last executing test programs:

1m16.94546459s ago: executing program 4 (id=632):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000025c0)="866b3d570029a5e6", 0x8)
sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="ef0fc10159a15fae9062105ef98f6a66c2a61d0b494074282468a41a9b087ba6ab8a13663210deb62dd4dd2d6cc221f76ce52528245a5ea7545d71059d9d2dcef986f51113e6e9851966b5e78ba1dfd5a29332dc5211f2e2994487b8efbcebff8416aaadae7badebbb451d1d2eae3737e378aa8d70102f6457a82335fc9e0808f8b2a73b90d9e2eb851f45d0687355ac9f5cf08a154c106f8dd90804270da9181a0dc16acf673360f51d", 0xaa}, {&(0x7f00000007c0)="729031d6903dd684ba3c07e25306df0aa913d21a754c3b72c725b340dd00cdbf498683e7b4ccc51cb27ef0a8024cc5fd7bca4eac06327818f2e6275b206520d9bc766c74a58ae06971f69906e18aa89f3e324f84c5b988c04fb3b81e0e7c3d58f6adf93e7aa47dd0806ea047e7de3b0c13a1d9416c0c75ba35e5a3b22352a18721c3ac8efe2456ae2fdd76d61f20f19a7ae4503b8b6576e87c4a32abb872c44bf1a6aaaf9aae14dc323653c803a3821fd2bc9ade6c7a9bd3e4ff95216372256ae845ad008cf17e4afe3b7f1882425af921f0444bacd7b9fb", 0xd8}, {&(0x7f00000008c0)="0314c724941b2e950ce4957d9ed6a0648e49d16c30966e7eea0ac3586a91f2faed73a74aee0b9e2dcb0bbd9cd8b26200ff7cea5f0061d458e3c0f57bed568c1cf45e4e574109e28b6ae5afe0da9acd9c42564fe06e5a5c08a3c7eb5e4e28e01a80bff361e081c369f6247cc23c7c00b12f93763bb172c901aad248d99d8aa0c8d83605b8904d39", 0x87}, {&(0x7f0000000980)="b49c50ccf899e6040d730d2f61ccaec3fdbe94105145aa8412e8f93b2e3fc8081ca32a32abaa4acddf27d4be7602704537924a9e841ff2b439711d388ee712a1c3efbadc61a07f8d0800a8099b96b9719c07b53be0c6b5d9629c118a397f40fc78c4db470c23fec67e0d2ee68ef13813f3248f29b56953f5b0ae1d1b185d2a70d4fc", 0x82}, {&(0x7f0000000b40)="475167062ff1921def5d6aa1546d9f8b8974e74a29016c54e88fe7bd785f8b9aee58396556686b99c2ca16d2da9adb24bd6dc5502fcaaa4a7d8cb8b9fa69f295f0b29a967e4c880cb035f4046a5305b6a088779339fe7ce464a84849ad6da4bef88c3c286623df1ebfd38fbf165a21149c8df3574ec242f10528edbc929e5986e19bd3b2270cb764e9345468fe8b71db72b8e701b0829a88608863962220f686e26a365819442f8939c6fc98c23111c28ec5c64027199b560f6cd9d642512c", 0xbf}, {&(0x7f00000001c0)="572991262d8000c1bcbdb196c2889941eb9f2cad4cd6bdf0d4c32ba4090fc10634ed25e9f2579562677a5136067a84bc70d8905822b19e0e1c837d", 0x3b}], 0x6, 0x0, 0x0, 0xc0}], 0x1, 0x0)

1m15.85302703s ago: executing program 4 (id=634):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

1m14.954833178s ago: executing program 2 (id=637):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0})
sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

1m12.627069286s ago: executing program 4 (id=640):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f0100000000000000000006240700000009058103400000000009058202080000000009050302"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$kcm(0x2b, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000040)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1})
io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m12.319084582s ago: executing program 2 (id=642):
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004f80), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000680)=""/163, 0xa3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000300)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
utimes(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3f9, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x0, 0x0, [{}, {}, {0x2}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x4}], 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="af5227031cf78ea37dfc32f2adeead72bb211983a6f70eaee5aa3b3ee693ee2db94bb59c13ca89550a254d560e4e799502c204fe84a65985c6dc65259eb6ff5f97bc92dd0450207d011df5c31be2c33d948a706bb530e3d36975933f0a3082de6c43ff373f9633e1c1a8d9b6bf40e606b8a5965d5d7e32fdc057b3b4da70936001cbcc907dd016dd76538ea35fdbfadf0ec81cf6cbe1d8d8b3eabb77a0840a86670fc2628d2a3b2050533939b5f2df6980c52b4174a5e37a72ad2e01264b3c350f332582f64240060ba013ed10dda9e369659a73e2904e4d9e52dfb41f5da4112fadb37169b33c3c90361a5123e22ba410", @ANYRES16=r2, @ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
connect$unix(r2, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000005640)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)

1m11.226248181s ago: executing program 2 (id=643):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4dc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_EMATCHES={0x43c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1f8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_META={0x54, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2c0522576b52", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0x64, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="98", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e6949b93e70242", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="66c4", @TCF_META_TYPE_VAR="a76023", @TCF_META_TYPE_VAR="08e82bd9a975dffedf14", @TCF_META_TYPE_VAR="8dfff919b512"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="a2c000a8dfc2b6d930"]}]}}, @TCF_EM_META={0xc8, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="856554", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b7f550e3aa88a9294d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8e73b72687"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="37d3b5d1afaa1380c6"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="feb9e2d7a8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="d7599d71", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{0x1000}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x0, 0x0, 0x0, {{}, "668e74dff05c58baf0fbb061717b123cb89ce91a683c343344517576e8ba09fecbf8e75b0016b7c6b2a0c8eb04e6d16b8961097b53d295ebc7eb349e652deeb958bff39a5c9ddd43b4"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'F'}}}, @TCF_EM_META={0xa4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b041fb1d85"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc70f7945540e91b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="faa1ad6e"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR=']', @TCF_META_TYPE_VAR="1c28aa45c2a9f5be09be", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="37b8d9", @TCF_META_TYPE_VAR="4e015a", @TCF_META_TYPE_VAR="32a539c9eda9606c7846", @TCF_META_TYPE_VAR="ef1e", @TCF_META_TYPE_VAR='\x00\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="b750e3f4a83c2b", @TCF_META_TYPE_VAR="0ea3f381c6", @TCF_META_TYPE_VAR="e6e27fd7db48", @TCF_META_TYPE_VAR='\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0xc}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x4dc}}, 0x40000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m10.830218745s ago: executing program 2 (id=646):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYRES64], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000bfe000/0x400000)=nil, 0x400000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x20000601)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x50000021)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$usbmon(&(0x7f00000002c0), 0x2, 0x101642)
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)

1m9.272292544s ago: executing program 4 (id=647):
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
utimes(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700100000000000080207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0xfc, 0x5, 0x20000000, 0x31, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8000, 0x9, 0x1}})
pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0x5, 0x3, 0x1d, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x6, 0x2, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x1000001, 0x3a, &(0x7f00000003c0)=""/58, 0x41000, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480), &(0x7f00000004c0)=[{0x4, 0x1, 0xc, 0x6}, {0x2, 0xfffffffa, 0x4, 0x4148e1f7c4e38c76}, {0x5, 0x3, 0xc, 0x4}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x0, 0x1, 0x800, 0x3}, {0x3, 0x4, 0x10, 0xc}, {0x0, 0x2, 0xe, 0x876d6fa798006643}], 0x10, 0x80000000, @void, @value}, 0x94)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
connect$unix(r1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000005640)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f0000000800)=""/177, 0xb1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002380)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000003780)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000034c0)=""/87, 0x57}, {0x0}], 0x2, &(0x7f0000004980)=""/119, 0x77}}], 0x4, 0x2, 0x0)

1m6.911997788s ago: executing program 4 (id=649):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000300)={0x1, 0x7})
bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c)
listen(r5, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001040), 0x106, 0x9}}, 0x20)
setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000400))
write$RDMA_USER_CM_CMD_SET_OPTION(r6, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="9c", 0x1}], 0x1)
ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000080))
socket$inet_mptcp(0x2, 0x1, 0x106)
close_range(r4, r7, 0x0)

1m6.190478726s ago: executing program 2 (id=651):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
close(r4)
recvmmsg$unix(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000)
fcntl$setsig(r0, 0xa, 0x21)
write(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000300))

1m5.951105035s ago: executing program 4 (id=653):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_usb_connect(0x6, 0x352, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0xa8, 0xf2, 0x94, 0x8, 0x12d1, 0xaee7, 0xf831, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x340, 0x3, 0x5, 0x0, 0x0, 0xfc, [{{0x9, 0x4, 0xea, 0x3, 0xe, 0xff, 0x6, 0x19, 0x35, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x5, 0x5c}}, {{0x9, 0x5, 0x3, 0x1, 0x0, 0x0, 0x9, 0xd1}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xfc, 0x1, 0x7}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x4, 0x79, 0xd, [@generic={0x5, 0x21, "95dd1b"}]}}, {{0x9, 0x5, 0x5, 0x9c33e15ea3485f0c, 0x10, 0x5f, 0xcb, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x20, 0x3, 0xc7, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x5, 0x6b, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x3d, 0x1}}, {{0x9, 0x5, 0xe, 0x14, 0x8, 0x19, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x10}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x2f, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5b923342dbdf623b, 0x1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x2, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x5, 0xff, 0x8, [@generic={0xde, 0x23, "b42bf78aa0fa3e60752f70b33d200698a24c5244430a93055e5a477aeed0403bddf85040ace7a3cc7881b412e46d11f10452b463e7e520321b214b6b72fd4bfe418eee558cb5165722bd6830679a10cae4b12a1b85dd064edd440df76f5a8eb50401f7d4eeb7f115259bd9df0909659068a3a421ca87577e4c1e8430a141ed22ed02d086e6815581fd38e055070a8cfd67680416ba9496946d8be75049fe948c82af56c68b021d1a580ae92e75199a83501a770fab12ce0265f7cb745daeed83933d351c1ec28ec11dd1a8bfbdafa515365415b493870735d7b5ff1f"}]}}]}}, {{0x9, 0x4, 0x3, 0x7, 0x5, 0x59, 0x9f, 0xb7, 0x6, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b50cc5a892"}, {0x5, 0x24, 0x0, 0x5ae9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0xd, 0x3}, {0x6, 0x24, 0x1a, 0x3}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x43, 0x24, 0x13, 0x5, "fd2523d302c13a9e1d326b7b16d7a725fc2d8ae356a488df102ec43c06f42bfebf1854f374b89b84c06f76c7a2a22cd52ea458f4f20043b41441b5b46011ca"}, @network_terminal={0x7, 0x24, 0xa, 0xd4, 0x5, 0x4, 0xd4}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2b130d3054"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7df, 0x2}, {0x6, 0x24, 0x1a, 0x2}}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x71, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x18, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x9, 0x45, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xd, 0x0, 0x4d}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0x2, 0xb, [@generic={0x52, 0x30, "fa41a9e144cf2da1f1cf0f8a6dd97de32cd33fe4ca1a62903064b37d13812071cd2d9f4d27a3e2980911ce3564834c46669b3a360fd7641d194bd031051d63fa4ea60d3b82ebcedec9f4d46a8c3a5bbc"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xc}}]}}, {{0x9, 0x4, 0x8f, 0x7, 0x2, 0x83, 0x4b, 0x57, 0x3, [@hid_hid={0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x17d}}], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0xe8, 0x4, 0x4, [@generic={0x3f, 0x1, "e2a1ca58c03ef5bd4f80014f50b457731fd9dc33ccc59d250eb886290ec73a562bb64e71c0055cef21265142ceed335d774c47a5096da01f5c46e3334a"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0xd, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x7ff}]}}]}}]}}]}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

1m3.313503518s ago: executing program 2 (id=656):
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}}, 0x20000004)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

28.973981638s ago: executing program 0 (id=718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="016f080001000000000020000000460036729bf3ff912d003effac1414aa00"/45, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00030090780018090300050200000000000000000002d58838068b91000000"], 0x4e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet(0x2b, 0x2, 0xc34)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x8905, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xffff, 0xfff3}, {0xe, 0x7}}, [{0xfffffffffffffede, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4b, 0x5, 0x20000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, r7, 0x0, 0x7}, 0x38)
setreuid(0xffffffffffffffff, r6)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)

25.822195318s ago: executing program 3 (id=724):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

25.569289665s ago: executing program 1 (id=725):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

24.592237551s ago: executing program 3 (id=726):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

23.651580472s ago: executing program 3 (id=727):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
fdatasync(0xffffffffffffffff)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = syz_io_uring_setup(0x5ad9, &(0x7f00000035c0)={0x0, 0x4, 0x10100, 0x0, 0x3}, &(0x7f0000001500)=<r5=>0x0, &(0x7f0000003580)=<r6=>0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0})
socket$igmp(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x801)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

23.61410659s ago: executing program 1 (id=728):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

21.712378937s ago: executing program 3 (id=729):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
socket$inet6(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})

21.224510805s ago: executing program 0 (id=730):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
close(r4)
recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000)
fcntl$setsig(r0, 0xa, 0x21)
write(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000300))

20.157621052s ago: executing program 0 (id=731):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

17.381686663s ago: executing program 1 (id=732):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x47c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x3e8, 0x2, [@TCA_FLOW_EMATCHES={0x3dc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_META={0x54, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2c0522576b52", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0xcc, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="856554", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b7f550e3aa88a9294d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8e73b72687"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="37d3b5d1afaa1380c6"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="feb9e2d7a8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="d7599d71", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{0x1000}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x0, 0x0, 0x0, {{}, "668e74dff05c58baf0fbb061717b123cb89ce91a683c343344517576e8ba09fecbf8e75b0016b7c6b2a0c8eb04e6d16b8961097b53d295ebc7eb349e652deeb958bff39a5c9ddd43b4"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'F'}}}, @TCF_EM_META={0xa4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b041fb1d85"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc70f7945540e91b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="faa1ad6e"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR=']', @TCF_META_TYPE_VAR="1c28aa45c2a9f5be09be", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="37b8d9", @TCF_META_TYPE_VAR="4e015a", @TCF_META_TYPE_VAR="32a539c9eda9606c7846", @TCF_META_TYPE_VAR="ef1e", @TCF_META_TYPE_VAR='\x00\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="b750e3f4a83c2b", @TCF_META_TYPE_VAR="0ea3f381c6", @TCF_META_TYPE_VAR="e6e27fd7db48", @TCF_META_TYPE_VAR='\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0xc}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x47c}}, 0x40000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

16.739680505s ago: executing program 3 (id=733):
r0 = socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getitimer(0x2, &(0x7f0000000b00))
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x800)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000800)={0x2, 0x3, 0x4, 0x1, 0xfffffff8})
unshare(0x2040400)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
lseek(r5, 0x0, 0x2)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x3fffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x1bc, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff7ffffffff}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0xb8, 0x3, {{'deflate\x00'}, 0x380, "efa16e6467bd638175b9f1554f7065ae05ce9d39a846cf5e863a9b404a9272b32c1c50c4020c3b2195db54f24fb7e6eea48ff56539ea24f1868d5f1dff282c918411c88380b8f66ccb29fe2950775b25f32d009a2a2035e885cb3e5468e0f38a95b00aa04849a0db7aaca7ba1f829d19"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x717, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000000c0)=0x41d9, 0x4)
recvmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000180)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/29, 0x1d}, 0x7fff}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/96, 0x60}], 0x4, &(0x7f0000000980)=""/219, 0xdb}, 0xd}], 0x2, 0x1000000001fe, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

16.621673035s ago: executing program 0 (id=734):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

15.976386183s ago: executing program 1 (id=735):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000018c0)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRESOCT=r0, @ANYBLOB="02200000c04471d7300012800b000100697036746e6c00002000028005000900290000001400020000000000000000000000000000000001080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121302, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x321000)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, 0x0)
read(r1, &(0x7f00000003c0)=""/4096, 0x1000)
sched_setscheduler(0x0, 0x5, &(0x7f0000000100))
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f00000013c0)=ANY=[@ANYBLOB="20204d0f2d96bd68b4df4d823bb43395fcec720c3e9b5fc7099ff0d5713091fdb5852fb487b7defccd10068f761f0da784cadb5f1d3600986db602ede6e157b3b8826663d1138ab96776193f9764720173ccfb1e5f772843285535fe37bff6bc58bd042422315a6f93706e136c64ad2bc6a2629ee7cab32b6a38b51b670219729bba73dfdf0e5f5d36c83c470fd466d5f7e2c4b4242fb73a9ea946ed51898ce4ad7c25e1162269e19a50804c1b72026a1d32aea6f08ceaf3da7bb16aa8fcacdcbc036d03cc1cfcdd97044e3c2781b671ac9dbf4add9c88ce", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf251200000008002c000700000008003900ae110000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read(r2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00060000008100000003000000000000000000000200000000000000"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b000000000000000000000400000400000000009ca83dfc84337ab9ab2848b92e5ccf1e471c141a9dd15cb256549cb55c81418876aab2ecbe133c8dfd7703f99db89c103c5cbb11a7f7bcef8ba1043899493eb04315ac9af8045264d2fdb1252c7f52274dd693f8fe7f7d906947dc0f0795b871152640effd995ac61603ce412e0b24371d3b5e3aa666f6d68025b624c3423ceeb61118fabead20ed6f9e38a9ee2ecdaeeeed2240d1e1e0b55c0c5809a9e58d35ee7434ade7ac9eae81a092c90d0df89eae28a2992b3a099c9fbce7acb65a47f458fd0b3a3ea9cba72c9e016f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001e00"/28], 0x48)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={<r4=>0x0, 0x4}, &(0x7f0000001540)=0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4102}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x77052b15b374cf0b}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xeebc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x8840}, 0x4051)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001580)={r4, 0x5}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000f30000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800d00010073796e70726f78790000000014000280050002000000000006000140000000000900010073797a3000000000b1bf75048d31960900020073797a3200000004140000001100010000000000001e223aaf36863cb0cd4f64dea0ae41731a5feaa61c0419ee6f6e7a4bab97c53d7aafad3bf51d120d06b87ad49d128942af1423373d7c70"], 0x80}}, 0x0)
bind$alg(r2, &(0x7f00000014c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x4, @mcast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x8c)

