor??
[  117.949798][   T23] usb 2-1: Using ep0 maxpacket: 16
[  117.986378][   T13] usb 1-1: USB disconnect, device number 13
[  118.070440][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  118.084939][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.100727][   T23] usb 2-1: config 0 descriptor??
[  118.145137][   T23] usb 2-1: interface 1 not found
[  118.370217][   T13] usb 2-1: USB disconnect, device number 9
[  118.554798][ T5768] capability: warning: `syz.3.580' uses 32-bit capabilities (legacy support in use)
[  119.395884][ T5813] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  119.434632][ T5810] kvm: pic: non byte write
[  119.486147][ T4719] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  119.729870][ T4719] usb 3-1: Using ep0 maxpacket: 32
[  119.850045][ T4719] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.885609][ T4719] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.911565][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.924357][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.937359][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.950461][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.963617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.976290][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.988715][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.001334][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.014149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.020426][ T4719] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  120.080356][ T4719] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  120.122232][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.122430][ T4719] usb 3-1: Product: syz
[  120.166395][ T4719] usb 3-1: Manufacturer: syz
[  120.240516][ T4719] hub 3-1:4.0: USB hub found
[  120.460030][ T4719] hub 3-1:4.0: 2 ports detected
[  120.743066][ T4211] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.999809][ T4211] usb 2-1: Using ep0 maxpacket: 32
[  121.129913][ T4211] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  121.138356][ T4211] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  121.159836][ T4211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.205153][ T4211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  121.235306][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  121.269828][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  121.338339][ T4211] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  121.390593][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.426183][ T4211] usb 2-1: config 0 descriptor??
[  121.680613][ T4211] usb 2-1: USB disconnect, device number 10
[  121.809901][ T4719] hub 3-1:4.0: activate --> -90
[  122.099766][   T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  122.189876][ T4211] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  122.218539][ T4255] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  122.233338][   T23] usb 3-1: USB disconnect, device number 13
[  122.251063][ T4719] usb 3-1-port2: attempt power cycle
[  122.349853][   T21] usb 4-1: Using ep0 maxpacket: 8
[  122.429820][ T4211] usb 2-1: Using ep0 maxpacket: 32
[  122.550174][ T4211] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  122.578966][ T4211] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  122.607854][ T4211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.618439][ T4211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  122.640564][   T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  122.661980][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  122.675805][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.695862][   T21] usb 4-1: Product: syz
[  122.700891][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  122.725026][   T21] usb 4-1: Manufacturer: syz
[  122.730236][   T21] usb 4-1: SerialNumber: syz
[  122.735179][ T4211] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  122.769903][   T21] usb 4-1: config 0 descriptor??
[  122.778509][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.797423][ T4211] usb 2-1: config 0 descriptor??
[  122.909714][ T4173] Bluetooth: hci3: Malicious advertising data.
[  123.029926][   T21] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  123.065678][ T4255] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  123.095871][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.104730][ T4255] usb 1-1: Product: syz
[  123.109878][ T4255] usb 1-1: Manufacturer: syz
[  123.114512][ T4255] usb 1-1: SerialNumber: syz
[  123.145563][ T4255] usb 1-1: config 0 descriptor??