15.014516452s ago: executing program 3 (id=736):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x3a)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r0, 0x0, r1, 0x0, 0x400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
socket(0x840000000002, 0x3, 0x100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0x0, 0xffffffff, 0x21, 0x0, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000180)=0xfffeffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

11.258124045s ago: executing program 1 (id=737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000300)={0x1, 0x7})
bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c)
listen(r5, 0x3)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="9c", 0x1}], 0x1)
ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000080))
socket$inet_mptcp(0x2, 0x1, 0x106)
close_range(r4, r7, 0x0)

8.884004253s ago: executing program 1 (id=738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="016f080001000000000020000000460036729bf3ff912d003effac1414aa00"/45, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00030090780018090300050200000000000000000002d58838068b91000000"], 0x4e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet(0x2b, 0x2, 0xc34)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x8905, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xffff, 0xfff3}, {0xe, 0x7}}, [{0xfffffffffffffede, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4b, 0x5, 0x20000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, r7, 0x0, 0x7}, 0x38)
setreuid(0xffffffffffffffff, r6)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)

6.788607927s ago: executing program 0 (id=739):
socket$inet6(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe9, 0x67, 0xc5, 0x40, 0x13b1, 0x42, 0x8cf4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x4, 0x1, 0xb6, 0xf9, 0x71, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x3ff}}]}}]}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

0s ago: executing program 0 (id=741):
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000039000000080003", @ANYRES32, @ANYBLOB="04005a7bce74c012ce77a430171247c98cb776cdc8db725e9d61a0d1c5d3fe3425d7b8d688c59e99fd62a04b158f83e17e"], 0x20}}, 0x20000004)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)

kernel console output (not intermixed with test programs):

98][ T6720]  <TASK>
[  215.910455][ T6720]  dump_stack_lvl+0x241/0x360
[  215.915187][ T6720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.920429][ T6720]  ? __pfx__printk+0x10/0x10
[  215.925053][ T6720]  ? tomoyo_path_number_perm+0x71a/0x880
[  215.930722][ T6720]  ? __pfx_lock_release+0x10/0x10
[  215.935795][ T6720]  should_fail_ex+0x3b0/0x4e0
[  215.940521][ T6720]  _copy_from_user+0x2f/0xe0
[  215.945150][ T6720]  video_usercopy+0x378/0x1180
[  215.949960][ T6720]  ? __pfx___video_do_ioctl+0x10/0x10
[  215.955371][ T6720]  ? __pfx_video_usercopy+0x10/0x10
[  215.960603][ T6720]  ? smack_file_ioctl+0x2f7/0x3a0
[  215.965675][ T6720]  ? __fget_files+0x3f3/0x470
[  215.970406][ T6720]  v4l2_ioctl+0x189/0x1e0
[  215.974793][ T6720]  ? __pfx_v4l2_ioctl+0x10/0x10
[  215.979705][ T6720]  __se_sys_ioctl+0xf9/0x170
[  215.984338][ T6720]  do_syscall_64+0xf3/0x230
[  215.988884][ T6720]  ? clear_bhb_loop+0x35/0x90
[  215.993605][ T6720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.999540][ T6720] RIP: 0033:0x7f358b77def9
[  216.003988][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.023628][ T6720] RSP: 002b:00007f358c5e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  216.032214][ T6720] RAX: ffffffffffffffda RBX: 00007f358b935f80 RCX: 00007f358b77def9
[  216.040226][ T6720] RDX: 0000000020000080 RSI: 00000000c0405602 RDI: 0000000000000003
[  216.048228][ T6720] RBP: 00007f358c5e2090 R08: 0000000000000000 R09: 0000000000000000
[  216.056229][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.064229][ T6720] R13: 0000000000000000 R14: 00007f358b935f80 R15: 00007ffff68605a8
[  216.072251][ T6720]  </TASK>
[  216.125217][ T5266] usb 5-1: Product: syz
[  216.243091][ T5266] usb 5-1: Manufacturer: syz
[  216.366148][ T5266] usb 5-1: SerialNumber: syz
[  216.470326][ T5266] usb 5-1: config 0 descriptor??
[  217.745365][ T5266] usb 5-1: USB disconnect, device number 12
[  219.350666][ T6762] netlink: 35 bytes leftover after parsing attributes in process `syz.4.360'.
[  219.589436][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'.
[  222.515097][ T5229] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  222.699012][ T5305] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  223.319546][ T5305] usb 1-1: Using ep0 maxpacket: 8
[  225.045120][ T5305] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  225.046641][ T6810] netlink: 'syz.3.371': attribute type 27 has an invalid length.
[  225.057638][ T5305] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  225.079913][ T5305] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  225.090090][ T5305] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  225.103144][ T5305] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  225.112775][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.408376][ T5305] usb 1-1: usb_control_msg returned -71
[  225.414228][ T5305] usbtmc 1-1:16.0: can't read capabilities
[  225.447754][ T5305] usb 1-1: USB disconnect, device number 12
[  226.779612][ T6829] FAULT_INJECTION: forcing a failure.
[  226.779612][ T6829] name failslab, interval 1, probability 0, space 0, times 0
[  226.803509][   T29] audit: type=1804 audit(1727116078.625:5): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.377" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0
[  227.277616][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.1.377 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  227.288113][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  227.298232][ T6829] Call Trace:
[  227.301644][ T6829]  <TASK>
[  227.304608][ T6829]  dump_stack_lvl+0x241/0x360
[  227.309341][ T6829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.314585][ T6829]  ? __pfx__printk+0x10/0x10
[  227.319220][ T6829]  ? fs_reclaim_acquire+0x93/0x140
[  227.324382][ T6829]  ? __pfx___might_resched+0x10/0x10
[  227.329722][ T6829]  should_fail_ex+0x3b0/0x4e0
[  227.334446][ T6829]  ? ima_alloc_init_template+0x162/0x6e0
[  227.340098][ T6829]  should_failslab+0xac/0x100
[  227.344785][ T6829]  ? ima_alloc_init_template+0x162/0x6e0
[  227.350422][ T6829]  __kmalloc_noprof+0xd8/0x400
[  227.355190][ T6829]  ima_alloc_init_template+0x162/0x6e0
[  227.360661][ T6829]  ima_add_violation+0x220/0x500
[  227.365600][ T6829]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  227.370999][ T6829]  ? __pfx_ima_add_violation+0x10/0x10
[  227.376478][ T6829]  ? ima_d_path+0x1a4/0x270
[  227.380991][ T6829]  ? irqentry_exit+0x63/0x90
[  227.385615][ T6829]  ? ima_get_action+0x75/0xb0
[  227.390334][ T6829]  process_measurement+0x779/0x1fb0
[  227.395585][ T6829]  ? __pfx_process_measurement+0x10/0x10
[  227.401261][ T6829]  ? mark_lock+0x9a/0x360
[  227.405611][ T6829]  ? __lock_acquire+0x1384/0x2050
[  227.410677][ T6829]  ima_file_mmap+0x13d/0x2b0
[  227.415277][ T6829]  ? __pfx_ima_file_mmap+0x10/0x10
[  227.420410][ T6829]  ? smack_mmap_file+0x155/0x680
[  227.425350][ T6829]  ? __pfx_lock_acquire+0x10/0x10
[  227.430386][ T6829]  security_mmap_file+0x7e7/0xa40
[  227.435418][ T6829]  vm_mmap_pgoff+0x141/0x3d0
[  227.440036][ T6829]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  227.445178][ T6829]  ? __fget_files+0x29/0x470
[  227.449778][ T6829]  ? __fget_files+0x3f3/0x470
[  227.454460][ T6829]  ? __fget_files+0x29/0x470
[  227.459074][ T6829]  ksys_mmap_pgoff+0x4eb/0x720
[  227.463853][ T6829]  ? __x64_sys_mmap+0x7f/0x140
[  227.468627][ T6829]  do_syscall_64+0xf3/0x230
[  227.473156][ T6829]  ? clear_bhb_loop+0x35/0x90
[  227.477838][ T6829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.483733][ T6829] RIP: 0033:0x7f705d97def9
[  227.488146][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.500288][ T6838] blktrace: Concurrent blktraces are not allowed on loop7
[  227.507756][ T6829] RSP: 002b:00007f705e847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  227.507811][ T6829] RAX: ffffffffffffffda RBX: 00007f705db35f80 RCX: 00007f705d97def9
[  227.507829][ T6829] RDX: 0000000000000006 RSI: 0000000000002000 RDI: 0000000020000000
[  227.507845][ T6829] RBP: 00007f705e847090 R08: 0000000000000007 R09: 0000000000000000
[  227.507860][ T6829] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  227.507875][ T6829] R13: 0000000000000000 R14: 00007f705db35f80 R15: 00007ffe344e7868
[  227.507908][ T6829]  </TASK>
[  227.539035][   T29] audit: type=1800 audit(1727116078.635:6): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.377" name="/" dev="fuse" ino=1 res=0 errno=0
[  227.645528][   T29] audit: type=1804 audit(1727116079.535:7): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.377" name="/newroot/23/file1" dev="fuse" ino=1 res=0 errno=0
[  227.845752][ T6810] team0: left promiscuous mode
[  227.850826][ T6810] team_slave_0: left promiscuous mode
[  227.856740][ T6810] team_slave_1: left promiscuous mode
[  227.947283][   T29] audit: type=1804 audit(1727116079.535:8): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.377" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0
[  228.083783][   T29] audit: type=1800 audit(1727116079.535:9): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.377" name="/" dev="fuse" ino=1 res=0 errno=0
[  228.415807][ T6849] ebt_among: src integrity fail: 300
[  228.640302][ T6850] syz.1.379[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.640407][ T6850] syz.1.379[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.652041][ T6850] syz.1.379[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.792661][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.821530][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.989191][ T5269] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  229.107567][ T6810] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.117764][ T6810] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.127232][ T6810] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.137454][ T6810] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.152055][ T5269] usb 2-1: config index 0 descriptor too short (expected 1682, got 146)
[  229.160885][ T5269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.172328][ T5269] usb 2-1: config 0 has no interfaces?
[  229.183029][ T5269] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  229.192589][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  229.202254][ T5269] usb 2-1: SerialNumber: syz
[  229.218311][ T5269] usb 2-1: config 0 descriptor??
[  229.512195][ T5269] usb 2-1: USB disconnect, device number 12
[  229.844755][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'.
[  229.922873][ T6864] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139)
[  232.960090][ T5269] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  234.386735][ T6889] FAULT_INJECTION: forcing a failure.
[  234.386735][ T6889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.400321][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: syz.3.390 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  234.410610][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  234.420700][ T6889] Call Trace:
[  234.424002][ T6889]  <TASK>
[  234.426960][ T6889]  dump_stack_lvl+0x241/0x360
[  234.431689][ T6889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.437010][ T6889]  ? __pfx__printk+0x10/0x10
[  234.441643][ T6889]  ? snprintf+0xda/0x120
[  234.445921][ T6889]  should_fail_ex+0x3b0/0x4e0
[  234.450657][ T6889]  _copy_to_user+0x2f/0xb0
[  234.455114][ T6889]  simple_read_from_buffer+0xca/0x150
[  234.460526][ T6889]  proc_fail_nth_read+0x1e9/0x250
[  234.465605][ T6889]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  234.471200][ T6889]  ? rw_verify_area+0x55e/0x6f0
[  234.476085][ T6889]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  234.481672][ T6889]  vfs_read+0x201/0xbc0
[  234.485862][ T6889]  ? __pfx_lock_release+0x10/0x10
[  234.490937][ T6889]  ? __pfx_vfs_read+0x10/0x10
[  234.495654][ T6889]  ? __fget_files+0x3f3/0x470
[  234.500377][ T6889]  ? __fdget_pos+0x24e/0x320
[  234.505008][ T6889]  ksys_read+0x1a0/0x2c0
[  234.509284][ T6889]  ? __pfx_ksys_read+0x10/0x10
[  234.514051][ T6889]  ? do_syscall_64+0x100/0x230
[  234.518916][ T6889]  ? do_syscall_64+0xb6/0x230
[  234.523623][ T6889]  do_syscall_64+0xf3/0x230
[  234.528128][ T6889]  ? clear_bhb_loop+0x35/0x90
[  234.532806][ T6889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.538700][ T6889] RIP: 0033:0x7fc97e57c93c
[  234.543201][ T6889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  234.562893][ T6889] RSP: 002b:00007fc97f2cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  234.571307][ T6889] RAX: ffffffffffffffda RBX: 00007fc97e735f80 RCX: 00007fc97e57c93c
[  234.579304][ T6889] RDX: 000000000000000f RSI: 00007fc97f2cc0a0 RDI: 0000000000000004
[  234.587273][ T6889] RBP: 00007fc97f2cc090 R08: 0000000000000000 R09: 0000000000000000
[  234.595242][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.603213][ T6889] R13: 0000000000000000 R14: 00007fc97e735f80 R15: 00007ffe6197cfa8
[  234.611198][ T6889]  </TASK>
[  234.699544][ T5269] usb 5-1: Using ep0 maxpacket: 8
[  234.722280][ T5269] usb 5-1: config 0 has an invalid interface number: 143 but max is 0
[  234.749031][ T5269] usb 5-1: config 0 has no interface number 0
[  234.755188][ T5269] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 0.9b
[  234.764681][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.780100][ T5269] usb 5-1: config 0 descriptor??
[  235.008738][ T5269] viperboard 5-1:0.143: version 0.00 found at bus 005 address 013
[  235.026329][ T5269] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  235.035272][ T5269] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  235.122116][ T5266] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  235.208757][ T6884] netlink: 'syz.4.389': attribute type 10 has an invalid length.
[  235.233930][ T6884] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  235.264989][ T6884] netlink: 'syz.4.389': attribute type 2 has an invalid length.
[  235.300802][ T5266] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  235.310553][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.346191][ T5266] usb 2-1: config 0 descriptor??
[  235.370093][ T5266] gspca_main: cpia1-2.14.0 probing 0813:0001
[  235.790363][ T5266] gspca_cpia1: usb_control_msg 03, error -71
[  235.834145][ T5266] gspca_cpia1: usb_control_msg 01, error -71
[  235.846167][ T5266] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  235.893457][ T5266] usb 2-1: USB disconnect, device number 13
[  236.385745][ T6905] netlink: 'syz.0.396': attribute type 8 has an invalid length.
[  236.544974][ T5305] usb 5-1: USB disconnect, device number 13
[  237.480828][ T6915] ebt_among: src integrity fail: 300
[  238.374597][ T6920] ebt_among: dst integrity fail: 101
[  238.966473][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.975825][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.984949][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.993718][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.001472][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  239.008947][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.499713][ T5266] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  239.668173][ T5266] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  239.692765][ T5266] usb 1-1: config 0 has no interface number 0
[  239.703088][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.721372][ T5266] usb 1-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  239.763530][ T5266] usb 1-1: config 0 interface 126 has no altsetting 0
[  239.777419][ T5266] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[  239.787390][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.916181][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.995781][ T6925] chnl_net:caif_netlink_parms(): no params data found
[  240.020287][ T5266] usb 1-1: Product: syz
[  240.024684][ T5266] usb 1-1: Manufacturer: syz
[  240.029478][ T5266] usb 1-1: SerialNumber: syz
[  240.036548][ T5266] usb 1-1: config 0 descriptor??
[  240.403101][ T5266] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  240.453694][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.671501][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.866313][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.882408][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.896016][ T6925] bridge_slave_0: entered allmulticast mode
[  240.903436][ T6925] bridge_slave_0: entered promiscuous mode
[  240.921227][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.929346][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.936713][ T6925] bridge_slave_1: entered allmulticast mode
[  240.982832][ T6925] bridge_slave_1: entered promiscuous mode
[  241.156422][ T6965] blktrace: Concurrent blktraces are not allowed on loop7
[  241.190448][ T5225] Bluetooth: hci6: command tx timeout
[  241.439830][ T5645] usb 1-1: Failed to submit usb control message: -110
[  241.447169][ T5645] usb 1-1: unable to send the bmi data to the device: -110
[  241.462430][ T5645] usb 1-1: unable to get target info from device
[  241.470670][ T5645] usb 1-1: could not get target info (-110)
[  241.483392][ T5645] usb 1-1: could not probe fw (-110)
[  241.574332][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.932619][ T5216] usb 1-1: USB disconnect, device number 13
[  242.018207][ T6968] ebt_limit: overflow, try lower: 0/0
[  242.060850][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.419351][ T6925] team0: Port device team_slave_0 added
[  242.439326][   T11] bridge_slave_1: left allmulticast mode
[  242.482110][   T11] bridge_slave_1: left promiscuous mode
[  242.503554][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.739084][   T11] bridge_slave_0: left allmulticast mode
[  242.744802][   T11] bridge_slave_0: left promiscuous mode
[  243.447412][ T5225] Bluetooth: hci6: command tx timeout
[  243.566827][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'.
[  243.620684][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.579792][ T5225] Bluetooth: hci6: command tx timeout
[  247.007880][   T29] audit: type=1804 audit(1727116098.895:10): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.419" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0
[  247.027613][   T29] audit: type=1800 audit(1727116098.905:11): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.419" name="/" dev="fuse" ino=1 res=0 errno=0
[  247.048520][   T29] audit: type=1804 audit(1727116098.905:12): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.419" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0
[  247.068863][   T29] audit: type=1804 audit(1727116098.905:13): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.419" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0
[  247.088579][   T29] audit: type=1800 audit(1727116098.905:14): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.419" name="/" dev="fuse" ino=1 res=0 errno=0
[  247.966742][ T7021] blktrace: Concurrent blktraces are not allowed on loop7
[  248.476766][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.491924][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.505075][   T11] bond0 (unregistering): Released all slaves
[  248.518276][ T6925] team0: Port device team_slave_1 added
[  248.549084][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  248.638959][ T5225] Bluetooth: hci6: command tx timeout
[  248.674038][ T7024] xt_l2tp: wrong L2TP version: 255
[  249.032279][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.056301][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.137046][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.211364][ T7045] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  249.257552][ T7045] overlayfs: missing 'lowerdir'
[  249.290466][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.297560][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.330527][ T7048] FAULT_INJECTION: forcing a failure.
[  249.330527][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.344769][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.0.427 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  249.355098][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  249.365199][ T7048] Call Trace:
[  249.368484][ T7048]  <TASK>
[  249.371432][ T7048]  dump_stack_lvl+0x241/0x360
[  249.376126][ T7048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.381333][ T7048]  ? __pfx__printk+0x10/0x10
[  249.385932][ T7048]  ? __pfx_lock_release+0x10/0x10
[  249.390988][ T7048]  should_fail_ex+0x3b0/0x4e0
[  249.395703][ T7048]  _copy_from_user+0x2f/0xe0
[  249.400317][ T7048]  memdup_user+0x64/0xc0
[  249.404574][ T7048]  strndup_user+0x68/0xc0
[  249.408922][ T7048]  __se_sys_mount+0x9f/0x3c0
[  249.413533][ T7048]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  249.419536][ T7048]  ? __pfx___se_sys_mount+0x10/0x10
[  249.424759][ T7048]  ? do_syscall_64+0x100/0x230
[  249.429553][ T7048]  ? __x64_sys_mount+0x20/0xc0
[  249.434339][ T7048]  do_syscall_64+0xf3/0x230
[  249.438865][ T7048]  ? clear_bhb_loop+0x35/0x90
[  249.443557][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.449472][ T7048] RIP: 0033:0x7f358b77def9
[  249.453894][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.473505][ T7048] RSP: 002b:00007f358c5e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  249.481930][ T7048] RAX: ffffffffffffffda RBX: 00007f358b935f80 RCX: 00007f358b77def9
[  249.489907][ T7048] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000
[  249.497882][ T7048] RBP: 00007f358c5e2090 R08: 0000000020000140 R09: 0000000000000000
[  249.505863][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.513842][ T7048] R13: 0000000000000000 R14: 00007f358b935f80 R15: 00007ffff68605a8
[  249.521830][ T7048]  </TASK>
[  249.542520][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.679062][ T5265] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  249.834696][ T5265] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  249.847538][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.866990][ T5265] usb 4-1: Product: syz
[  249.873391][ T5265] usb 4-1: Manufacturer: syz
[  249.878058][ T5265] usb 4-1: SerialNumber: syz
[  249.899557][ T6925] hsr_slave_0: entered promiscuous mode
[  249.906874][ T6925] hsr_slave_1: entered promiscuous mode
[  249.918365][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.937839][ T6925] Cannot create hsr debugfs directory
[  249.977367][ T5265] usb 4-1: config 0 descriptor??
[  249.992549][   T11] hsr_slave_0: left promiscuous mode
[  250.010377][ T5265] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  250.025496][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.068082][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.096562][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.118171][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.220889][   T11] veth1_macvtap: left promiscuous mode
[  250.226489][   T11] veth0_macvtap: left promiscuous mode
[  250.233560][   T11] veth1_vlan: left promiscuous mode
[  250.239015][   T11] veth0_vlan: left promiscuous mode
[  250.269559][ T7049] netlink: 256 bytes leftover after parsing attributes in process `syz.3.424'.
[  250.288540][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.317155][ T5216] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  250.332748][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.561986][ T5216] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  250.570472][ T5216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.588956][ T5216] usb 1-1: config 0 has no interface number 0
[  250.599096][ T5216] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  250.676386][ T5216] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  250.766972][ T5216] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  250.822497][ T5216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.780868][ T5216] usb 1-1: config 0 descriptor??
[  251.830981][ T5216] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  252.593930][   T11] team0 (unregistering): Port device team_slave_1 removed
[  252.638668][   T11] team0 (unregistering): Port device team_slave_0 removed
[  252.874084][  T137] usb 1-1: Failed to submit usb control message: -110
[  252.888437][  T137] usb 1-1: unable to send the bmi data to the device: -110
[  252.910830][  T137] usb 1-1: unable to get target info from device
[  252.918288][  T137] usb 1-1: could not get target info (-110)
[  252.934927][  T137] usb 1-1: could not probe fw (-110)
[  253.077261][ T7049] netlink: 'syz.3.424': attribute type 10 has an invalid length.
[  253.085715][ T7049] batman_adv: batadv0: Adding interface: team0
[  253.096245][ T7049] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.126511][ T7049] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  253.157408][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'.
[  253.163884][ T5305] usb 4-1: USB disconnect, device number 22
[  253.208178][   T25] usb 1-1: USB disconnect, device number 14
[  254.806992][ T7088] netlink: 'syz.3.433': attribute type 10 has an invalid length.
[  254.815296][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'.
[  254.837820][ T7088] ipvlan1: entered promiscuous mode
[  254.843992][ T7088] ipvlan1: entered allmulticast mode
[  254.851488][ T7088] veth0_vlan: entered allmulticast mode
[  254.908332][ T7088] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  255.098171][ T7103] blktrace: Concurrent blktraces are not allowed on loop7
[  255.832640][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.839675][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  255.979231][ T5305] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  256.210803][ T5305] usb 2-1: Using ep0 maxpacket: 16
[  256.333437][ T5305] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  256.349408][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.364614][ T5305] usb 2-1: Product: syz
[  256.404873][ T5305] usb 2-1: Manufacturer: syz
[  256.429354][ T5305] usb 2-1: SerialNumber: syz
[  256.547837][ T5305] usb 2-1: config 0 descriptor??
[  256.660751][ T5305] as10x_usb: device has been detected
[  256.670673][ T5305] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  257.240717][ T5305] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  257.292626][ T5305] as10x_usb: error during firmware upload part1
[  257.309896][ T5305] Registered device Sky IT Digital Key (green led)
[  257.877704][   T25] usb 2-1: USB disconnect, device number 14
[  258.073644][   T25] Unregistered device Sky IT Digital Key (green led)
[  258.086493][   T25] as10x_usb: device has been disconnected
[  258.299360][ T7139] netlink: 'syz.3.443': attribute type 10 has an invalid length.
[  258.307147][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'.
[  258.317966][ T7139] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  258.733820][ T6925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  258.779459][ T6925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  258.807263][ T6925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  258.869189][ T5305] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  258.907038][ T6925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  259.023167][ T5305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.044686][ T5305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  259.087076][ T5305] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  259.132769][ T5305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.156469][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.198706][ T5305] usb 2-1: Product: syz
[  259.211804][ T5305] usb 2-1: Manufacturer: syz
[  259.235080][ T5305] usb 2-1: SerialNumber: syz
[  259.288655][ T5305] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  259.309664][ T5305] cdc_ncm 2-1:1.0: bind() failure
[  259.328267][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.428041][ T6925] 8021q: adding VLAN 0 to HW filter on device team0
[  259.497237][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.504468][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.631276][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.631396][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.638474][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.498707][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.778986][ T5305] usb 2-1: USB disconnect, device number 15
[  265.604113][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.724509][ T6925] veth0_vlan: entered promiscuous mode