[  123.207669][ T4255] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  123.241859][ T4255] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  123.280264][ T4255] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  123.410794][   T23] usb 1-1: USB disconnect, device number 14
[  123.569430][ T4211] usb 2-1: USB disconnect, device number 11
[  124.149898][ T4211] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  124.410147][ T4211] usb 5-1: Using ep0 maxpacket: 16
[  124.530522][ T4211] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.550129][ T4211] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  124.560946][ T4211] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  124.572805][ T4211] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  124.583846][ T4211] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  124.691055][ T4211] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.702347][ T1344] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  124.711288][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.752283][ T4211] usb 5-1: SerialNumber: syz
[  124.768854][   T13] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  124.790273][ T5920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  124.810653][ T4211] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  124.842977][ T4211] cdc_acm: probe of 5-1:1.0 failed with error -12
[  124.860215][   T21] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  124.873696][   T21] usb 4-1: USB disconnect, device number 14
[  124.919933][    C0] net_ratelimit: 3620 callbacks suppressed
[  124.919949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.939128][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.952059][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.966511][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.980693][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.993665][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.006564][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.019621][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.030985][ T4211] usb 5-1: USB disconnect, device number 20
[  125.032471][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.051749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.128041][ T1344] usb 1-1: Using ep0 maxpacket: 8
[  125.218113][   T13] usb 3-1: Using ep0 maxpacket: 8
[  125.251526][ T5926] device vlan4 entered promiscuous mode
[  125.275883][ T5926] device bond0 entered promiscuous mode
[  125.282630][ T5926] device bond_slave_0 entered promiscuous mode
[  125.308621][ T5926] device bond_slave_1 entered promiscuous mode
[  125.326977][ T5926] device bond0 left promiscuous mode
[  125.352672][ T5926] device bond_slave_0 left promiscuous mode
[  125.368939][ T5926] device bond_slave_1 left promiscuous mode
[  125.417121][   T13] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  125.427679][   T13] usb 3-1: config 0 has no interface number 0
[  125.568165][ T1344] usb 1-1: unable to get BOS descriptor or descriptor too short
[  125.576263][ T1344] usb 1-1: no configurations
[  125.581796][ T1344] usb 1-1: can't read configurations, error -22
[  125.673587][   T13] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  125.683864][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.710944][   T13] usb 3-1: Product: syz
[  125.715654][   T13] usb 3-1: Manufacturer: syz
[  125.729871][   T13] usb 3-1: SerialNumber: syz
[  125.749113][   T13] usb 3-1: config 0 descriptor??
[  125.943171][   T13] msi2500 3-1:0.246: Registered as swradio24
[  125.949341][   T13] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  126.039210][   T13] usb 3-1: USB disconnect, device number 18
[  126.079892][ T4211] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  126.319777][ T4211] usb 5-1: Using ep0 maxpacket: 32
[  126.439806][ T4211] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  126.451475][ T4211] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  126.519741][ T4211] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  126.588181][ T4211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.661679][ T4211] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  126.747789][ T4211] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  126.834170][ T4211] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  126.856845][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.956864][ T4211] usb 5-1: config 0 descriptor??
[  127.752882][ T4211] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  127.898210][ T4211] usb 5-1: USB disconnect, device number 21
[  127.931921][ T4211] usblp0: removed
[  128.599907][ T4211] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  128.675675][   T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  128.719722][ T4719] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  128.800381][ T1344] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  128.867370][ T4211] usb 2-1: Using ep0 maxpacket: 16
[  129.034005][   T13] usb 3-1: Using ep0 maxpacket: 16
[  129.080903][ T4719] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  129.099995][ T4719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.127719][ T4719] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  129.130823][ T1344] usb 1-1: Using ep0 maxpacket: 8
[  129.151893][ T4719] usb 4-1: config 1 has no interface number 1
[  129.160140][ T4211] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  129.179585][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.188343][ T4719] usb 4-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  129.209627][ T4211] usb 2-1: Product: syz
[  129.214359][ T4211] usb 2-1: Manufacturer: syz
[  129.218966][ T4211] usb 2-1: SerialNumber: syz
[  129.224220][ T4719] usb 4-1: config 1 interface 2 has no altsetting 1
[  129.243786][   T13] usb 3-1: unable to get BOS descriptor or descriptor too short
[  129.250209][ T4211] r8152-cfgselector 2-1: config 0 descriptor??