[  265.915829][ T6925] veth1_vlan: entered promiscuous mode
[  267.203705][ T6925] veth0_macvtap: entered promiscuous mode
[  267.293650][ T6925] veth1_macvtap: entered promiscuous mode
[  267.493132][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.539692][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.623608][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.691455][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.829343][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.845630][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.008630][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.299157][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.386912][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.429783][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'.
[  268.465699][ T7209] bridge_slave_1: left allmulticast mode
[  268.559540][ T7209] bridge_slave_1: left promiscuous mode
[  268.571755][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.552163][ T7209] bridge_slave_0: left allmulticast mode
[  269.557864][ T7209] bridge_slave_0: left promiscuous mode
[  269.564401][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.603351][ T5225] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  269.846861][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.899526][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.943912][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.991478][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.051806][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.124763][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.161141][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.227203][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.356345][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.424087][ T6925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.505752][ T6925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.616072][ T6925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.727182][ T6925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.130783][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.162683][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.343655][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.647846][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.516291][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'.
[  273.525340][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[  274.884187][ T7097] coredump: 326(syz.4.434): written to core: VMAs: 34, size 99516416; core: 62124998 bytes, pos 99524608
[  275.399681][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.458779][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.586376][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[  276.429607][ T7276] bridge_slave_1: left allmulticast mode
[  276.457386][ T7276] bridge_slave_1: left promiscuous mode
[  276.488135][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.699681][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  276.727723][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  276.748016][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  276.758734][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.343906][ T7276] bridge_slave_0: left allmulticast mode
[  277.351962][ T7276] bridge_slave_0: left promiscuous mode
[  277.358545][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.307880][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[  278.870788][ T5229] Bluetooth: hci2: command tx timeout
[  279.463337][ T7332] program syz.0.475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.557824][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.733273][ T7346] ebt_among: src integrity fail: 300
[  280.828304][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.929151][ T5267] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  280.951770][ T5229] Bluetooth: hci2: command tx timeout
[  281.008414][ T1187] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  281.073008][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.083663][ T5267] usb 3-1: Using ep0 maxpacket: 8
[  281.128592][ T5267] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  281.146543][ T7283] chnl_net:caif_netlink_parms(): no params data found
[  281.194526][ T5267] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  281.210791][ T1187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.221236][ T1187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  281.221379][ T5267] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  281.248999][ T5267] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.270902][ T5267] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  281.287342][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.308186][ T1187] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  281.324048][ T1107] bond0: (slave netdevsim0): Releasing backup interface
[  281.356334][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.991972][ T5267] usb 3-1: GET_CAPABILITIES returned 0
[  281.999746][ T5267] usbtmc 3-1:16.0: can't read capabilities
[  283.173183][ T5229] Bluetooth: hci2: command tx timeout
[  284.341005][ T1187] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  284.350211][ T1187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.358390][ T1187] usb 1-1: Product: syz
[  284.362687][ T1187] usb 1-1: Manufacturer: syz
[  284.367334][ T1187] usb 1-1: SerialNumber: syz
[  284.397340][ T1187] usb 1-1: can't set config #1, error -71
[  285.219014][ T5229] Bluetooth: hci2: command tx timeout
[  285.306974][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.325548][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.375064][ T1187] usb 1-1: USB disconnect, device number 15
[  285.390135][ T7283] bridge_slave_0: entered allmulticast mode
[  285.397264][ T7283] bridge_slave_0: entered promiscuous mode
[  285.407527][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.414765][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.439481][ T7283] bridge_slave_1: entered allmulticast mode
[  285.450678][ T7283] bridge_slave_1: entered promiscuous mode
[  285.524986][ T1107] bridge_slave_0: left allmulticast mode
[  285.559391][ T1107] bridge_slave_0: left promiscuous mode
[  285.565206][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.665968][ T1107] bridge_slave_1: left allmulticast mode
[  285.709140][ T1107] bridge_slave_1: left promiscuous mode
[  285.755457][ T1107] bridge2: port 1(bridge_slave_1) entered disabled state
[  285.953310][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'.
[  287.487087][ T7397] ebt_among: dst integrity fail: 101
[  287.802121][ T7403] ebt_among: src integrity fail: 300
[  288.827869][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.855397][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.885185][ T1107] bond0 (unregistering): Released all slaves
[  288.974599][ T7407] netlink: 'syz.1.487': attribute type 29 has an invalid length.
[  289.020969][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.067892][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.079847][ T7408] netlink: 'syz.1.487': attribute type 29 has an invalid length.
[  289.193344][ T7283] team0: Port device team_slave_0 added
[  289.213820][ T7283] team0: Port device team_slave_1 added
[  289.222470][ T7409] netlink: 'syz.1.487': attribute type 29 has an invalid length.
[  289.617353][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.660025][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.669919][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.445370][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  290.453682][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  290.462920][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  290.470782][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  290.479325][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  290.501712][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.676818][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.874428][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.901260][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.421575][ T1107] hsr_slave_0: left promiscuous mode
[  291.522747][ T1107] hsr_slave_1: left promiscuous mode
[  291.729466][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.736992][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.820761][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.828188][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.970821][ T1107] veth1_macvtap: left promiscuous mode
[  291.976407][ T1107] veth0_macvtap: left promiscuous mode
[  292.026031][ T1107] veth1_vlan: left promiscuous mode
[  292.049687][ T1107] veth0_vlan: left promiscuous mode
[  292.142729][ T5225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  292.151923][ T5225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  292.159822][ T5225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  292.168366][ T5225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  292.175959][ T5225] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  292.183267][ T5225] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  292.554938][ T5220] Bluetooth: hci4: command tx timeout
[  292.975866][ T1107] team0 (unregistering): Port device team_slave_1 removed
[  293.024742][ T1107] team0 (unregistering): Port device team_slave_0 removed
[  294.203278][ T7283] hsr_slave_0: entered promiscuous mode
[  294.213422][ T7283] hsr_slave_1: entered promiscuous mode
[  294.223972][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.232405][ T5220] Bluetooth: hci7: command tx timeout
[  294.252372][ T7283] Cannot create hsr debugfs directory
[  294.629312][ T5220] Bluetooth: hci4: command tx timeout
[  295.128719][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'.
[  295.463240][ T5265] usb 3-1: USB disconnect, device number 9
[  296.002776][ T7414] chnl_net:caif_netlink_parms(): no params data found
[  296.239038][ T5265] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  296.288208][ T1107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.309238][ T5220] Bluetooth: hci7: command tx timeout
[  296.391034][ T7436] chnl_net:caif_netlink_parms(): no params data found
[  296.412527][ T5265] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  296.422089][ T5265] usb 1-1: config 0 has no interface number 0
[  296.432871][ T5265] usb 1-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  296.446816][ T5265] usb 1-1: config 0 interface 126 has no altsetting 0
[  296.459825][ T5265] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[  296.470011][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.478116][ T5265] usb 1-1: Product: syz
[  296.483313][ T5265] usb 1-1: Manufacturer: syz
[  296.488098][ T5265] usb 1-1: SerialNumber: syz
[  296.509189][ T5265] usb 1-1: config 0 descriptor??
[  296.509912][ T1107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.651244][ T5265] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  296.714650][ T5220] Bluetooth: hci4: command tx timeout
[  296.799586][   T35] usb 1-1: Failed to submit usb control message: -71
[  296.837356][   T35] usb 1-1: unable to send the bmi data to the device: -71
[  296.867334][   T35] usb 1-1: unable to get target info from device
[  296.872843][ T5265] usb 1-1: USB disconnect, device number 16
[  296.920033][   T35] usb 1-1: could not get target info (-71)
[  296.974989][   T35] usb 1-1: could not probe fw (-71)
[  297.001374][ T1107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.564929][ T7486] netlink: 'syz.1.497': attribute type 10 has an invalid length.
[  297.573725][ T7486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'.
[  297.586002][ T7486] ipvlan1: entered promiscuous mode
[  297.594760][ T7486] ipvlan1: entered allmulticast mode
[  297.600286][ T7486] veth0_vlan: entered allmulticast mode
[  298.519277][ T5220] Bluetooth: hci7: command tx timeout
[  298.533358][ T7486] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  298.751107][ T1107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.792249][ T5220] Bluetooth: hci4: command tx timeout
[  298.849066][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.856275][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.871569][ T7414] bridge_slave_0: entered allmulticast mode
[  298.881294][ T7414] bridge_slave_0: entered promiscuous mode
[  298.889987][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.897107][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.940147][ T7414] bridge_slave_1: entered allmulticast mode
[  299.118566][ T7414] bridge_slave_1: entered promiscuous mode
[  299.383996][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.442712][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.465778][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.489258][ T7436] bridge_slave_0: entered allmulticast mode
[  299.512805][ T7436] bridge_slave_0: entered promiscuous mode
[  299.547777][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.685173][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.700955][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.718459][ T7436] bridge_slave_1: entered allmulticast mode
[  299.730305][ T7436] bridge_slave_1: entered promiscuous mode
[  299.911185][ T5216] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  299.935173][ T7414] team0: Port device team_slave_0 added
[  299.956914][ T7414] team0: Port device team_slave_1 added
[  299.993420][ T7283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  300.017983][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.033851][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.080923][ T5216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.095844][ T5216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  300.116440][ T5216] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  300.138485][ T7283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  300.142520][ T5216] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  300.157349][ T7283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  300.164752][ T5216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.167587][ T7283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  300.177516][ T5216] usb 2-1: Product: syz
[  300.193586][ T5216] usb 2-1: Manufacturer: syz
[  300.203117][ T5216] usb 2-1: SerialNumber: syz
[  300.229514][ T5216] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  300.237007][ T5216] cdc_ncm 2-1:1.0: bind() failure
[  300.266769][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.274011][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.300320][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.313170][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.320839][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.347583][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.421989][ T7436] team0: Port device team_slave_0 added
[  300.438659][ T7436] team0: Port device team_slave_1 added
[  300.457162][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.483685][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.502771][ T7414] hsr_slave_0: entered promiscuous mode
[  300.510074][ T7414] hsr_slave_1: entered promiscuous mode
[  300.516375][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.525128][ T7414] Cannot create hsr debugfs directory
[  300.550924][ T5220] Bluetooth: hci7: command tx timeout
[  300.565725][ T5216] usb 2-1: USB disconnect, device number 16
[  300.659452][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.693484][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.713106][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.752525][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.771242][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.778376][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.805070][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.821904][ T7283] 8021q: adding VLAN 0 to HW filter on device team0
[  300.910503][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.917622][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.936769][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.943911][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.188608][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'.
[  301.543868][ T7436] hsr_slave_0: entered promiscuous mode
[  301.609432][ T7436] hsr_slave_1: entered promiscuous mode
[  301.709100][ T7436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.727213][ T7436] Cannot create hsr debugfs directory
[  301.746992][ T7283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  301.788962][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.257823][ T1107] bridge_slave_1: left allmulticast mode
[  302.269123][ T1107] bridge_slave_1: left promiscuous mode
[  302.285805][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.314999][ T1107] bridge_slave_0: left allmulticast mode
[  302.326989][ T1107] bridge_slave_0: left promiscuous mode
[  302.337396][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.996382][ T5220] Bluetooth: hci5: command 0x0406 tx timeout
[  304.466776][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.483757][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.506447][ T1107] bond0 (unregistering): Released all slaves
[  304.651868][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.664411][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.675107][ T1107] bond0 (unregistering): Released all slaves
[  304.747742][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.777850][ T7554] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[  304.796431][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.508'.
[  304.825785][ T7554] ipvlan1: entered promiscuous mode
[  304.842320][ T7554] ipvlan1: entered allmulticast mode
[  304.847760][ T7554] veth0_vlan: entered allmulticast mode
[  304.877631][ T7554] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  304.918223][ T7555] netlink: 'syz.1.507': attribute type 10 has an invalid length.
[  304.935737][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'.
[  304.955905][ T7555] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  305.654300][ T7605] blktrace: Concurrent blktraces are not allowed on loop7
[  306.172911][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'.
[  306.639558][ T5220] Bluetooth: hci5: unexpected event for opcode 0x0c22
[  306.891451][ T7283] veth0_vlan: entered promiscuous mode
[  306.996355][ T1107] hsr_slave_0: left promiscuous mode
[  307.063539][ T1107] hsr_slave_1: left promiscuous mode
[  307.080159][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.087703][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.099814][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.861282][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.096722][ T1107] hsr_slave_0: left promiscuous mode
[  308.323732][ T1107] hsr_slave_1: left promiscuous mode
[  308.429058][ T1107] batman_adv: batadv0: Removing interface: team0
[  308.436400][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.469743][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.512098][ T1107] veth1_macvtap: left promiscuous mode
[  308.519428][ T1107] veth0_macvtap: left promiscuous mode
[  308.525087][ T1107] veth1_vlan: left promiscuous mode
[  308.531704][ T1107] veth0_vlan: left promiscuous mode
[  309.558297][ T1107] team0 (unregistering): Port device team_slave_1 removed
[  309.608054][ T1107] team0 (unregistering): Port device team_slave_0 removed
[  310.378134][ T1107] team0 (unregistering): Port device team_slave_1 removed
[  310.419209][ T1107] team0 (unregistering): Port device team_slave_0 removed
[  310.857764][ T7283] veth1_vlan: entered promiscuous mode
[  310.882862][ T7636] netlink: 'syz.0.515': attribute type 10 has an invalid length.
[  310.896262][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.515'.
[  310.906533][ T7636] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  310.950440][ T7645] netlink: 'syz.1.517': attribute type 10 has an invalid length.
[  310.959187][ T7645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'.
[  310.990778][ T7645] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  311.147712][ T7283] veth0_macvtap: entered promiscuous mode
[  311.157139][ T7283] veth1_macvtap: entered promiscuous mode
[  311.173074][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.183657][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.193638][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.204189][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.214672][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.225584][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.236989][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.248518][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.259498][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.269616][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.280475][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.290688][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.301174][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.313938][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.324049][ T7283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.332967][ T7283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.341801][ T7283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.351235][ T7283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.502351][ T7656] blktrace: Concurrent blktraces are not allowed on loop7
[  312.079885][ T5848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.090784][ T5848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.113303][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.121311][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.511206][ T7436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  312.968127][ T7436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  313.663333][ T7436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  313.688296][ T7436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  313.921766][ T7414] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  313.987435][ T7414] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  314.183317][ T7414] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  314.490974][ T7692] netlink: 'syz.0.526': attribute type 10 has an invalid length.
[  314.499561][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.526'.
[  314.513932][ T7692] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  314.584738][ T7414] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  314.774109][ T7694] netlink: 'syz.4.528': attribute type 8 has an invalid length.
[  314.883849][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.958247][ T7436] 8021q: adding VLAN 0 to HW filter on device team0
[  314.995268][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.002473][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.020906][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.028218][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.052587][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.116659][ T7414] 8021q: adding VLAN 0 to HW filter on device team0
[  315.165099][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.172305][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.181329][ T1187] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  315.282056][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.289306][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.358247][ T1187] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  315.401575][ T1187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.467872][ T1187] usb 1-1: Product: syz
[  315.484660][ T1187] usb 1-1: Manufacturer: syz
[  315.497168][ T1187] usb 1-1: SerialNumber: syz
[  316.502775][ T1187] usb 1-1: config 0 descriptor??
[  316.594249][ T1187] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  316.721001][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.736318][ T7699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.529'.
[  316.782348][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.797731][ T7436] veth0_vlan: entered promiscuous mode
[  316.820676][ T7436] veth1_vlan: entered promiscuous mode
[  316.831948][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.842270][ T7699] netlink: 'syz.0.529': attribute type 10 has an invalid length.
[  316.863535][ T7699] batman_adv: batadv0: Adding interface: team0
[  316.879254][ T7699] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.908851][ T7699] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  316.937386][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.043591][ T7436] veth0_macvtap: entered promiscuous mode
[  317.072663][ T7436] veth1_macvtap: entered promiscuous mode
[  317.096599][ T7414] veth0_vlan: entered promiscuous mode
[  317.152375][ T7414] veth1_vlan: entered promiscuous mode
[  317.203148][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.244264][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.272934][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  317.281902][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  317.288813][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.300497][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.310557][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.322669][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.332661][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.343717][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.356710][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.465756][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.615595][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.748686][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.980482][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.008266][ T1187] usb 1-1: USB disconnect, device number 17
[  318.016095][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.040451][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.058640][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.097706][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.150507][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.193696][ T7436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.204870][ T7436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.217077][ T7436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.226437][ T7436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.357225][ T7414] veth0_macvtap: entered promiscuous mode
[  318.409513][ T7414] veth1_macvtap: entered promiscuous mode
[  318.503702][ T7736] netlink: 'syz.0.538': attribute type 8 has an invalid length.
[  318.539666][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.558976][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.569536][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.593236][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.608196][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.629839][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.644704][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.656978][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.667644][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.680417][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.774405][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.841966][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.875094][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.890189][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.904427][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.923877][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.952347][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.972150][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.983923][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.994865][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.024059][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.893261][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.903944][ T7414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.912934][ T7414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.921827][ T7414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.930689][ T7414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.991577][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.999670][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.073223][ T5645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.082492][ T5645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.411090][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.419470][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.497249][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.505193][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.777715][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'.
[  320.786872][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'.
[  322.179431][ T5305] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  322.994842][ T5305] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  323.004387][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.220797][ T5305] usb 5-1: Product: syz
[  323.225421][ T5305] usb 5-1: Manufacturer: syz
[  323.232716][ T5305] usb 5-1: SerialNumber: syz
[  323.241699][ T5305] usb 5-1: config 0 descriptor??
[  323.253380][ T5305] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  323.344137][ T7784] program syz.3.546 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  323.501526][ T7768] netlink: 256 bytes leftover after parsing attributes in process `syz.4.543'.
[  323.658317][ T7787] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[  323.667316][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.548'.
[  323.679537][ T7787] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  324.053663][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.135122][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.162573][ T7768] netlink: 'syz.4.543': attribute type 10 has an invalid length.
[  324.283084][ T7768] batman_adv: batadv0: Adding interface: team0
[  324.320328][ T7768] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.529936][ T7768] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  327.209524][ T5291] usb 5-1: USB disconnect, device number 14
[  327.939113][ T5267] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  328.189141][ T7829] netlink: 'syz.3.559': attribute type 10 has an invalid length.
[  328.197114][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'.
[  328.207677][ T7829] ipvlan1: entered promiscuous mode
[  328.213270][ T7829] ipvlan1: entered allmulticast mode
[  328.218716][ T7829] veth0_vlan: entered allmulticast mode
[  328.234932][ T7829] bridge0: port 3(ipvlan1) entered blocking state
[  328.401750][ T5267] usb 2-1: unable to get BOS descriptor or descriptor too short
[  328.441780][ T7829] bridge0: port 3(ipvlan1) entered disabled state
[  328.628318][ T7829] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  328.739150][ T5267] usb 2-1: not running at top speed; connect to a high speed hub
[  329.109068][ T5267] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  329.119702][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  329.135146][ T5267] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  329.152576][ T5267] usb 2-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc
[  329.165009][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.175586][ T5267] usb 2-1: Product: syz
[  329.182311][ T5267] usb 2-1: Manufacturer: syz
[  329.186995][ T5267] usb 2-1: SerialNumber: syz
[  329.223579][ T5267] usb 2-1: config 0 descriptor??
[  329.443109][ T7838] netlink: 'syz.4.561': attribute type 10 has an invalid length.
[  329.451633][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.561'.
[  329.469800][ T7838] ipvlan1: entered promiscuous mode
[  329.475549][ T7838] ipvlan1: entered allmulticast mode
[  329.481212][ T7838] veth0_vlan: entered allmulticast mode
[  329.515514][ T7838] bridge0: port 3(ipvlan1) entered blocking state
[  329.523547][ T7838] bridge0: port 3(ipvlan1) entered disabled state
[  329.569939][ T7838] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  329.830567][ T5267] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  329.879026][ T5266] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  329.956151][ T5267] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  329.994295][ T5267] usb 2-1: USB disconnect, device number 17
[  330.029137][ T5266] usb 3-1: Using ep0 maxpacket: 8
[  330.036451][ T5266] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  330.082400][ T5266] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  330.115367][ T5215] udevd[5215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  330.143375][ T5266] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  330.327434][ T5266] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  330.377984][ T5266] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  330.387244][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.758588][ T5266] usb 3-1: usb_control_msg returned -71
[  331.764369][ T5266] usbtmc 3-1:16.0: can't read capabilities
[  331.774444][ T5266] usb 3-1: USB disconnect, device number 10
[  331.899576][ T1187] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  333.523047][ T1187] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  333.533045][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.554890][ T1187] usb 2-1: Product: syz
[  333.569039][ T1187] usb 2-1: Manufacturer: syz
[  333.573713][ T1187] usb 2-1: SerialNumber: syz
[  333.590064][ T1187] usb 2-1: config 0 descriptor??
[  333.604323][ T1187] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  333.612768][ T5305] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  333.780305][ T5305] usb 3-1: unable to get BOS descriptor or descriptor too short
[  333.789254][ T5305] usb 3-1: not running at top speed; connect to a high speed hub
[  333.809275][ T7856] netlink: 256 bytes leftover after parsing attributes in process `syz.1.567'.
[  333.829282][ T5305] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  333.854377][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.863069][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  333.885937][ T5305] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  333.898818][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.932615][ T5305] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc
[  333.949670][ T7856] netlink: 'syz.1.567': attribute type 10 has an invalid length.
[  333.971681][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.006552][ T5305] usb 3-1: Product: syz
[  334.019299][ T5305] usb 3-1: Manufacturer: syz
[  334.030624][ T5305] usb 3-1: SerialNumber: syz
[  334.067533][ T5305] usb 3-1: config 0 descriptor??
[  334.140248][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  334.152627][ T7871] bridge_slave_1: left allmulticast mode
[  334.170712][ T7871] bridge_slave_1: left promiscuous mode
[  334.192111][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.229426][ T7871] bridge_slave_0: left allmulticast mode
[  334.236311][ T7871] bridge_slave_0: left promiscuous mode
[  334.280049][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.295137][ T5305] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  334.354335][ T5305] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[  335.192025][ T5305] usb 3-1: USB disconnect, device number 11
[  335.257846][ T5215] udevd[5215]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  335.297938][ T5266] usb 2-1: USB disconnect, device number 18
[  335.493342][ T7888] ebt_among: src integrity fail: 300
[  336.059320][ T7885] netlink: 'syz.0.575': attribute type 10 has an invalid length.
[  336.067535][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.575'.
[  336.083455][ T7885] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  336.801389][ T7894] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[  336.809846][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.578'.
[  336.822430][ T7894] ipvlan1: entered promiscuous mode
[  336.828009][ T7894] ipvlan1: entered allmulticast mode
[  336.833970][ T7894] veth0_vlan: entered allmulticast mode
[  336.878485][ T7894] bridge0: port 3(ipvlan1) entered blocking state
[  336.886353][ T7894] bridge0: port 3(ipvlan1) entered disabled state
[  337.395971][ T7894] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  338.599339][ T5269] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  338.825193][ T5269] usb 5-1: Using ep0 maxpacket: 8
[  340.232829][ T5269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  340.439957][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  340.453122][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  340.518573][ T5269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.618342][ T5269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  340.663094][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.689335][ T5216] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  340.843317][ T5216] usb 3-1: unable to get BOS descriptor or descriptor too short
[  340.854043][ T5216] usb 3-1: not running at top speed; connect to a high speed hub
[  340.867461][ T5216] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  340.880869][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  340.903377][ T5216] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  340.915689][ T5269] usb 5-1: usb_control_msg returned -71
[  340.925186][ T5269] usbtmc 5-1:16.0: can't read capabilities
[  340.938802][ T5216] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc
[  340.948204][ T5266] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  340.956637][ T5216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.972803][ T5216] usb 3-1: Product: syz
[  340.973691][ T5269] usb 5-1: USB disconnect, device number 15
[  340.984266][ T5216] usb 3-1: Manufacturer: syz
[  340.988997][ T5216] usb 3-1: SerialNumber: syz
[  341.006773][ T5216] usb 3-1: config 0 descriptor??
[  341.263180][ T5216] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  341.278922][ T5266] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  341.288039][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.352640][ T5266] usb 1-1: Product: syz
[  341.357048][ T5266] usb 1-1: Manufacturer: syz
[  341.404953][  T937] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  341.439729][ T5266] usb 1-1: SerialNumber: syz
[  342.119696][ T5216] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[  342.131488][ T5266] usb 1-1: config 0 descriptor??
[  342.141881][ T5266] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  342.153490][ T5216] usb 3-1: USB disconnect, device number 12
[  342.181683][  T937] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[  342.208971][  T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.233019][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.250044][  T937] usb 2-1: Product: syz
[  342.254280][  T937] usb 2-1: Manufacturer: syz
[  342.412523][  T937] usb 2-1: SerialNumber: syz
[  343.296621][ T7917] netlink: 248 bytes leftover after parsing attributes in process `syz.0.585'.
[  343.307601][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.319839][  T937] usb 2-1: config 0 descriptor??
[  343.329540][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.341224][ T7917] netlink: 'syz.0.585': attribute type 10 has an invalid length.
[  343.446762][  T937] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  344.779385][ T7944] ebt_among: src integrity fail: 300
[  345.772678][  T937] usb 1-1: USB disconnect, device number 18
[  345.786524][ T5216] usb 2-1: USB disconnect, device number 19
[  347.027454][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'.
[  347.036764][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'.
[  349.639016][  T937] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  350.016101][ T5265] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  350.393434][ T5265] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  350.443058][ T5265] usb 3-1: config 0 has no interface number 0
[  350.486473][ T5265] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  350.570326][ T5265] usb 3-1: config 0 interface 126 has no altsetting 0
[  350.612072][ T5265] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[  350.635791][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.648424][ T5265] usb 3-1: Product: syz
[  350.661455][ T5265] usb 3-1: Manufacturer: syz
[  350.667605][ T5265] usb 3-1: SerialNumber: syz
[  351.664104][ T5265] usb 3-1: config 0 descriptor??
[  352.265673][ T5305] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  352.325491][ T5265] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  352.327693][ T1107] usb 3-1: Failed to submit usb control message: -71
[  352.358549][ T1107] usb 3-1: unable to send the bmi data to the device: -71
[  352.365878][ T1107] usb 3-1: unable to get target info from device
[  352.372675][ T1107] usb 3-1: could not get target info (-71)
[  352.624243][ T1107] usb 3-1: could not probe fw (-71)
[  353.299744][ T5265] usb 3-1: USB disconnect, device number 13
[  353.573331][ T8000] blktrace: Concurrent blktraces are not allowed on loop7
[  354.121445][ T5305] usb 5-1: device descriptor read/all, error -71
[  354.619509][ T8016] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[  354.627501][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.610'.
[  354.645470][ T8016] bridge0: port 3(ipvlan1) entered blocking state
[  354.652600][ T8016] bridge0: port 3(ipvlan1) entered disabled state
[  354.674629][ T8016] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  354.882499][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'.
[  356.852245][ T5216] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  357.877459][ T5216] usb 4-1: Using ep0 maxpacket: 16
[  357.895233][ T5216] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.918980][ T5216] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  358.185153][ T5216] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256
[  358.318665][ T5216] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  359.472913][ T5216] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  359.697686][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  359.831523][ T5216] usb 4-1: SerialNumber: syz
[  360.086538][ T8060] blktrace: Concurrent blktraces are not allowed on loop7
[  360.505988][ T5216] usb 4-1: can't set config #1, error -71
[  360.563999][ T5216] usb 4-1: USB disconnect, device number 23
[  361.510839][ T5220] Bluetooth: hci0: command 0x0406 tx timeout
[  361.786909][ T8071] netlink: 'syz.0.626': attribute type 10 has an invalid length.
[  361.975402][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'.
[  362.745530][ T8071] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  362.809244][ T5305] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  363.222099][ T5305] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  363.275246][ T5305] usb 3-1: config 0 has no interface number 0
[  363.981990][ T5305] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  364.013183][ T5305] usb 3-1: config 0 interface 126 has no altsetting 0
[  364.207817][ T5305] usb 3-1: string descriptor 0 read error: -71
[  364.216237][ T5305] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[  364.225415][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.243491][ T5305] usb 3-1: config 0 descriptor??
[  364.253234][ T5305] usb 3-1: can't set config #0, error -71
[  364.382337][ T5305] usb 3-1: USB disconnect, device number 14
[  365.383531][ T8108] netlink: 'syz.4.634': attribute type 10 has an invalid length.
[  365.391938][ T8108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'.
[  365.409079][ T8108] bridge0: port 3(ipvlan1) entered blocking state
[  365.415828][ T8108] bridge0: port 3(ipvlan1) entered disabled state
[  365.479033][ T8108] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  365.929980][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  366.200493][ T8113] netlink: 'syz.2.637': attribute type 10 has an invalid length.
[  366.208417][ T8113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.637'.
[  366.218277][ T8113] bridge0: port 3(ipvlan1) entered blocking state
[  366.225654][ T8113] bridge0: port 3(ipvlan1) entered disabled state
[  366.249371][ T8113] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  367.883821][    T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  367.893947][ T8131] smk_cipso_doi:708 cipso add rc = -17
[  368.911165][    T8] usb 5-1: Using ep0 maxpacket: 16
[  368.918278][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.935403][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  368.939105][ T5291] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  368.974304][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256
[  369.133710][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  370.694105][ T5291] usb 4-1: Using ep0 maxpacket: 8
[  370.714360][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  370.739042][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  370.827895][ T5291] usb 4-1: device descriptor read/all, error -71
[  371.865212][    T8] usb 5-1: can't set config #1, error -71
[  371.872692][    T8] usb 5-1: USB disconnect, device number 18
[  374.149407][ T8165] netlink: 'syz.0.652': attribute type 8 has an invalid length.
[  377.020567][ T8190] ebt_among: src integrity fail: 300
[  377.053444][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'.
[  377.066882][ T8180] bridge_slave_1: left allmulticast mode
[  377.089572][ T8180] bridge_slave_1: left promiscuous mode
[  377.457374][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.713293][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  378.719815][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  378.740316][ T8180] bridge_slave_0: left allmulticast mode
[  378.748410][ T8180] bridge_slave_0: left promiscuous mode
[  378.773559][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.839132][ T5216] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  379.051101][    T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  379.084049][ T5216] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  379.095200][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.106405][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.118953][ T5216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  379.136204][ T5216] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  379.147133][ T5216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.216381][ T5216] usb 2-1: config 0 descriptor??
[  379.329084][    T8] usb 4-1: Using ep0 maxpacket: 8
[  380.207340][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  380.225912][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  380.486213][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  380.759165][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  380.777578][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  380.787193][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.818257][    C0] hrtimer: interrupt took 155812 ns
[  380.838123][ T5216] usbhid 2-1:0.0: can't add hid device: -71
[  380.844412][ T5216] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  380.870779][ T5216] usb 2-1: USB disconnect, device number 20
[  380.969050][    T8] usb 4-1: can't set config #16, error -71
[  381.033253][    T8] usb 4-1: USB disconnect, device number 26
[  383.760657][ T8217] smk_cipso_doi:695 remove rc = -2
[  384.228689][ T8217] smk_cipso_doi:708 cipso add rc = -17
[  385.428559][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  385.472913][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  385.484665][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  385.499577][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  385.520660][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  385.529681][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  387.088597][    T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  387.910198][ T5225] Bluetooth: hci1: command tx timeout
[  388.032975][ T5266] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  388.189001][ T5225] Bluetooth: hci5: unexpected event for opcode 0x0c22
[  388.250672][ T8240] chnl_net:caif_netlink_parms(): no params data found
[  388.257594][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  388.284676][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.318975][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.344809][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  388.366949][    T8] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  388.388647][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.399604][ T5266] usb 1-1: Using ep0 maxpacket: 8
[  388.413924][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  388.423416][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  389.344280][    T8] usb 4-1: config 0 descriptor??
[  389.353535][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  389.366942][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  389.374968][ T5220] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  389.382575][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  389.418816][ T5266] usb 1-1: unable to read config index 0 descriptor/start: -71
[  389.426902][ T5266] usb 1-1: can't read configurations, error -71
[  389.452957][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  389.459111][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  389.468965][    T8] usb 4-1: USB disconnect, device number 27
[  389.776372][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.519145][ T5225] Bluetooth: hci1: command tx timeout
[  390.825559][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.353905][ T8240] bridge_slave_0: entered allmulticast mode
[  391.370650][ T8240] bridge_slave_0: entered promiscuous mode
[  391.561413][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.568729][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.629605][ T5225] Bluetooth: hci6: command tx timeout
[  391.689324][ T8240] bridge_slave_1: entered allmulticast mode
[  391.704007][ T8240] bridge_slave_1: entered promiscuous mode
[  391.972852][ T8301] ebt_among: src integrity fail: 300
[  392.530670][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[  392.549247][ T5220] Bluetooth: hci1: command tx timeout
[  393.675921][ T5220] Bluetooth: hci6: command tx timeout
[  393.872504][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.915876][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.102447][ T8269] chnl_net:caif_netlink_parms(): no params data found
[  394.126723][ T8240] team0: Port device team_slave_0 added
[  394.246257][ T8240] team0: Port device team_slave_1 added
[  394.643675][ T5220] Bluetooth: hci1: command tx timeout
[  394.856783][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.887185][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.933049][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.009183][ T1187] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  395.023389][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.051655][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.068663][ T8269] bridge_slave_0: entered allmulticast mode
[  395.086604][ T8269] bridge_slave_0: entered promiscuous mode
[  395.105690][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.119650][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.151831][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.186850][ T1187] usb 2-1: Using ep0 maxpacket: 8
[  395.194150][ T1187] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  395.218805][ T1187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  395.269330][ T1187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  395.299576][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.310345][ T1187] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  395.346925][ T1187] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  395.367591][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.401841][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.447556][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.479531][ T8269] bridge_slave_1: entered allmulticast mode
[  395.500987][ T8269] bridge_slave_1: entered promiscuous mode
[  395.602699][ T1187] usb 2-1: GET_CAPABILITIES returned 0
[  395.608362][ T1187] usbtmc 2-1:16.0: can't read capabilities
[  395.715194][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.749742][ T5220] Bluetooth: hci6: command tx timeout
[  395.767913][ T5220] Bluetooth: hci0: unexpected event for opcode 0x0c22
[  395.793242][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.829710][ T1187] usb 2-1: USB disconnect, device number 21