[  129.261860][ T6004] device vlan4 entered promiscuous mode
[  129.267663][ T6004] bond0: (slave vlan4): Error -34 calling dev_set_mtu
[  129.443274][   T13] usb 3-1: config 218 has an invalid interface number: 8 but max is 0
[  129.454601][   T13] usb 3-1: config 218 has no interface number 0
[  129.461843][   T13] usb 3-1: config 218 interface 8 altsetting 64 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  129.494400][   T13] usb 3-1: config 218 interface 8 has no altsetting 0
[  129.520632][ T4719] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  129.535517][ T4719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.544266][ T4719] usb 4-1: Product: syz
[  129.548591][ T4719] usb 4-1: Manufacturer: syz
[  129.568009][ T4719] usb 4-1: SerialNumber: syz
[  129.740507][ T4211] r8152-cfgselector 2-1: Unknown version 0x1470
[  129.753143][ T4211] r8152-cfgselector 2-1: bad CDC descriptors
[  129.960202][ T4211] r8152-cfgselector 2-1: Unknown version 0x0000
[  130.056879][ T4211] r8152-cfgselector 2-1: USB disconnect, device number 12
[  130.282372][    C0] net_ratelimit: 3312 callbacks suppressed
[  130.282388][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.301500][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.315030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.327968][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.334940][ T6019] ieee802154 phy0 wpan0: encryption failed: -22
[  130.340777][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.359100][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.371968][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.384898][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.398178][ T1344] usb 1-1: unable to get BOS descriptor or descriptor too short
[  130.406232][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.407341][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.442267][ T1344] usb 1-1: no configurations
[  130.447070][ T1344] usb 1-1: can't read configurations, error -22
[  130.560604][ T4719] usb 4-1: 2:2 : no or invalid class specific endpoint descriptor
[  130.608048][   T13] usb 3-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice= 2.a7
[  130.632878][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.655152][   T13] usb 3-1: Product: syz
[  130.659345][   T13] usb 3-1: Manufacturer: syz
[  130.680535][   T13] usb 3-1: SerialNumber: syz
[  130.722420][ T4719] usb 4-1: USB disconnect, device number 15
[  130.903035][ T6034] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  132.327461][ T6047] netlink: 'syz.3.686': attribute type 1 has an invalid length.
[  132.592171][   T13] mos7840 3-1:218.8: required endpoints missing
[  132.622728][   T13] usb 3-1: USB disconnect, device number 19
[  132.833665][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.841479][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  133.357373][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'.
[  133.509784][ T5448] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  133.779894][ T5448] usb 5-1: Using ep0 maxpacket: 8
[  134.249018][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'.
[  134.270580][ T5448] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  134.290809][ T5448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.750355][ T5448] usb 5-1: Product: syz
[  134.804587][ T5448] usb 5-1: Manufacturer: syz
[  134.809278][ T5448] usb 5-1: SerialNumber: syz
[  134.910466][ T5448] usb 5-1: config 0 descriptor??
[  135.189873][ T5448] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  135.298031][    C0] net_ratelimit: 1740 callbacks suppressed
[  135.298051][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.317176][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.330140][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.342999][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.355796][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.368667][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.381229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.393810][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.406470][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.419042][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  136.447587][ T4214] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  136.527999][   T13] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  136.787077][ T4214] usb 4-1: Using ep0 maxpacket: 16
[  136.959091][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD3, skipping
[  136.978961][ T4214] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  136.999003][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.045579][ T4214] usb 4-1: config 0 descriptor??
[  137.120845][ T4214] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  137.199875][ T5448] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  137.207903][ T4719] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  137.233990][   T13] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  137.236127][ T5448] usb 5-1: USB disconnect, device number 22
[  137.272835][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.331899][   T13] usb 3-1: Product: syz
[  137.336101][   T13] usb 3-1: Manufacturer: syz
[  137.370536][   T13] usb 3-1: SerialNumber: syz
[  137.434768][   T13] usb 3-1: config 0 descriptor??
[  137.469810][ T4719] usb 1-1: Using ep0 maxpacket: 16
[  137.509087][   T13] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 020
[  137.595509][ T4719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.619316][ T4719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.630031][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  137.646549][ T4719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.673534][ T4719] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  137.716543][ T4719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.744254][ T4719] usb 1-1: config 0 descriptor??
[  137.890271][   T23] usb 2-1: Using ep0 maxpacket: 16
[  137.953830][   T13]  (null): failure reading functionality
[  138.156406][   T13] i2c i2c-1: connected i2c-tiny-usb device
[  138.493905][   T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  138.523104][ T4719] ryos 0003:1E7D:31CE.0005: unbalanced delimiter at end of report description
[  138.533829][ T4719] ryos 0003:1E7D:31CE.0005: parse failed
[  138.539575][   T23] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  138.557001][ T4214] usb 3-1: USB disconnect, device number 20
[  138.567199][ T4719] ryos: probe of 0003:1E7D:31CE.0005 failed with error -22
[  138.575349][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.607241][ T4719] usb 1-1: USB disconnect, device number 19
[  138.675745][ T4268] usb 4-1: USB disconnect, device number 16
[  138.781047][   T23] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  138.794989][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.804956][   T23] usb 2-1: Product: syz
[  138.809140][   T23] usb 2-1: Manufacturer: syz
[  138.818866][   T23] usb 2-1: SerialNumber: syz
[  138.845024][   T23] usb 2-1: config 0 descriptor??
[  138.897872][   T23] usb 2-1: unknown interface protocol 0x1, assuming v1
[  138.915292][   T23] usb 2-1: cannot find UAC_HEADER
[  138.964016][   T23] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  138.977315][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.029877][ T4225] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  139.174675][   T23] usb 2-1: USB disconnect, device number 13
[  139.289870][ T4225] usb 5-1: Using ep0 maxpacket: 8
[  139.770193][ T4225] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  139.793190][ T6137] netlink: 'syz.2.712': attribute type 1 has an invalid length.
[  139.814388][ T4225] usb 5-1: config 0 has no interface number 0
[  140.450452][    C0] net_ratelimit: 3409 callbacks suppressed
[  140.450467][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.469480][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.481974][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.494440][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.506867][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.519419][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.531921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.544339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.557493][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.570510][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.880019][ T4225] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  140.979040][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.098470][ T4225] usb 5-1: Product: syz
[  141.127600][ T4225] usb 5-1: Manufacturer: syz
[  141.151667][ T4225] usb 5-1: SerialNumber: syz
[  141.226671][ T4225] usb 5-1: config 0 descriptor??
[  141.379861][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'.
[  141.984548][ T4225] msi2500 5-1:0.246: Registered as swradio24
[  141.990748][ T4225] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  142.211364][ T4225] usb 5-1: USB disconnect, device number 23
[  142.691685][ T6160] device team_slave_0 entered promiscuous mode
[  142.698193][ T6160] device team_slave_1 entered promiscuous mode
[  142.969727][   T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  143.125027][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'.
[  143.689744][ T4719] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  143.850179][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'.
[  144.474073][   T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  144.589420][ T4225] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  144.669766][ T4719] usb 4-1: device not accepting address 17, error -71
[  144.702044][   T21] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  144.883908][   T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  144.899810][ T4225] usb 3-1: Using ep0 maxpacket: 16
[  144.990655][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.140434][ T6166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.164124][ T6203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.727'.
[  145.180032][ T4225] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  145.221532][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.231256][   T26] audit: type=1326 audit(1730061203.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe783e4c719 code=0x0
[  145.278682][ T4225] usb 3-1: Product: syz
[  145.286757][ T4225] usb 3-1: Manufacturer: syz
[  145.291975][ T4225] usb 3-1: SerialNumber: syz
[  145.310448][ T4225] r8152-cfgselector 3-1: config 0 descriptor??
[  145.333118][ T6207] loop6: detected capacity change from 0 to 524287999
[  145.459737][    C0] net_ratelimit: 1270 callbacks suppressed
[  145.459752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.478418][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.491250][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.504050][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.516861][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.529769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.542679][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.555470][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.567979][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.666592][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.160569][ T4225] r8152-cfgselector 3-1: Unknown version 0x1470
[  146.171386][ T4225] r8152-cfgselector 3-1: bad CDC descriptors
[  146.192281][ T4214] usb 1-1: USB disconnect, device number 20
[  146.399876][ T4225] r8152-cfgselector 3-1: Unknown version 0x0000
[  146.409302][ T4225] r8152-cfgselector 3-1: USB disconnect, device number 21
[  146.558173][   T13] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  146.870470][   T13] usb 5-1: Using ep0 maxpacket: 8
[  146.922232][ T6231] netlink: 'syz.0.738': attribute type 6 has an invalid length.