[  395.957207][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.186364][ T8240] hsr_slave_0: entered promiscuous mode
[  396.197377][ T8240] hsr_slave_1: entered promiscuous mode
[  396.210102][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.068905][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.829034][ T5220] Bluetooth: hci6: command tx timeout
[  397.833457][ T8269] team0: Port device team_slave_0 added
[  397.844413][ T8269] team0: Port device team_slave_1 added
[  398.650695][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.657703][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.694338][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.709201][ T8352] netlink: 'syz.1.696': attribute type 10 has an invalid length.
[  398.717211][ T8352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.696'.
[  398.727525][ T8352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  398.869908][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.883721][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.935311][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.035013][ T8269] hsr_slave_0: entered promiscuous mode
[  399.041703][ T8269] hsr_slave_1: entered promiscuous mode
[  399.055307][ T8269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.085927][ T8269] Cannot create hsr debugfs directory
[  400.744919][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.758702][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.776016][   T12] bond0 (unregistering): Released all slaves
[  402.100201][ T5216] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  402.839236][ T5216] usb 2-1: Using ep0 maxpacket: 8
[  403.632775][ T5216] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  403.644327][ T5216] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  403.663951][ T5216] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  403.676002][ T5216] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  403.717791][ T8397] netlink: 'syz.3.705': attribute type 10 has an invalid length.
[  403.727325][ T8397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'.
[  403.749858][ T8397] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  403.765628][ T5216] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  403.789068][ T5216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.032891][   T12] hsr_slave_0: left promiscuous mode
[  404.134742][ T8407] ebt_among: src integrity fail: 300
[  404.581132][   T12] hsr_slave_1: left promiscuous mode
[  404.610091][   T12] batman_adv: batadv0: Removing interface: team0
[  404.630496][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.697534][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.819215][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.845651][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.963401][   T12] veth1_macvtap: left promiscuous mode
[  404.981150][   T12] veth0_macvtap: left promiscuous mode
[  404.987619][   T12] veth1_vlan: left promiscuous mode
[  404.995163][   T12] veth0_vlan: left promiscuous mode
[  405.896031][ T5216] usb 2-1: usb_control_msg returned -71
[  405.908196][ T5216] usbtmc 2-1:16.0: can't read capabilities
[  405.949551][ T5216] usb 2-1: USB disconnect, device number 22
[  407.318815][   T12] team0 (unregistering): Port device team_slave_1 removed
[  407.408618][   T12] team0 (unregistering): Port device team_slave_0 removed
[  411.879064][  T937] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  411.921842][ T8444] netlink: 'syz.1.716': attribute type 10 has an invalid length.
[  411.940051][ T8444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.716'.
[  411.955945][ T8444] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  412.084259][  T937] usb 1-1: Using ep0 maxpacket: 8
[  412.176350][  T937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  412.189577][  T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  412.289265][  T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  412.345726][  T937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  413.130865][  T937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  413.141193][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.269525][ T8240] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  414.312476][  T937] usb 1-1: GET_CAPABILITIES returned 0
[  414.318042][  T937] usbtmc 1-1:16.0: can't read capabilities
[  414.349376][ T8240] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  414.577156][ T8269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.821837][ T8240] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  414.942786][ T8240] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  415.169633][ T8477] netlink: 'syz.3.724': attribute type 10 has an invalid length.
[  415.192985][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.724'.
[  415.203586][ T8477] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  415.284182][ T8269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.485204][ T8269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.645126][ T8269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.270679][ T8486] netlink: 'syz.3.726': attribute type 10 has an invalid length.
[  416.278525][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.726'.
[  416.288187][ T8486] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  416.306564][   T12] bridge_slave_1: left allmulticast mode
[  416.334492][   T12] bridge_slave_1: left promiscuous mode
[  416.343886][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.361737][   T12] bridge_slave_0: left allmulticast mode
[  416.367507][   T12] bridge_slave_0: left promiscuous mode
[  416.399727][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.629194][ T5220] Bluetooth: hci7: command 0x0406 tx timeout
[  418.739154][ T5291] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  418.776331][ T1187] usb 1-1: USB disconnect, device number 22
[  419.047531][ T5291] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  419.061000][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.072293][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.082444][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  419.095729][ T5291] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  419.105590][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.574453][ T5291] usb 4-1: config 0 descriptor??
[  419.961115][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  419.975423][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  419.989404][   T12] bond0 (unregistering): Released all slaves
[  420.336482][ T5291] usbhid 4-1:0.0: can't add hid device: -71
[  420.342820][ T5291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  421.523475][ T8500] netlink: 'syz.1.728': attribute type 10 has an invalid length.
[  421.531411][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'.
[  421.540863][ T8500] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  423.280270][ T5291] usb 4-1: USB disconnect, device number 28
[  423.312789][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.030502][ T8240] 8021q: adding VLAN 0 to HW filter on device team0
[  424.131090][ T8269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  424.191310][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.198548][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.240771][ T8269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  425.477494][ T8269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  427.218858][    C0] sched: DL replenish lagged too much
[  428.246867][ T8269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  428.972832][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.980056][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.382030][ T8540] netlink: 'syz.3.736': attribute type 10 has an invalid length.
[  431.409795][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.736'.
[  431.472770][ T8540] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  432.609047][ T1187] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  433.289438][ T1187] usb 2-1: Using ep0 maxpacket: 8
[  436.093614][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  436.108535][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  436.119796][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.130485][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.141399][ T5220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  436.150668][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.329334][   T12] hsr_slave_0: left promiscuous mode
[  436.341381][ T5305] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  436.452037][   T12] hsr_slave_1: left promiscuous mode
[  436.512018][ T5305] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  436.530279][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.548163][ T5305] usb 1-1: config 0 has no interface number 0
[  436.570117][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.589776][ T5305] usb 1-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  436.613517][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.650016][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.659419][ T5305] usb 1-1: config 0 interface 126 has no altsetting 0
[  436.711572][ T5305] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[  436.753928][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.814827][ T5305] usb 1-1: Product: syz
[  436.823842][   T12] veth1_macvtap: left promiscuous mode
[  436.840060][ T5305] usb 1-1: Manufacturer: syz
[  436.844955][ T5305] usb 1-1: SerialNumber: syz
[  436.866209][   T12] veth0_macvtap: left promiscuous mode
[  436.914196][   T12] veth1_vlan: left promiscuous mode
[  436.925019][ T5305] usb 1-1: config 0 descriptor??
[  436.954909][   T12] veth0_vlan: left promiscuous mode
[  437.011038][ T5305] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  437.236084][   T35] usb 1-1: Failed to submit usb control message: -71
[  437.257251][ T5291] usb 1-1: USB disconnect, device number 23
[  437.272576][   T35] usb 1-1: unable to send the bmi data to the device: -71
[  437.321623][   T35] usb 1-1: unable to get target info from device
[  437.362146][   T35] usb 1-1: could not get target info (-71)
[  437.372089][   T35] usb 1-1: could not probe fw (-71)
[  438.833146][ T5220] Bluetooth: hci2: command tx timeout
[  438.841645][ T1187] usb 2-1: device descriptor read/all, error -110
[  439.127275][ T1187] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  440.155205][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  440.165150][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  440.879643][ T5220] Bluetooth: hci2: command tx timeout
[  442.949115][ T5220] Bluetooth: hci2: command tx timeout
[  447.070785][ T5220] Bluetooth: hci2: command tx timeout
[  450.109091][ T1187] usb 2-1: device descriptor read/64, error -110
[  453.699051][ T1187] usb usb2-port1: attempt power cycle
[  468.390866][ T1187] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  468.629484][ T1187] usb 2-1: device descriptor read/8, error -32
[  469.270767][ T1187] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  469.369377][ T1187] usb 2-1: device descriptor read/8, error -32
[  473.149273][ T1187] usb usb2-port1: unable to enumerate USB device
[  501.633439][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  501.639907][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  510.562108][ T5229] Bluetooth: hci1: command 0x0406 tx timeout
[  516.429987][ T5220] Bluetooth: hci6: command 0x0406 tx timeout
[  517.790202][ T5220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  517.800787][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  517.814000][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  517.860625][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  517.871653][ T5220] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  517.881526][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  517.939953][ T8567] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  517.950725][ T8567] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  517.959683][ T8567] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  517.969541][ T8567] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  517.983562][ T8580] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  517.992832][ T8580] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  518.095023][ T8580] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  518.110538][ T8580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  518.125635][ T5220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  518.133563][ T5220] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  518.141976][ T5220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  518.149488][ T5220] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  518.158252][ T5220] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  518.166140][ T5220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  518.176802][ T5220] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  518.186014][ T5220] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  518.193150][ T8580] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  518.202333][ T5220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  519.909123][ T5229] Bluetooth: hci4: command tx timeout
[  520.069069][ T5229] Bluetooth: hci8: command tx timeout
[  520.289814][   T12] team0 (unregistering): Port device team_slave_1 removed
[  520.319150][ T5229] Bluetooth: hci7: command tx timeout
[  520.325294][ T5229] Bluetooth: hci9: command tx timeout
[  520.450904][ T5220] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  520.461139][ T5220] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  520.472407][ T5220] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  520.481559][ T5220] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  520.509450][ T5220] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  520.518396][ T5220] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  520.806986][   T12] team0 (unregistering): Port device team_slave_0 removed
[  521.989185][ T5229] Bluetooth: hci4: command tx timeout
[  522.148984][ T5229] Bluetooth: hci8: command tx timeout
[  522.391337][ T5220] Bluetooth: hci7: command tx timeout
[  522.402537][ T5229] Bluetooth: hci9: command tx timeout
[  522.549147][ T5229] Bluetooth: hci10: command tx timeout
[  524.098931][ T5229] Bluetooth: hci4: command tx timeout
[  524.241498][ T5220] Bluetooth: hci8: command tx timeout
[  524.469507][ T5220] Bluetooth: hci9: command tx timeout
[  524.475002][ T5220] Bluetooth: hci7: command tx timeout
[  524.628907][ T5229] Bluetooth: hci10: command tx timeout
[  524.656991][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  524.666535][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  524.676886][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  524.686302][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  524.699077][ T5220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  524.711607][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  526.149109][ T5220] Bluetooth: hci4: command tx timeout
[  526.309247][ T5220] Bluetooth: hci8: command tx timeout
[  526.550949][ T5229] Bluetooth: hci9: command tx timeout
[  526.556485][ T5220] Bluetooth: hci7: command tx timeout
[  526.709054][ T5220] Bluetooth: hci10: command tx timeout
[  526.789025][ T5220] Bluetooth: hci0: command tx timeout
[  528.788964][ T5220] Bluetooth: hci10: command tx timeout
[  528.869037][ T5220] Bluetooth: hci0: command tx timeout
[  530.609600][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  530.620736][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  530.645275][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  530.653453][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  530.662487][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  530.670147][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  530.831277][ T8567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  530.848981][ T8567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  530.857429][ T8567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  530.866104][ T8567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  530.876429][ T8567] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  530.888581][ T8567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  530.899498][ T8567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  530.907715][ T8567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  530.916303][ T8567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  530.926038][ T8567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  530.945495][ T8567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  530.952840][ T5229] Bluetooth: hci0: command tx timeout
[  530.960211][ T8567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  532.709088][ T5220] Bluetooth: hci1: command tx timeout
[  532.949131][ T5220] Bluetooth: hci5: command tx timeout
[  533.029069][ T8567] Bluetooth: hci0: command tx timeout
[  533.034632][ T5220] Bluetooth: hci2: command tx timeout
[  534.788968][ T5220] Bluetooth: hci1: command tx timeout
[  535.030257][ T5220] Bluetooth: hci5: command tx timeout
[  535.109006][ T5220] Bluetooth: hci2: command tx timeout
[  536.869108][ T5220] Bluetooth: hci1: command tx timeout
[  537.109105][ T5220] Bluetooth: hci5: command tx timeout
[  537.188900][ T5220] Bluetooth: hci2: command tx timeout
[  538.949065][ T5220] Bluetooth: hci1: command tx timeout
[  539.188968][ T5220] Bluetooth: hci5: command tx timeout
[  539.269062][ T5220] Bluetooth: hci2: command tx timeout
[  563.037492][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  563.044061][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  580.544925][ T8567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  580.554764][ T8567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  580.562648][ T8567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  580.575407][ T8567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  580.588993][ T8567] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  580.596826][ T8567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  582.629037][ T5220] Bluetooth: hci6: command tx timeout
[  584.567927][ T8567] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  584.579321][ T8567] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  584.587635][ T8567] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  584.595881][ T8567] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  584.608516][ T8567] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  584.619211][ T8567] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  584.709091][ T8567] Bluetooth: hci6: command tx timeout
[  586.709347][ T8567] Bluetooth: hci11: command tx timeout
[  586.789109][ T8567] Bluetooth: hci6: command tx timeout
[  588.789135][ T8567] Bluetooth: hci11: command tx timeout
[  588.869045][ T8567] Bluetooth: hci6: command tx timeout
[  590.869173][ T8567] Bluetooth: hci11: command tx timeout
[  591.180195][ T5220] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  591.198994][ T5220] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  591.209012][ T5220] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  591.217804][ T5220] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  591.225766][ T5220] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  591.236855][ T5220] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  591.378615][ T5220] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  591.390236][ T5220] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  591.399409][ T5220] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  591.411524][ T5220] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  591.427815][ T5220] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  591.436000][ T5220] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  591.537545][ T8567] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  591.548906][ T8567] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  591.559049][ T8567] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  591.568603][ T8567] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  591.581231][ T8567] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  591.589142][ T8567] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  592.949173][ T8567] Bluetooth: hci11: command tx timeout
[  593.349001][ T8567] Bluetooth: hci12: command tx timeout
[  593.509135][ T8567] Bluetooth: hci13: command tx timeout
[  593.668997][ T8567] Bluetooth: hci14: command tx timeout
[  595.428968][ T8567] Bluetooth: hci12: command tx timeout
[  595.591272][ T8567] Bluetooth: hci13: command tx timeout
[  595.752455][ T8567] Bluetooth: hci14: command tx timeout
[  597.508929][ T8567] Bluetooth: hci12: command tx timeout
[  597.669076][ T8567] Bluetooth: hci13: command tx timeout
[  597.829030][ T8567] Bluetooth: hci14: command tx timeout
[  599.599027][ T8567] Bluetooth: hci12: command tx timeout
[  599.748944][ T8567] Bluetooth: hci13: command tx timeout
[  599.909005][ T8567] Bluetooth: hci14: command tx timeout
[  624.472173][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  624.478572][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  640.567182][ T5225] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  640.576631][ T5225] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  640.585177][ T5225] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  640.594953][ T5225] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  640.605620][ T5225] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  640.613663][ T5225] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  641.916287][ T8634] Bluetooth: hci4: command 0x0406 tx timeout
[  641.923500][ T5225] Bluetooth: hci9: command 0x0406 tx timeout
[  641.998880][ T5225] Bluetooth: hci7: command 0x0406 tx timeout
[  642.005078][ T5225] Bluetooth: hci8: command 0x0406 tx timeout
[  642.708920][ T5220] Bluetooth: hci15: command tx timeout
[  644.677359][ T8567] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  644.688709][ T8567] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  644.697570][ T8567] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  644.705831][ T8567] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  644.714461][ T8567] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  644.731566][ T8567] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  644.788933][ T5220] Bluetooth: hci15: command tx timeout
[  646.789068][ T5220] Bluetooth: hci16: command tx timeout
[  646.869005][ T5220] Bluetooth: hci15: command tx timeout
[  647.040696][ T5220] Bluetooth: hci0: command 0x0406 tx timeout
[  647.046800][ T5220] Bluetooth: hci10: command 0x0406 tx timeout
[  648.877338][ T5229] Bluetooth: hci16: command tx timeout
[  648.949001][ T5229] Bluetooth: hci15: command tx timeout
[  650.948997][ T5229] Bluetooth: hci16: command tx timeout
[  651.715364][ T8567] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  651.725230][ T8567] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  651.735762][ T8567] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  651.754258][ T8567] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  651.764097][ T8567] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  651.771869][ T8567] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  652.235391][ T5229] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  652.247103][ T5229] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  652.256369][ T5229] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  652.273116][ T5229] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  652.281388][ T5229] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  652.290352][ T5229] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  652.709911][ T8567] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  652.719570][ T8567] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  652.727921][ T8567] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  652.740680][ T8567] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  652.752452][ T8567] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  652.761050][ T8567] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  653.028903][ T8567] Bluetooth: hci16: command tx timeout
[  653.829175][ T8567] Bluetooth: hci17: command tx timeout
[  654.389111][ T8567] Bluetooth: hci18: command tx timeout
[  654.789111][ T8567] Bluetooth: hci19: command tx timeout
[  655.911428][ T8567] Bluetooth: hci17: command tx timeout
[  656.469306][ T8567] Bluetooth: hci18: command tx timeout
[  656.869081][ T8567] Bluetooth: hci19: command tx timeout
[  657.287617][ T5225] Bluetooth: hci1: command 0x0406 tx timeout
[  657.293868][ T8634] Bluetooth: hci2: command 0x0406 tx timeout
[  657.300017][ T8567] Bluetooth: hci5: command 0x0406 tx timeout
[  657.988978][ T5229] Bluetooth: hci17: command tx timeout
[  658.548995][ T5229] Bluetooth: hci18: command tx timeout
[  658.957087][ T5229] Bluetooth: hci19: command tx timeout
[  660.069042][ T5229] Bluetooth: hci17: command tx timeout
[  660.629078][ T5229] Bluetooth: hci18: command tx timeout
[  661.028944][ T5229] Bluetooth: hci19: command tx timeout
[  680.789414][   T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds.
[  680.797140][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  680.822043][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  680.859241][   T30] task:kworker/u8:1    state:D stack:21088 pid:12    tgid:12    ppid:2      flags:0x00004000
[  680.913524][   T30] Workqueue: netns cleanup_net
[  680.918404][   T30] Call Trace:
[  680.942564][   T30]  <TASK>
[  680.945578][   T30]  __schedule+0x1843/0x4ae0
[  681.058844][   T30]  ? __pfx___schedule+0x10/0x10
[  681.082879][   T30]  ? __pfx_lock_release+0x10/0x10
[  681.088014][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  681.157643][   T30]  ? kthread_data+0x52/0xd0
[  681.198815][   T30]  ? schedule+0x90/0x320
[  681.203160][   T30]  ? wq_worker_sleeping+0x66/0x240
[  681.208378][   T30]  ? schedule+0x90/0x320
[  681.278791][   T30]  schedule+0x14b/0x320
[  681.283049][   T30]  schedule_preempt_disabled+0x13/0x30
[  681.288600][   T30]  __mutex_lock+0x6a7/0xd70
[  681.345412][   T30]  ? __mutex_lock+0x52a/0xd70
[  681.385634][   T30]  ? wg_destruct+0x25/0x2e0