[  147.044119][   T13] usb 5-1: config 0 has an invalid interface number: 252 but max is 0
[  147.059689][   T13] usb 5-1: config 0 has no interface number 0
[  147.522391][   T13] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=ed.34
[  147.597147][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.750893][   T13] usb 5-1: Product: syz
[  147.778025][   T13] usb 5-1: Manufacturer: syz
[  147.819605][   T13] usb 5-1: SerialNumber: syz
[  147.857846][   T13] usb 5-1: config 0 descriptor??
[  148.219179][   T13] ati_remote_probe: Unexpected desc.bNumEndpoints
[  148.247781][   T13] usb 5-1: USB disconnect, device number 24
[  148.268467][ T6252] device team_slave_0 entered promiscuous mode
[  148.274703][ T6252] device team_slave_1 entered promiscuous mode
[  149.817889][   T13] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  150.186629][   T13] usb 5-1: Using ep0 maxpacket: 16
[  150.285835][   T26] audit: type=1326 audit(1730061208.400:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3098a646e7 code=0x7ffc0000
[  150.336124][   T26] audit: type=1326 audit(1730061208.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3098a09099 code=0x7ffc0000
[  150.374705][   T13] usb 5-1: device descriptor read/all, error -71
[  150.443198][   T26] audit: type=1326 audit(1730061208.440:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3098a646e7 code=0x7ffc0000
[  150.470171][    C0] net_ratelimit: 3471 callbacks suppressed
[  150.470190][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.488828][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.501667][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.514455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.527254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.540858][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.553798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.566547][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.579416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
Connection to 10.128.1.162 closed by remote host.
[  150.592301][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.726300][ T6284] 
[  150.728661][ T6284] ======================================================
[  150.735671][ T6284] WARNING: possible circular locking dependency detected
[  150.742685][ T6284] 5.15.169-syzkaller #0 Not tainted
[  150.747878][ T6284] ------------------------------------------------------
[  150.749023][   T26] audit: type=1326 audit(1730061208.440:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3098a09099 code=0x7ffc0000
[  150.754887][ T6284] syz.3.756/6284 is trying to acquire lock:
[  150.754897][ T6284] ffff888063191120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300
[  150.754940][ T6284] 
[  150.754940][ T6284] but task is already holding lock:
[  150.754944][ T6284] ffffffff8db7b4e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  150.754980][ T6284] 
[  150.754980][ T6284] which lock already depends on the new lock.
[  150.754980][ T6284] 
[  150.754985][ T6284] 
[  150.754985][ T6284] the existing dependency chain (in reverse order) is:
[  150.754990][ T6284] 
[  150.754990][ T6284] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  150.755011][ T6284]        lock_acquire+0x1db/0x4f0
[  150.779201][   T26] audit: type=1326 audit(1730061208.440:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3098a646e7 code=0x7ffc0000
[  150.782831][ T6284]        __mutex_lock_common+0x1da/0x25a0
[  150.782853][ T6284]        mutex_lock_nested+0x17/0x20
[  150.782866][ T6284]        hci_remote_features_evt+0x52f/0xb50
[  150.782884][ T6284]        hci_event_packet+0x6fe/0x1550
[  150.782898][ T6284]        hci_rx_work+0x232/0x990
[  150.782912][ T6284]        process_one_work+0x8a1/0x10c0
[  150.782927][ T6284]        worker_thread+0xaca/0x1280
[  150.795978][   T26] audit: type=1326 audit(1730061208.440:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3098a09099 code=0x7ffc0000
[  150.800651][ T6284]        kthread+0x3f6/0x4f0
[  150.800672][ T6284]        ret_from_fork+0x1f/0x30
[  150.800688][ T6284] 
[  150.800688][ T6284] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  150.800711][ T6284]        lock_acquire+0x1db/0x4f0
[  150.800723][ T6284]        __mutex_lock_common+0x1da/0x25a0
[  150.800737][ T6284]        mutex_lock_nested+0x17/0x20
[  150.821159][   T26] audit: type=1326 audit(1730061208.440:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3098a646e7 code=0x7ffc0000
[  150.829629][ T6284]        sco_sock_connect+0x181/0x8e0
[  150.829652][ T6284]        __sys_connect+0x38b/0x410
[  150.829667][ T6284]        __x64_sys_connect+0x76/0x80
[  150.829680][ T6284]        do_syscall_64+0x3b/0xb0
[  150.829694][ T6284]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.829710][ T6284] 
[  150.829710][ T6284] -> #0
[  150.837423][   T26] audit: type=1326 audit(1730061208.440:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3098a09099 code=0x7ffc0000
[  150.842401][ T6284]  (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  150.842422][ T6284]        validate_chain+0x1649/0x5930
[  150.842440][ T6284]        __lock_acquire+0x1295/0x1ff0
[  150.842451][ T6284]        lock_acquire+0x1db/0x4f0
[  150.842462][ T6284]        lock_sock_nested+0x44/0x100
[  150.842477][ T6284]        sco_conn_del+0x104/0x300
[  150.842491][ T6284]        hci_conn_hash_flush+0x10d/0x220
[  150.842506][ T6284]        hci_dev_do_close+0x9f6/0x1070
[  150.864539][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.870228][ T6284]        hci_unregister_dev+0x2d7/0x580
[  150.877688][   T26] audit: type=1326 audit(1730061208.440:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3098a646e7 code=0x7ffc0000
[  150.881447][ T6284]        vhci_release+0x73/0xc0
[  150.881468][ T6284]        __fput+0x3fe/0x8e0
[  150.881484][ T6284]        task_work_run+0x129/0x1a0
[  150.886935][   T26] audit: type=1326 audit(1730061208.440:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3098a09099 code=0x7ffc0000
[  150.891830][ T6284]        do_exit+0x6a3/0x2480
[  150.891847][ T6284]        do_group_exit+0x144/0x310
[  150.891860][ T6284]        get_signal+0xc66/0x14e0
[  150.891872][ T6284]        arch_do_signal_or_restart+0xc3/0x1890
[  150.891888][ T6284]        exit_to_user_mode_loop+0x97/0x130
[  150.891904][ T6284]        exit_to_user_mode_prepare+0xb1/0x140
[  150.891918][ T6284]        syscall_exit_to_user_mode+0x5d/0x240
[  150.891933][ T6284]        do_syscall_64+0x47/0xb0
[  150.891945][ T6284]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.196382][ T6284] 
[  151.196382][ T6284] other info that might help us debug this:
[  151.196382][ T6284] 
[  151.206597][ T6284] Chain exists of:
[  151.206597][ T6284]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  151.206597][ T6284] 
[  151.220825][ T6284]  Possible unsafe locking scenario:
[  151.220825][ T6284] 
[  151.228255][ T6284]        CPU0                    CPU1
[  151.233601][ T6284]        ----                    ----
[  151.238945][ T6284]   lock(hci_cb_list_lock);
[  151.243433][ T6284]                                lock(&hdev->lock);
[  151.250000][ T6284]                                lock(hci_cb_list_lock);
[  151.257001][ T6284]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  151.262871][ T6284] 
[  151.262871][ T6284]  *** DEADLOCK ***
[  151.262871][ T6284] 
[  151.270990][ T6284] 3 locks held by syz.3.756/6284:
[  151.275994][ T6284]  #0: ffff888020c98ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  151.285718][ T6284]  #1: ffff888020c98078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  151.295186][ T6284]  #2: ffffffff8db7b4e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  151.305260][ T6284] 
[  151.305260][ T6284] stack backtrace:
[  151.311128][ T6284] CPU: 0 PID: 6284 Comm: syz.3.756 Not tainted 5.15.169-syzkaller #0
[  151.319178][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  151.329222][ T6284] Call Trace:
[  151.332488][ T6284]  <TASK>
[  151.335412][ T6284]  dump_stack_lvl+0x1e3/0x2d0
[  151.340074][ T6284]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  151.345690][ T6284]  ? print_circular_bug+0x12b/0x1a0
[  151.350871][ T6284]  check_noncircular+0x2f8/0x3b0
[  151.355793][ T6284]  ? stack_trace_snprint+0xe0/0xe0
[  151.360970][ T6284]  ? add_chain_block+0x850/0x850
[  151.365890][ T6284]  ? lockdep_lock+0x11f/0x2a0
[  151.370545][ T6284]  ? lockdep_unlock+0x166/0x300
[  151.375375][ T6284]  ? lockdep_lock+0x2a0/0x2a0
[  151.380034][ T6284]  validate_chain+0x1649/0x5930
[  151.384960][ T6284]  ? reacquire_held_locks+0x660/0x660
[  151.390310][ T6284]  ? reacquire_held_locks+0x660/0x660
[  151.395664][ T6284]  ? mark_lock+0x98/0x340
[  151.399981][ T6284]  ? mark_lock+0x98/0x340
[  151.404293][ T6284]  __lock_acquire+0x1295/0x1ff0
[  151.409126][ T6284]  lock_acquire+0x1db/0x4f0
[  151.413610][ T6284]  ? sco_conn_del+0x104/0x300
[  151.418270][ T6284]  ? read_lock_is_recursive+0x10/0x10
[  151.423620][ T6284]  ? read_lock_is_recursive+0x10/0x10
[  151.428970][ T6284]  ? sco_conn_del+0xfa/0x300
[  151.433541][ T6284]  ? __lock_acquire+0x1ff0/0x1ff0
[  151.438544][ T6284]  ? do_raw_spin_lock+0x14a/0x370
[  151.443554][ T6284]  lock_sock_nested+0x44/0x100
[  151.448328][ T6284]  ? sco_conn_del+0x104/0x300
[  151.452984][ T6284]  sco_conn_del+0x104/0x300
[  151.457479][ T6284]  ? sco_connect_cfm+0xad0/0xad0
[  151.462397][ T6284]  hci_conn_hash_flush+0x10d/0x220
[  151.467499][ T6284]  hci_dev_do_close+0x9f6/0x1070
[  151.472423][ T6284]  hci_unregister_dev+0x2d7/0x580
[  151.477433][ T6284]  vhci_release+0x73/0xc0
[  151.481746][ T6284]  ? vhci_open+0x290/0x290
[  151.486146][ T6284]  __fput+0x3fe/0x8e0
[  151.490115][ T6284]  task_work_run+0x129/0x1a0
[  151.494690][ T6284]  do_exit+0x6a3/0x2480
[  151.498838][ T6284]  ? put_task_struct+0x80/0x80
[  151.503589][ T6284]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  151.509557][ T6284]  do_group_exit+0x144/0x310
[  151.514136][ T6284]  ? lockdep_hardirqs_on+0x94/0x130
[  151.519319][ T6284]  get_signal+0xc66/0x14e0
[  151.523723][ T6284]  arch_do_signal_or_restart+0xc3/0x1890
[  151.529442][ T6284]  ? futex_exit_release+0x1e0/0x1e0
[  151.534798][ T6284]  ? ktime_get+0x7f/0x270
[  151.539108][ T6284]  ? seqcount_lockdep_reader_access+0x153/0x220
[  151.545332][ T6284]  ? lockdep_hardirqs_on+0x94/0x130
[  151.550516][ T6284]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  151.556771][ T6284]  ? ktime_get_real_ts64+0x460/0x460
[  151.562126][ T6284]  ? get_timespec64+0x197/0x270
[  151.566963][ T6284]  ? read_lock_is_recursive+0x10/0x10
[  151.572322][ T6284]  ? get_sigframe_size+0x10/0x10
[  151.577254][ T6284]  ? exit_to_user_mode_loop+0x39/0x130
[  151.582696][ T6284]  exit_to_user_mode_loop+0x97/0x130
[  151.587965][ T6284]  exit_to_user_mode_prepare+0xb1/0x140
[  151.593491][ T6284]  syscall_exit_to_user_mode+0x5d/0x240
[  151.599024][ T6284]  do_syscall_64+0x47/0xb0
[  151.603425][ T6284]  ? clear_bhb_loop+0x15/0x70
[  151.608086][ T6284]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.613963][ T6284] RIP: 0033:0x7fe783e4c719
[  151.618362][ T6284] Code: Unable to access opcode bytes at RIP 0x7fe783e4c6ef.
[  151.625702][ T6284] RSP: 002b:00007ffdde21dbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  151.634109][ T6284] RAX: 0000000000000000 RBX: 00007ffdde21dce0 RCX: 00007fe783e4c719
[  151.642066][ T6284] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe784003f8c
[  151.650019][ T6284] RBP: 00007fe784003f8c R08: 0000000000000010 R09: 00007ffdde21deaf
[  151.657972][ T6284] R10: 00007ffdde21dcc0 R11: 0000000000000246 R12: 0000000000024c16
[  151.665928][ T6284] R13: 00007ffdde21dcc0 R14: 0000000000000032 R15: 0000000000024be4
[  151.673886][ T6284]  </TASK>
[  151.676906][    C0] sched: RT throttling activated
[  152.022423][  T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.126197][  T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.262331][  T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.329458][  T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.065074][  T144] device bridge_slave_1 left promiscuous mode
[  153.072198][  T144] bridge1: port 1(bridge_slave_1) entered disabled state
[  153.098736][  T144] device hsr_slave_0 left promiscuous mode
[  153.111584][  T144] device hsr_slave_1 left promiscuous mode
[  153.124635][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.132149][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.141941][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.149377][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.161408][  T144] device bridge_slave_0 left promiscuous mode
[  153.167622][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.187521][  T144] device nlmon0 left promiscuous mode
[  153.206281][  T144] device veth1_macvtap left promiscuous mode
[  153.212411][  T144] device veth0_macvtap left promiscuous mode
[  153.218931][  T144] device veth1_vlan left promiscuous mode
[  153.226404][  T144] device veth0_vlan left promiscuous mode
[  153.348718][  T144] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  153.426109][  T144] team0 (unregistering): Port device team_slave_1 removed
[  153.443015][  T144] team0 (unregistering): Port device team_slave_0 removed
[  153.455480][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.474224][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.531197][  T144] bond0 (unregistering): Released all slaves
[  154.242499][  T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.302954][  T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.361850][  T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.421977][  T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.085712][  T144] device hsr_slave_0 left promiscuous mode
[  155.097924][  T144] device hsr_slave_1 left promiscuous mode
[  155.110730][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.118181][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.129882][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.137293][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.149066][  T144] device bridge_slave_1 left promiscuous mode
[  155.155351][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.171751][  T144] device bridge_slave_0 left promiscuous mode
[  155.177967][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.207300][  T144] device veth1_macvtap left promiscuous mode
[  155.213539][  T144] device veth0_macvtap left promiscuous mode
[  155.219567][  T144] device veth1_vlan left promiscuous mode
[  155.226670][  T144] device veth0_vlan left promiscuous mode
[  155.373634][  T144] team0 (unregistering): Port device team_slave_1 removed
[  155.388511][  T144] team0 (unregistering): Port device team_slave_0 removed
[  155.407587][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.423051][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.478264][  T144] bond0 (unregistering): Released all slaves
[  155.484456][    C0] net_ratelimit: 9953 callbacks suppressed
[  155.484473][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.502574][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.514847][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.527119][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.539395][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.551724][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.564020][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.576295][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.588618][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.601228][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.489713][    C0] net_ratelimit: 16053 callbacks suppressed
[  160.489734][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.508003][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.520347][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.532641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.544904][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.557249][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.569652][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.581958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.594357][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.606757][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)