[  681.398498][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  681.423397][   T30]  ? __pfx_free_percpu+0x10/0x10
[  681.428417][   T30]  ? kobject_put+0x272/0x480
[  681.489236][   T30]  ? __pfx_wg_destruct+0x10/0x10
[  681.494325][   T30]  wg_destruct+0x25/0x2e0
[  681.537079][   T30]  ? __pfx_wg_destruct+0x10/0x10
[  681.548112][   T30]  netdev_run_todo+0xe1a/0x1000
[  681.578989][   T30]  ? __pfx_netdev_run_todo+0x10/0x10
[  681.584381][   T30]  ? unregister_netdevice_queue+0x26b/0x370
[  681.638992][   T30]  ? batadv_softif_destroy_netlink+0x1e3/0x270
[  681.645283][   T30]  default_device_exit_batch+0xa24/0xaa0
[  681.676531][   T30]  ? __pfx___might_resched+0x10/0x10
[  681.699323][   T30]  ? __pfx_default_device_exit_batch+0x10/0x10
[  681.705569][   T30]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  681.739020][   T30]  ? cfg802154_pernet_exit+0xc3/0xe0
[  681.744496][   T30]  ? __pfx_default_device_exit_batch+0x10/0x10
[  681.791861][   T30]  cleanup_net+0x89d/0xcc0
[  681.796384][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  681.830190][   T30]  ? process_scheduled_works+0x976/0x1850
[  681.836021][   T30]  process_scheduled_works+0xa63/0x1850
[  681.884805][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  681.908978][   T30]  ? assign_work+0x364/0x3d0
[  681.913674][   T30]  worker_thread+0x870/0xd30
[  681.918347][   T30]  ? __kthread_parkme+0x169/0x1d0
[  681.957166][   T30]  ? __pfx_worker_thread+0x10/0x10
[  681.977223][   T30]  kthread+0x2f0/0x390
[  681.986434][   T30]  ? __pfx_worker_thread+0x10/0x10
[  682.003935][   T30]  ? __pfx_kthread+0x10/0x10
[  682.008613][   T30]  ret_from_fork+0x4b/0x80
[  682.028915][   T30]  ? __pfx_kthread+0x10/0x10
[  682.033790][   T30]  ret_from_fork_asm+0x1a/0x30
[  682.038648][   T30]  </TASK>
[  682.067442][   T30] INFO: task kworker/u8:3:52 blocked for more than 144 seconds.
[  682.098914][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  682.106272][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  682.148857][   T30] task:kworker/u8:3    state:D stack:21136 pid:52    tgid:52    ppid:2      flags:0x00004000
[  682.192023][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  682.198116][   T30] Call Trace:
[  682.225742][   T30]  <TASK>
[  682.236158][   T30]  __schedule+0x1843/0x4ae0
[  682.253605][   T30]  ? __pfx___schedule+0x10/0x10
[  682.258543][   T30]  ? __pfx_lock_release+0x10/0x10
[  682.278904][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  682.284445][   T30]  ? kthread_data+0x52/0xd0
[  682.308926][   T30]  ? schedule+0x90/0x320
[  682.313257][   T30]  ? wq_worker_sleeping+0x66/0x240
[  682.318425][   T30]  ? schedule+0x90/0x320
[  682.350608][   T30]  schedule+0x14b/0x320
[  682.354860][   T30]  schedule_preempt_disabled+0x13/0x30
[  682.384359][   T30]  __mutex_lock+0x6a7/0xd70
[  682.405295][   T30]  ? mark_lock+0x9a/0x360
[  682.420034][   T30]  ? __mutex_lock+0x52a/0xd70
[  682.424807][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  682.455584][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  682.466462][   T30]  addrconf_dad_work+0xd0/0x16f0
[  682.484430][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  682.503337][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  682.518772][   T30]  ? process_scheduled_works+0x976/0x1850
[  682.524580][   T30]  process_scheduled_works+0xa63/0x1850
[  682.549336][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  682.555424][   T30]  ? assign_work+0x364/0x3d0
[  682.583842][   T30]  worker_thread+0x870/0xd30
[  682.588541][   T30]  ? __kthread_parkme+0x169/0x1d0
[  682.615919][   T30]  ? __pfx_worker_thread+0x10/0x10
[  682.630484][   T30]  kthread+0x2f0/0x390
[  682.634635][   T30]  ? __pfx_worker_thread+0x10/0x10
[  682.658844][   T30]  ? __pfx_kthread+0x10/0x10
[  682.663521][   T30]  ret_from_fork+0x4b/0x80
[  682.667992][   T30]  ? __pfx_kthread+0x10/0x10
[  682.707425][   T30]  ret_from_fork_asm+0x1a/0x30
[  682.724670][   T30]  </TASK>
[  682.736213][   T30] INFO: task kworker/u8:12:5848 blocked for more than 145 seconds.
[  682.765144][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  682.779193][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  682.787928][   T30] task:kworker/u8:12   state:D stack:20344 pid:5848  tgid:5848  ppid:2      flags:0x00004000
[  682.837061][   T30] Workqueue: events_unbound linkwatch_event
[  682.847533][   T30] Call Trace:
[  682.857301][   T30]  <TASK>
[  682.864429][   T30]  __schedule+0x1843/0x4ae0
[  682.877778][   T30]  ? __pfx___schedule+0x10/0x10
[  682.888899][   T30]  ? __pfx_lock_release+0x10/0x10
[  682.894016][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  682.907890][   T30]  ? kthread_data+0x52/0xd0
[  682.912871][   T30]  ? schedule+0x90/0x320
[  682.917182][   T30]  ? wq_worker_sleeping+0x66/0x240
[  682.931202][   T30]  ? schedule+0x90/0x320
[  682.935523][   T30]  schedule+0x14b/0x320
[  682.947873][   T30]  schedule_preempt_disabled+0x13/0x30
[  682.953873][   T30]  __mutex_lock+0x6a7/0xd70
[  682.958446][   T30]  ? __mutex_lock+0x52a/0xd70
[  682.968784][   T30]  ? linkwatch_event+0xe/0x60
[  682.973533][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  682.978621][   T30]  ? process_scheduled_works+0x976/0x1850
[  682.996695][   T30]  linkwatch_event+0xe/0x60
[  683.004036][   T30]  process_scheduled_works+0xa63/0x1850
[  683.016150][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  683.024985][   T30]  ? assign_work+0x364/0x3d0
[  683.039180][   T30]  worker_thread+0x870/0xd30
[  683.043866][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  683.059455][   T30]  ? __kthread_parkme+0x169/0x1d0
[  683.064735][   T30]  ? __pfx_worker_thread+0x10/0x10
[  683.078589][   T30]  kthread+0x2f0/0x390
[  683.083130][   T30]  ? __pfx_worker_thread+0x10/0x10
[  683.090194][   T30]  ? __pfx_kthread+0x10/0x10
[  683.094861][   T30]  ret_from_fork+0x4b/0x80
[  683.105354][   T30]  ? __pfx_kthread+0x10/0x10
[  683.115466][   T30]  ret_from_fork_asm+0x1a/0x30
[  683.125388][   T30]  </TASK>
[  683.128558][   T30] INFO: task syz-executor:7436 blocked for more than 145 seconds.
[  683.140441][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  683.147777][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  683.162976][   T30] task:syz-executor    state:D stack:20784 pid:7436  tgid:7436  ppid:1      flags:0x00004006
[  683.178558][   T30] Call Trace:
[  683.186921][   T30]  <TASK>
[  683.195694][   T30]  __schedule+0x1843/0x4ae0
[  683.205407][   T30]  ? __pfx___schedule+0x10/0x10
[  683.215362][   T30]  ? __pfx_lock_release+0x10/0x10
[  683.226913][   T30]  ? schedule+0x90/0x320
[  683.235329][   T30]  schedule+0x14b/0x320
[  683.244563][   T30]  schedule_timeout+0xb0/0x310
[  683.253058][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  683.258499][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  683.269946][   T30]  ? wait_for_completion+0x2fe/0x620
[  683.275307][   T30]  ? wait_for_completion+0x2fe/0x620
[  683.288169][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.297730][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  683.308817][   T30]  ? wait_for_completion+0x2fe/0x620
[  683.317378][   T30]  wait_for_completion+0x355/0x620
[  683.328145][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  683.337751][   T30]  ? __flush_work+0xe7/0xc50
[  683.347448][   T30]  __flush_work+0xa37/0xc50
[  683.358762][   T30]  ? __flush_work+0xe7/0xc50
[  683.363441][   T30]  ? __pfx___flush_work+0x10/0x10
[  683.368518][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[  683.382342][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  683.393666][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  683.404538][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.414502][   T30]  unregister_netdevice_many_notify+0x87b/0x1da0
[  683.427661][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  683.445633][   T30]  ? mark_lock+0x9a/0x360
[  683.451711][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  683.457767][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  683.468940][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  683.474325][   T30]  unregister_netdevice_queue+0x303/0x370
[  683.490796][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  683.498636][   T30]  __tun_detach+0x6b9/0x1600
[  683.512125][   T30]  tun_chr_close+0x105/0x1b0
[  683.516796][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  683.527772][   T30]  __fput+0x23f/0x880
[  683.544051][   T30]  task_work_run+0x24f/0x310
[  683.552594][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  683.557959][   T30]  ? __pfx_task_work_run+0x10/0x10
[  683.568413][   T30]  ? do_exit+0xa2a/0x28e0
[  683.576639][   T30]  ? kmem_cache_free+0x1a2/0x420
[  683.586648][   T30]  ? do_exit+0xa2a/0x28e0
[  683.597570][   T30]  do_exit+0xa2f/0x28e0
[  683.608774][   T30]  ? __pfx_do_exit+0x10/0x10
[  683.613441][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  683.626588][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  683.633431][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  683.650244][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  683.655432][   T30]  do_group_exit+0x207/0x2c0
[  683.668855][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.674126][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  683.689140][   T30]  get_signal+0x176f/0x1810
[  683.693731][   T30]  ? __pfx_get_signal+0x10/0x10
[  683.698646][   T30]  arch_do_signal_or_restart+0x96/0x860
[  683.716192][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  683.725757][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  683.737929][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  683.746877][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  683.758881][   T30]  do_syscall_64+0x100/0x230
[  683.763579][   T30]  ? clear_bhb_loop+0x35/0x90
[  683.768309][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.784966][   T30] RIP: 0033:0x7f9c7357c93c
[  683.793272][   T30] RSP: 002b:00007fff9f4a3f90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  683.808507][   T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f9c7357c93c
[  683.820471][   T30] RDX: 0000000000000028 RSI: 00007fff9f4a4040 RDI: 00000000000000f9
[  683.836786][   T30] RBP: 00007fff9f4a3fec R08: 0000000000000000 R09: 0079746972756365
[  683.847644][   T30] R10: 00007f9c737087e0 R11: 0000000000000246 R12: 00005555625b5603
[  683.858754][   T30] R13: 00005555625b5590 R14: 0000000000000005 R15: 00007fff9f4a4040
[  683.866806][   T30]  </TASK>
[  683.878381][   T30] INFO: task syz-executor:8240 blocked for more than 146 seconds.
[  683.888475][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  683.905028][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  683.917609][   T30] task:syz-executor    state:D stack:21240 pid:8240  tgid:8240  ppid:1      flags:0x00004006
[  683.937950][   T30] Call Trace:
[  683.945359][   T30]  <TASK>
[  683.948455][   T30]  __schedule+0x1843/0x4ae0
[  683.958888][   T30]  ? __pfx___schedule+0x10/0x10
[  683.963828][   T30]  ? __pfx_lock_release+0x10/0x10
[  683.977002][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  683.983047][   T30]  ? schedule+0x90/0x320
[  683.987347][   T30]  schedule+0x14b/0x320
[  683.994283][   T30]  schedule_preempt_disabled+0x13/0x30
[  684.009315][   T30]  __mutex_lock+0x6a7/0xd70
[  684.013994][   T30]  ? __mutex_lock+0x52a/0xd70
[  684.026314][   T30]  ? tun_chr_close+0x3b/0x1b0
[  684.031826][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  684.036936][   T30]  ? __pfx_call_rcu+0x10/0x10
[  684.049220][   T30]  tun_chr_close+0x3b/0x1b0
[  684.053883][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  684.066755][   T30]  __fput+0x23f/0x880
[  684.073064][   T30]  task_work_run+0x24f/0x310
[  684.077800][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  684.091943][   T30]  ? __pfx_task_work_run+0x10/0x10
[  684.097149][   T30]  ? do_exit+0xa2a/0x28e0
[  684.107074][   T30]  ? kmem_cache_free+0x1a2/0x420
[  684.117670][   T30]  ? do_exit+0xa2a/0x28e0
[  684.127114][   T30]  do_exit+0xa2f/0x28e0
[  684.137767][   T30]  ? __pfx_do_exit+0x10/0x10
[  684.147763][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  684.157258][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.168444][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  684.178678][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  684.184332][   T30]  do_group_exit+0x207/0x2c0
[  684.198532][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  684.204225][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  684.218886][   T30]  get_signal+0x176f/0x1810
[  684.223484][   T30]  ? __sock_sendmsg+0x113/0x270
[  684.228392][   T30]  ? __pfx_get_signal+0x10/0x10
[  684.243251][   T30]  arch_do_signal_or_restart+0x96/0x860
[  684.254371][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  684.265658][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.275539][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  684.286424][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  684.295984][   T30]  do_syscall_64+0x100/0x230
[  684.307416][   T30]  ? clear_bhb_loop+0x35/0x90
[  684.314955][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.328987][   T30] RIP: 0033:0x7f1ecff7fd8c
[  684.333469][   T30] RSP: 002b:00007ffe2164ad20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  684.351071][   T30] RAX: 0000000000000028 RBX: 00007f1ed0c64620 RCX: 00007f1ecff7fd8c
[  684.367568][   T30] RDX: 0000000000000028 RSI: 00007f1ed0c64670 RDI: 0000000000000003
[  684.378400][   T30] RBP: 0000000000000000 R08: 00007ffe2164ad74 R09: 000000000000000c
[  684.392637][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  684.407854][   T30] R13: 0000000000000000 R14: 00007f1ed0c64670 R15: 0000000000000000
[  684.424028][   T30]  </TASK>
[  684.427368][   T30] INFO: task syz-executor:8269 blocked for more than 146 seconds.
[  684.441505][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  684.456284][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  684.466532][   T30] task:syz-executor    state:D stack:21520 pid:8269  tgid:8269  ppid:1      flags:0x00004006
[  684.484813][   T30] Call Trace:
[  684.488396][   T30]  <TASK>
[  684.499134][   T30]  __schedule+0x1843/0x4ae0
[  684.503735][   T30]  ? __pfx___schedule+0x10/0x10
[  684.517648][   T30]  ? __pfx_lock_release+0x10/0x10
[  684.524733][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  684.540830][   T30]  ? schedule+0x90/0x320
[  684.545299][   T30]  schedule+0x14b/0x320
[  684.558853][   T30]  schedule_preempt_disabled+0x13/0x30
[  684.564392][   T30]  __mutex_lock+0x6a7/0xd70
[  684.577071][   T30]  ? __mutex_lock+0x52a/0xd70
[  684.582193][   T30]  ? tun_chr_close+0x3b/0x1b0
[  684.586966][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  684.596453][   T30]  ? __pfx_call_rcu+0x10/0x10
[  684.607482][   T30]  tun_chr_close+0x3b/0x1b0
[  684.613701][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  684.622132][   T30]  __fput+0x23f/0x880
[  684.626192][   T30]  task_work_run+0x24f/0x310
[  684.643003][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  684.648410][   T30]  ? __pfx_task_work_run+0x10/0x10
[  684.664675][   T30]  ? do_exit+0xa2a/0x28e0
[  684.672945][   T30]  ? kmem_cache_free+0x1a2/0x420
[  684.677963][   T30]  ? do_exit+0xa2a/0x28e0
[  684.687430][   T30]  do_exit+0xa2f/0x28e0
[  684.695510][   T30]  ? __pfx_do_exit+0x10/0x10
[  684.705192][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  684.718856][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.728767][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  684.735175][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  684.748225][   T30]  do_group_exit+0x207/0x2c0
[  684.753947][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  684.767934][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  684.776003][   T30]  get_signal+0x176f/0x1810
[  684.788763][   T30]  ? __sock_sendmsg+0x113/0x270
[  684.793708][   T30]  ? __pfx_get_signal+0x10/0x10
[  684.798625][   T30]  arch_do_signal_or_restart+0x96/0x860
[  684.815821][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  684.823644][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.841724][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  684.847628][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  684.861000][   T30]  do_syscall_64+0x100/0x230
[  684.865675][   T30]  ? clear_bhb_loop+0x35/0x90
[  684.876927][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.887470][   T30] RIP: 0033:0x7f28a0f7fd8c
[  684.898084][   T30] RSP: 002b:00007ffee29fd570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  684.909277][   T30] RAX: 0000000000000040 RBX: 00007f28a1c64620 RCX: 00007f28a0f7fd8c
[  684.917459][   T30] RDX: 0000000000000040 RSI: 00007f28a1c64670 RDI: 0000000000000003
[  684.929792][   T30] RBP: 0000000000000000 R08: 00007ffee29fd5c4 R09: 000000000000000c
[  684.937843][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  684.955864][   T30] R13: 0000000000000000 R14: 00007f28a1c64670 R15: 0000000000000000
[  684.966727][   T30]  </TASK>
[  684.975993][   T30] INFO: task syz.1.738:8545 blocked for more than 147 seconds.
[  684.986829][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  685.000744][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  685.017829][   T30] task:syz.1.738       state:D stack:25712 pid:8545  tgid:8544  ppid:6180   flags:0x00004006
[  685.028561][   T30] Call Trace:
[  685.038808][   T30]  <TASK>
[  685.041816][   T30]  __schedule+0x1843/0x4ae0
[  685.046386][   T30]  ? __pfx___schedule+0x10/0x10
[  685.061447][   T30]  ? __pfx_lock_release+0x10/0x10
[  685.066733][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  685.079210][   T30]  ? schedule+0x90/0x320
[  685.083539][   T30]  schedule+0x14b/0x320
[  685.087753][   T30]  schedule_preempt_disabled+0x13/0x30
[  685.101965][   T30]  __mutex_lock+0x6a7/0xd70
[  685.106565][   T30]  ? __mutex_lock+0x52a/0xd70
[  685.119461][   T30]  ? tun_chr_close+0x3b/0x1b0
[  685.124223][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  685.138795][   T30]  ? __pfx_call_rcu+0x10/0x10
[  685.143558][   T30]  tun_chr_close+0x3b/0x1b0
[  685.148117][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  685.161766][   T30]  __fput+0x23f/0x880
[  685.166257][   T30]  task_work_run+0x24f/0x310
[  685.177535][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  685.186781][   T30]  ? __pfx_task_work_run+0x10/0x10
[  685.197129][   T30]  ? do_exit+0xa2a/0x28e0
[  685.205448][   T30]  ? kmem_cache_free+0x1a2/0x420
[  685.214600][   T30]  ? do_exit+0xa2a/0x28e0
[  685.224540][   T30]  do_exit+0xa2f/0x28e0
[  685.231472][   T30]  ? __pfx_do_exit+0x10/0x10
[  685.237674][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  685.252655][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  685.267467][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  685.275041][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  685.288769][   T30]  do_group_exit+0x207/0x2c0
[  685.293427][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.298673][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  685.314022][   T30]  get_signal+0x176f/0x1810
[  685.318589][   T30]  ? sock_do_ioctl+0x1d4/0x460
[  685.331972][   T30]  ? __pfx_get_signal+0x10/0x10
[  685.336903][   T30]  ? __asan_memset+0x23/0x50
[  685.348003][   T30]  arch_do_signal_or_restart+0x96/0x860
[  685.363692][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  685.373876][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  685.385143][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  685.395413][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  685.406115][   T30]  do_syscall_64+0x100/0x230
[  685.414625][   T30]  ? clear_bhb_loop+0x35/0x90
[  685.425702][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.437281][   T30] RIP: 0033:0x7f705d97def9
[  685.448783][   T30] RSP: 002b:00007f705e847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  685.457282][   T30] RAX: ffffffffffffffed RBX: 00007f705db35f80 RCX: 00007f705d97def9
[  685.475806][   T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000004
[  685.487707][   T30] RBP: 00007f705d9f0b76 R08: 0000000000000000 R09: 0000000000000000
[  685.500739][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  685.518925][   T30] R13: 0000000000000000 R14: 00007f705db35f80 R15: 00007ffe344e7868
[  685.527009][   T30]  </TASK>
[  685.538880][   T30] INFO: task syz.0.741:8559 blocked for more than 148 seconds.
[  685.556566][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  685.564792][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  685.580395][   T30] task:syz.0.741       state:D stack:25184 pid:8559  tgid:8558  ppid:6440   flags:0x00004006
[  685.599075][   T30] Call Trace:
[  685.602405][   T30]  <TASK>
[  685.605389][   T30]  __schedule+0x1843/0x4ae0
[  685.617661][   T30]  ? __pfx___schedule+0x10/0x10
[  685.626631][   T30]  ? __pfx_lock_release+0x10/0x10
[  685.636769][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  685.648787][   T30]  ? schedule+0x90/0x320
[  685.653101][   T30]  schedule+0x14b/0x320
[  685.657302][   T30]  schedule_preempt_disabled+0x13/0x30
[  685.671610][   T30]  __mutex_lock+0x6a7/0xd70
[  685.676191][   T30]  ? __mutex_lock+0x52a/0xd70
[  685.692952][   T30]  ? tun_chr_close+0x3b/0x1b0
[  685.697718][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  685.708149][   T30]  ? __pfx_call_rcu+0x10/0x10
[  685.717883][   T30]  tun_chr_close+0x3b/0x1b0
[  685.726405][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  685.736575][   T30]  __fput+0x23f/0x880
[  685.744562][   T30]  task_work_run+0x24f/0x310
[  685.758659][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  685.764088][   T30]  ? __pfx_task_work_run+0x10/0x10
[  685.780184][   T30]  ? do_exit+0xa2a/0x28e0
[  685.784585][   T30]  ? kmem_cache_free+0x1a2/0x420
[  685.797168][   T30]  ? do_exit+0xa2a/0x28e0
[  685.803108][   T30]  do_exit+0xa2f/0x28e0
[  685.807324][   T30]  ? __pfx_do_exit+0x10/0x10
[  685.818758][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  685.824204][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  685.840313][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  685.846720][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  685.861521][   T30]  do_group_exit+0x207/0x2c0
[  685.866179][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  685.877338][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  685.888981][   T30]  get_signal+0x176f/0x1810
[  685.893566][   T30]  ? __pfx_get_signal+0x10/0x10
[  685.898459][   T30]  ? do_futex+0x392/0x560
[  685.909343][   T30]  ? __fget_files+0x29/0x470
[  685.914400][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  685.922600][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  685.937057][   T30]  arch_do_signal_or_restart+0x96/0x860
[  685.945218][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  685.958834][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  685.964916][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  685.978952][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  685.984664][   T30]  do_syscall_64+0x100/0x230
[  686.000628][   T30]  ? clear_bhb_loop+0x35/0x90
[  686.005404][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.020026][   T30] RIP: 0033:0x7f358b77def9
[  686.024517][   T30] RSP: 002b:00007f358c5e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  686.042048][   T30] RAX: 0000000000018ff8 RBX: 00007f358b935f80 RCX: 00007f358b77def9
[  686.058551][   T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000005
[  686.070637][   T30] RBP: 00007f358b7f0b76 R08: 0000000000000000 R09: 0000000000000000
[  686.078685][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.096005][   T30] R13: 0000000000000000 R14: 00007f358b935f80 R15: 00007ffff68605a8
[  686.110633][   T30]  </TASK>
[  686.117817][   T30] INFO: task syz-executor:8570 blocked for more than 148 seconds.
[  686.135680][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  686.144603][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  686.158155][   T30] task:syz-executor    state:D stack:24128 pid:8570  tgid:8570  ppid:1      flags:0x00000004
[  686.177777][   T30] Call Trace:
[  686.181650][   T30]  <TASK>
[  686.184996][   T30]  __schedule+0x1843/0x4ae0
[  686.198327][   T30]  ? __pfx___schedule+0x10/0x10
[  686.203584][   T30]  ? __pfx_lock_release+0x10/0x10
[  686.208677][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  686.225044][   T30]  ? schedule+0x90/0x320
[  686.237837][   T30]  schedule+0x14b/0x320
[  686.242419][   T30]  schedule_preempt_disabled+0x13/0x30
[  686.247936][   T30]  __mutex_lock+0x6a7/0xd70
[  686.258767][   T30]  ? __mutex_lock+0x52a/0xd70
[  686.267845][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  686.283889][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  686.291450][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  686.296459][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  686.310710][   T30]  ? __lock_acquire+0x1384/0x2050
[  686.315820][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.326600][   T30]  netlink_rcv_skb+0x1e3/0x430
[  686.336068][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.347357][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  686.357781][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  686.368376][   T30]  netlink_unicast+0x7f6/0x990
[  686.378251][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  686.387762][   T30]  ? __virt_addr_valid+0x183/0x530
[  686.399445][   T30]  ? __check_object_size+0x48e/0x900
[  686.404814][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  686.418127][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.423831][   T30]  ? __might_fault+0xaa/0x120
[  686.428572][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.438777][   T30]  __sock_sendmsg+0x221/0x270
[  686.443532][   T30]  __sys_sendto+0x398/0x4f0
[  686.448099][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  686.462783][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  686.477313][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  686.487979][   T30]  ? exc_page_fault+0x590/0x8c0
[  686.497931][   T30]  __x64_sys_sendto+0xde/0x100
[  686.508021][   T30]  do_syscall_64+0xf3/0x230
[  686.517699][   T30]  ? clear_bhb_loop+0x35/0x90
[  686.526421][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.537476][   T30] RIP: 0033:0x7f5ff417fd8c
[  686.546313][   T30] RSP: 002b:00007ffca6bb75d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  686.563137][   T30] RAX: ffffffffffffffda RBX: 00007f5ff4e64620 RCX: 00007f5ff417fd8c
[  686.576555][   T30] RDX: 0000000000000028 RSI: 00007f5ff4e64670 RDI: 0000000000000003
[  686.589676][   T30] RBP: 0000000000000000 R08: 00007ffca6bb7624 R09: 000000000000000c
[  686.597768][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  686.613846][   T30] R13: 0000000000000000 R14: 00007f5ff4e64670 R15: 0000000000000000
[  686.625830][   T30]  </TASK>
[  686.634272][   T30] INFO: task syz-executor:8573 blocked for more than 149 seconds.
[  686.645976][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  686.662355][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  686.678832][   T30] task:syz-executor    state:D stack:24128 pid:8573  tgid:8573  ppid:1      flags:0x00000004
[  686.696717][   T30] Call Trace:
[  686.700833][   T30]  <TASK>
[  686.703819][   T30]  __schedule+0x1843/0x4ae0
[  686.708390][   T30]  ? __pfx___schedule+0x10/0x10
[  686.725312][   T30]  ? __pfx_lock_release+0x10/0x10
[  686.732202][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  686.737736][   T30]  ? schedule+0x90/0x320
[  686.750557][   T30]  schedule+0x14b/0x320
[  686.754889][   T30]  schedule_preempt_disabled+0x13/0x30
[  686.768626][   T30]  __mutex_lock+0x6a7/0xd70
[  686.775179][   T30]  ? __mutex_lock+0x52a/0xd70
[  686.788437][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  686.798502][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  686.812944][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  686.818004][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  686.827374][   T30]  ? __lock_acquire+0x1384/0x2050
[  686.837420][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.846852][   T30]  netlink_rcv_skb+0x1e3/0x430
[  686.858688][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.864428][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  686.878870][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  686.884161][   T30]  netlink_unicast+0x7f6/0x990
[  686.898273][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  686.904080][   T30]  ? __virt_addr_valid+0x183/0x530
[  686.918845][   T30]  ? __check_object_size+0x48e/0x900
[  686.924231][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  686.937206][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.943137][   T30]  ? __might_fault+0xaa/0x120
[  686.947890][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.958757][   T30]  __sock_sendmsg+0x221/0x270
[  686.963518][   T30]  __sys_sendto+0x398/0x4f0
[  686.968168][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  686.984110][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  686.995686][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  687.006440][   T30]  ? exc_page_fault+0x590/0x8c0
[  687.016370][   T30]  __x64_sys_sendto+0xde/0x100
[  687.025399][   T30]  do_syscall_64+0xf3/0x230
[  687.036968][   T30]  ? clear_bhb_loop+0x35/0x90
[  687.045640][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.056756][   T30] RIP: 0033:0x7f0ba957fd8c
[  687.065236][   T30] RSP: 002b:00007ffed40559b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  687.085772][   T30] RAX: ffffffffffffffda RBX: 00007f0baa264620 RCX: 00007f0ba957fd8c
[  687.097466][   T30] RDX: 0000000000000028 RSI: 00007f0baa264670 RDI: 0000000000000003
[  687.113657][   T30] RBP: 0000000000000000 R08: 00007ffed4055a04 R09: 000000000000000c
[  687.125691][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  687.138891][   T30] R13: 0000000000000000 R14: 00007f0baa264670 R15: 0000000000000000
[  687.146946][   T30]  </TASK>
[  687.159471][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  687.168666][   T30] INFO: task syz-executor:8576 blocked for more than 149 seconds.
[  687.182141][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  687.196961][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.209146][   T30] task:syz-executor    state:D stack:22352 pid:8576  tgid:8576  ppid:1      flags:0x00000004
[  687.227256][   T30] Call Trace:
[  687.232125][   T30]  <TASK>
[  687.235110][   T30]  __schedule+0x1843/0x4ae0
[  687.247248][   T30]  ? __pfx___schedule+0x10/0x10
[  687.254979][   T30]  ? __pfx_lock_release+0x10/0x10
[  687.267332][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  687.274453][   T30]  ? schedule+0x90/0x320
[  687.284523][   T30]  schedule+0x14b/0x320
[  687.293346][   T30]  schedule_preempt_disabled+0x13/0x30
[  687.302760][   T30]  __mutex_lock+0x6a7/0xd70
[  687.307336][   T30]  ? __mutex_lock+0x52a/0xd70
[  687.318912][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  687.324091][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  687.339127][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  687.344147][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  687.358290][   T30]  ? __lock_acquire+0x1384/0x2050
[  687.363750][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  687.378148][   T30]  netlink_rcv_skb+0x1e3/0x430
[  687.384914][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  687.398767][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  687.404160][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  687.417978][   T30]  netlink_unicast+0x7f6/0x990
[  687.423228][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  687.428570][   T30]  ? __virt_addr_valid+0x183/0x530
[  687.439447][   T30]  ? __check_object_size+0x48e/0x900
[  687.444831][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  687.457818][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  687.463530][   T30]  ? __might_fault+0xaa/0x120
[  687.468282][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  687.478779][   T30]  __sock_sendmsg+0x221/0x270
[  687.483540][   T30]  __sys_sendto+0x398/0x4f0
[  687.498332][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  687.503915][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  687.515643][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  687.528133][   T30]  ? exc_page_fault+0x590/0x8c0
[  687.535776][   T30]  __x64_sys_sendto+0xde/0x100
[  687.546722][   T30]  do_syscall_64+0xf3/0x230
[  687.555604][   T30]  ? clear_bhb_loop+0x35/0x90
[  687.566658][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.575349][   T30] RIP: 0033:0x7fe19277fd8c
[  687.586138][   T30] RSP: 002b:00007ffe7a2056b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  687.608829][   T30] RAX: ffffffffffffffda RBX: 00007fe193464620 RCX: 00007fe19277fd8c
[  687.617244][   T30] RDX: 0000000000000028 RSI: 00007fe193464670 RDI: 0000000000000003
[  687.635333][   T30] RBP: 0000000000000000 R08: 00007ffe7a205704 R09: 000000000000000c
[  687.645010][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  687.662226][   T30] R13: 0000000000000000 R14: 00007fe193464670 R15: 0000000000000000
[  687.678839][   T30]  </TASK>
[  687.681920][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  687.700621][   T30] INFO: task syz-executor:8577 blocked for more than 150 seconds.
[  687.708495][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  687.722564][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.738242][   T30] task:syz-executor    state:D stack:24128 pid:8577  tgid:8577  ppid:1      flags:0x00000004
[  687.752452][   T30] Call Trace:
[  687.755790][   T30]  <TASK>
[  687.769685][   T30]  __schedule+0x1843/0x4ae0
[  687.774310][   T30]  ? __pfx___schedule+0x10/0x10
[  687.788869][   T30]  ? __pfx_lock_release+0x10/0x10
[  687.793978][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  687.809232][   T30]  ? schedule+0x90/0x320
[  687.813548][   T30]  schedule+0x14b/0x320
[  687.817763][   T30]  schedule_preempt_disabled+0x13/0x30
[  687.831956][   T30]  __mutex_lock+0x6a7/0xd70
[  687.836547][   T30]  ? __mutex_lock+0x52a/0xd70
[  687.850459][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  687.855647][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  687.868783][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  687.873797][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  687.887250][   T30]  ? __lock_acquire+0x1384/0x2050
[  687.892680][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  687.900118][   T30]  netlink_rcv_skb+0x1e3/0x430
[  687.904954][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  687.918812][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  687.924295][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  687.942892][   T30]  netlink_unicast+0x7f6/0x990
[  687.947759][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  687.958244][   T30]  ? __virt_addr_valid+0x183/0x530
[  687.968761][   T30]  ? __check_object_size+0x48e/0x900
[  687.974135][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  687.987537][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  687.995043][   T30]  ? __might_fault+0xaa/0x120
[  688.008775][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.014154][   T30]  __sock_sendmsg+0x221/0x270
[  688.028334][   T30]  __sys_sendto+0x398/0x4f0
[  688.033261][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  688.038382][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  688.048807][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  688.055230][   T30]  ? exc_page_fault+0x590/0x8c0
[  688.069628][   T30]  __x64_sys_sendto+0xde/0x100
[  688.074488][   T30]  do_syscall_64+0xf3/0x230
[  688.088805][   T30]  ? clear_bhb_loop+0x35/0x90
[  688.093563][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.104264][   T30] RIP: 0033:0x7effed97fd8c
[  688.114831][   T30] RSP: 002b:00007ffe76b3dc70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  688.128211][   T30] RAX: ffffffffffffffda RBX: 00007effee664620 RCX: 00007effed97fd8c
[  688.142552][   T30] RDX: 0000000000000028 RSI: 00007effee664670 RDI: 0000000000000003
[  688.154775][   T30] RBP: 0000000000000000 R08: 00007ffe76b3dcc4 R09: 000000000000000c
[  688.167823][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  688.178753][   T30] R13: 0000000000000000 R14: 00007effee664670 R15: 0000000000000000
[  688.186805][   T30]  </TASK>
[  688.199760][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  688.218803][   T30] INFO: task syz-executor:8592 blocked for more than 150 seconds.
[  688.227747][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  688.238750][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.247491][   T30] task:syz-executor    state:D stack:24128 pid:8592  tgid:8592  ppid:1      flags:0x00000004
[  688.265845][   T30] Call Trace:
[  688.270752][   T30]  <TASK>
[  688.273736][   T30]  __schedule+0x1843/0x4ae0
[  688.278311][   T30]  ? __pfx___schedule+0x10/0x10
[  688.291063][   T30]  ? __pfx_lock_release+0x10/0x10
[  688.296161][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  688.308568][   T30]  ? schedule+0x90/0x320
[  688.318321][   T30]  schedule+0x14b/0x320
[  688.325891][   T30]  schedule_preempt_disabled+0x13/0x30
[  688.337036][   T30]  __mutex_lock+0x6a7/0xd70
[  688.345218][   T30]  ? __mutex_lock+0x52a/0xd70
[  688.354936][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  688.366194][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  688.376849][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  688.385726][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  688.396444][   T30]  ? __lock_acquire+0x1384/0x2050
[  688.405402][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  688.417362][   T30]  netlink_rcv_skb+0x1e3/0x430
[  688.427269][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  688.438694][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  688.447921][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  688.458145][   T30]  netlink_unicast+0x7f6/0x990
[  688.466959][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  688.477400][   T30]  ? __virt_addr_valid+0x183/0x530
[  688.487770][   T30]  ? __check_object_size+0x48e/0x900
[  688.498147][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  688.506876][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.518763][   T30]  ? __might_fault+0xaa/0x120
[  688.523540][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.538523][   T30]  __sock_sendmsg+0x221/0x270
[  688.544076][   T30]  __sys_sendto+0x398/0x4f0
[  688.548655][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  688.558790][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  688.564858][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  688.579634][   T30]  ? exc_page_fault+0x590/0x8c0
[  688.584564][   T30]  __x64_sys_sendto+0xde/0x100
[  688.598846][   T30]  do_syscall_64+0xf3/0x230
[  688.603435][   T30]  ? clear_bhb_loop+0x35/0x90
[  688.608161][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.624505][   T30] RIP: 0033:0x7fbfe517fd8c
[  688.633796][   T30] RSP: 002b:00007ffd33ffcf70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  688.654662][   T30] RAX: ffffffffffffffda RBX: 00007fbfe5e64620 RCX: 00007fbfe517fd8c
[  688.665441][   T30] RDX: 0000000000000028 RSI: 00007fbfe5e64670 RDI: 0000000000000003
[  688.678759][   T30] RBP: 0000000000000000 R08: 00007ffd33ffcfc4 R09: 000000000000000c
[  688.686802][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  688.704697][   T30] R13: 0000000000000000 R14: 00007fbfe5e64670 R15: 0000000000000000
[  688.718476][   T30]  </TASK>
[  688.726610][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  688.738960][   T30] INFO: task syz-executor:8595 blocked for more than 151 seconds.
[  688.746823][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  688.759496][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.768223][   T30] task:syz-executor    state:D stack:24128 pid:8595  tgid:8595  ppid:1      flags:0x00000004
[  688.786841][   T30] Call Trace:
[  688.793850][   T30]  <TASK>
[  688.796840][   T30]  __schedule+0x1843/0x4ae0
[  688.809223][   T30]  ? __pfx___schedule+0x10/0x10
[  688.814201][   T30]  ? __pfx_lock_release+0x10/0x10
[  688.830436][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  688.835991][   T30]  ? schedule+0x90/0x320
[  688.848784][   T30]  schedule+0x14b/0x320
[  688.853017][   T30]  schedule_preempt_disabled+0x13/0x30
[  688.858527][   T30]  __mutex_lock+0x6a7/0xd70
[  688.876449][   T30]  ? __mutex_lock+0x52a/0xd70
[  688.888804][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  688.893998][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  688.907951][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  688.913316][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  688.918492][   T30]  ? __lock_acquire+0x1384/0x2050
[  688.935418][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  688.943939][   T30]  netlink_rcv_skb+0x1e3/0x430
[  688.957570][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  688.964664][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  688.977271][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  688.985910][   T30]  netlink_unicast+0x7f6/0x990
[  688.998259][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  689.004047][   T30]  ? __virt_addr_valid+0x183/0x530
[  689.017583][   T30]  ? __check_object_size+0x48e/0x900
[  689.023331][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  689.030075][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.035441][   T30]  ? __might_fault+0xaa/0x120
[  689.048902][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.054279][   T30]  __sock_sendmsg+0x221/0x270
[  689.068387][   T30]  __sys_sendto+0x398/0x4f0
[  689.073507][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  689.078633][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  689.088760][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  689.095167][   T30]  ? exc_page_fault+0x590/0x8c0
[  689.110417][   T30]  __x64_sys_sendto+0xde/0x100
[  689.115273][   T30]  do_syscall_64+0xf3/0x230
[  689.130355][   T30]  ? clear_bhb_loop+0x35/0x90
[  689.135124][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.148648][   T30] RIP: 0033:0x7f8cd177fd8c
[  689.153544][   T30] RSP: 002b:00007ffc5a4162e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  689.172879][   T30] RAX: ffffffffffffffda RBX: 00007f8cd2464620 RCX: 00007f8cd177fd8c
[  689.187070][   T30] RDX: 0000000000000028 RSI: 00007f8cd2464670 RDI: 0000000000000003
[  689.197806][   T30] RBP: 0000000000000000 R08: 00007ffc5a416334 R09: 000000000000000c
[  689.208751][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  689.216780][   T30] R13: 0000000000000000 R14: 00007f8cd2464670 R15: 0000000000000000
[  689.236913][   T30]  </TASK>
[  689.242763][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  689.258510][   T30] INFO: task syz-executor:8600 blocked for more than 151 seconds.
[  689.269192][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  689.276531][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  689.294080][   T30] task:syz-executor    state:D stack:24128 pid:8600  tgid:8600  ppid:1      flags:0x00000004
[  689.308261][   T30] Call Trace:
[  689.316542][   T30]  <TASK>
[  689.323371][   T30]  __schedule+0x1843/0x4ae0
[  689.327975][   T30]  ? __pfx___schedule+0x10/0x10
[  689.338908][   T30]  ? __pfx_lock_release+0x10/0x10
[  689.344022][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  689.358943][   T30]  ? schedule+0x90/0x320
[  689.363267][   T30]  schedule+0x14b/0x320
[  689.367479][   T30]  schedule_preempt_disabled+0x13/0x30
[  689.381731][   T30]  __mutex_lock+0x6a7/0xd70
[  689.386332][   T30]  ? __mutex_lock+0x52a/0xd70
[  689.396395][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  689.406713][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  689.417421][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  689.426308][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  689.438434][   T30]  ? __lock_acquire+0x1384/0x2050
[  689.447989][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.459189][   T30]  netlink_rcv_skb+0x1e3/0x430
[  689.464205][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.478805][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  689.484200][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  689.498073][   T30]  netlink_unicast+0x7f6/0x990
[  689.503278][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  689.508625][   T30]  ? __virt_addr_valid+0x183/0x530
[  689.518764][   T30]  ? __check_object_size+0x48e/0x900
[  689.524141][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  689.539350][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.544725][   T30]  ? __might_fault+0xaa/0x120
[  689.557341][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.564612][   T30]  __sock_sendmsg+0x221/0x270
[  689.576928][   T30]  __sys_sendto+0x398/0x4f0
[  689.583063][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  689.588183][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  689.604576][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  689.612690][   T30]  ? exc_page_fault+0x590/0x8c0
[  689.617615][   T30]  __x64_sys_sendto+0xde/0x100
[  689.628864][   T30]  do_syscall_64+0xf3/0x230
[  689.633452][   T30]  ? clear_bhb_loop+0x35/0x90
[  689.638177][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.654966][   T30] RIP: 0033:0x7fa53b57fd8c
[  689.664309][   T30] RSP: 002b:00007ffc68fb8f70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  689.679117][   T30] RAX: ffffffffffffffda RBX: 00007fa53c264620 RCX: 00007fa53b57fd8c
[  689.687337][   T30] RDX: 0000000000000028 RSI: 00007fa53c264670 RDI: 0000000000000003
[  689.705698][   T30] RBP: 0000000000000000 R08: 00007ffc68fb8fc4 R09: 000000000000000c
[  689.716480][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  689.728751][   T30] R13: 0000000000000000 R14: 00007fa53c264670 R15: 0000000000000000
[  689.736803][   T30]  </TASK>
[  689.751786][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  689.768506][   T30] INFO: task syz-executor:8605 blocked for more than 152 seconds.
[  689.778616][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  689.793549][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  689.806251][   T30] task:syz-executor    state:D stack:24128 pid:8605  tgid:8605  ppid:1      flags:0x00000004
[  689.823294][   T30] Call Trace:
[  689.826634][   T30]  <TASK>
[  689.836616][   T30]  __schedule+0x1843/0x4ae0
[  689.844540][   T30]  ? __pfx___schedule+0x10/0x10
[  689.858536][   T30]  ? __pfx_lock_release+0x10/0x10
[  689.865178][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  689.879249][   T30]  ? schedule+0x90/0x320
[  689.883659][   T30]  schedule+0x14b/0x320
[  689.887890][   T30]  schedule_preempt_disabled+0x13/0x30
[  689.901873][   T30]  __mutex_lock+0x6a7/0xd70
[  689.906470][   T30]  ? __mutex_lock+0x52a/0xd70
[  689.918926][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  689.924131][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  689.938889][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  689.943909][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  689.958807][   T30]  ? __lock_acquire+0x1384/0x2050
[  689.963933][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.976621][   T30]  netlink_rcv_skb+0x1e3/0x430
[  689.983228][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  689.999427][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  690.004820][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.018929][   T30]  netlink_unicast+0x7f6/0x990
[  690.023783][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  690.035409][   T30]  ? __virt_addr_valid+0x183/0x530
[  690.044645][   T30]  ? __check_object_size+0x48e/0x900
[  690.056553][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  690.065649][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.077348][   T30]  ? __might_fault+0xaa/0x120
[  690.085987][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.096609][   T30]  __sock_sendmsg+0x221/0x270
[  690.106904][   T30]  __sys_sendto+0x398/0x4f0
[  690.116774][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  690.125757][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  690.136801][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  690.147019][   T30]  ? exc_page_fault+0x590/0x8c0
[  690.158773][   T30]  __x64_sys_sendto+0xde/0x100
[  690.163618][   T30]  do_syscall_64+0xf3/0x230
[  690.168176][   T30]  ? clear_bhb_loop+0x35/0x90
[  690.181905][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.187875][   T30] RIP: 0033:0x7f9b0f17fd8c
[  690.197462][   T30] RSP: 002b:00007ffed3e6f850 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  690.208749][   T30] RAX: ffffffffffffffda RBX: 00007f9b0fe64620 RCX: 00007f9b0f17fd8c
[  690.216781][   T30] RDX: 0000000000000028 RSI: 00007f9b0fe64670 RDI: 0000000000000003
[  690.235949][   T30] RBP: 0000000000000000 R08: 00007ffed3e6f8a4 R09: 000000000000000c
[  690.246745][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  690.264866][   T30] R13: 0000000000000000 R14: 00007f9b0fe64670 R15: 0000000000000000
[  690.276603][   T30]  </TASK>
[  690.286977][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  690.297682][   T30] INFO: task syz-executor:8606 blocked for more than 152 seconds.
[  690.308820][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  690.316431][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  690.335766][   T30] task:syz-executor    state:D stack:24128 pid:8606  tgid:8606  ppid:1      flags:0x00000004
[  690.350477][   T30] Call Trace:
[  690.353812][   T30]  <TASK>
[  690.358407][   T30]  __schedule+0x1843/0x4ae0
[  690.369474][   T30]  ? __pfx___schedule+0x10/0x10
[  690.374398][   T30]  ? __pfx_lock_release+0x10/0x10
[  690.388876][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  690.394425][   T30]  ? schedule+0x90/0x320
[  690.407393][   T30]  schedule+0x14b/0x320
[  690.412090][   T30]  schedule_preempt_disabled+0x13/0x30
[  690.417608][   T30]  __mutex_lock+0x6a7/0xd70
[  690.427746][   T30]  ? __mutex_lock+0x52a/0xd70
[  690.435892][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  690.448435][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  690.459528][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  690.464534][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  690.477028][   T30]  ? __lock_acquire+0x1384/0x2050
[  690.483116][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  690.488657][   T30]  netlink_rcv_skb+0x1e3/0x430
[  690.499120][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  690.504640][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  690.519289][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.524569][   T30]  netlink_unicast+0x7f6/0x990
[  690.538055][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  690.543752][   T30]  ? __virt_addr_valid+0x183/0x530
[  690.558783][   T30]  ? __check_object_size+0x48e/0x900
[  690.565753][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  690.580341][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.585715][   T30]  ? __might_fault+0xaa/0x120
[  690.598816][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.604182][   T30]  __sock_sendmsg+0x221/0x270
[  690.618237][   T30]  __sys_sendto+0x398/0x4f0
[  690.623241][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  690.628366][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  690.638758][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  690.645162][   T30]  ? exc_page_fault+0x590/0x8c0
[  690.658017][   T30]  __x64_sys_sendto+0xde/0x100
[  690.664743][   T30]  do_syscall_64+0xf3/0x230
[  690.679177][   T30]  ? clear_bhb_loop+0x35/0x90
[  690.684342][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.699161][   T30] RIP: 0033:0x7f4efd57fd8c
[  690.703652][   T30] RSP: 002b:00007ffe5e02ae10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  690.721889][   T30] RAX: ffffffffffffffda RBX: 00007f4efe264620 RCX: 00007f4efd57fd8c
[  690.736407][   T30] RDX: 0000000000000028 RSI: 00007f4efe264670 RDI: 0000000000000003
[  690.748269][   T30] RBP: 0000000000000000 R08: 00007ffe5e02ae64 R09: 000000000000000c
[  690.758751][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  690.778586][   T30] R13: 0000000000000000 R14: 00007f4efe264670 R15: 0000000000000000
[  690.787058][   T30]  </TASK>
[  690.801050][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  690.817665][   T30] 
[  690.817665][   T30] Showing all locks held in the system:
[  690.827150][   T30] 4 locks held by kworker/u8:1/12: