last executing test programs:

47.779123942s ago: executing program 4 (id=4443):
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff61)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000540))
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/184, 0xb8}], 0x1, 0x0, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180))
syz_pidfd_open(0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640), 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x15d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x68}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)

46.749242013s ago: executing program 4 (id=4452):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x5}, {0x6, 0x2}]}, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
lremovexattr(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000002e00)=""/102386, 0x16f6}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000640)=""/114, 0x15}], 0x3, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000040), 0x4)
syz_io_uring_setup(0x10d, &(0x7f0000000340)={0x0, 0x33d}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_io_uring_setup(0x9, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0)

45.690774313s ago: executing program 4 (id=4454):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={r3, 0x800, 0x6, 0x8000, 0x5, 0x3, 0x7, 0x5, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0xfffffc00, 0x9, 0x2b, 0x1}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)={r3, 0x8, 0x43, "2052ad01eadff29ceafdde9a4ba8bf964320e7f6c92da54bd3220607806dec4f1cfebe55d904cb65c413a21600cd59c37c6228a1132a83fc28dfff13c4292a74f005c8"}, 0x4b)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, 0x0}}], 0x5e, 0x400e801)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000001c0)=0x8)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x79, &(0x7f00000077c0)={r5}, 0x8)

45.400373603s ago: executing program 4 (id=4455):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd2}]}, &(0x7f00000003c0)=0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r2])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc8}, 0x9c)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={0x0, <r10=>0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f00000000c0)={0x0, r10, r11, 0x0, 0x0, 0x40000000, 0xc8df, 0x0, 0x0, 0x0, 0x0, 0xa20e09a})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000380))
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r12, 0x0)
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9c5a, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc], 0x0, 0x380711})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

44.808998061s ago: executing program 4 (id=4457):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x44}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003600), 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x15, &(0x7f0000000180), 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4)
write$binfmt_script(r7, &(0x7f0000000300), 0xfe7f)
recvmmsg(r7, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x8e}, {0x0}], 0x2}}], 0xf4240, 0x2, 0x0)
syz_io_uring_setup(0x6a4e, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))

26.271339873s ago: executing program 0 (id=4508):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'ipvlan1\x00', 0x0})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0xfffffffd}, 0x2})
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x9, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0)

24.51840582s ago: executing program 0 (id=4512):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_rr_get_interval(r1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x28)
sched_setaffinity(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000854aff0824042c01d0e2010203010902240001000000000904000002fadc6f00090549b54a"], 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0)
openat$incfs(r2, 0x0, 0x80400, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102375, 0x18fe7}], 0x1, 0xe00000, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$int_in(r3, 0x0, &(0x7f0000000240))
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16])
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r3, 0x20000005)
r5 = socket$inet6(0xa, 0x6, 0x0)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
close(r5)

21.814784456s ago: executing program 0 (id=4516):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x581300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000380))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$EBT_SO_GET_INFO(r7, 0x10d, 0xb8, 0x0, &(0x7f00000016c0))

21.155047853s ago: executing program 0 (id=4518):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
rename(&(0x7f0000000280)='./file0/../file0/file0/file0\x00', 0x0)
read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5}, 0x50) (async)
syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90}, 0x0, 0x0, 0x0, 0x0}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async)
r7 = epoll_create1(0x0)
epoll_pwait2(r7, &(0x7f0000000640)=[{}, {}, {}, {}], 0x4, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x1]}, 0x8) (async)
close_range(r6, r7, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e010000"], 0x0) (async)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8080) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000052fed2403c418681a2a0010203010902240001000000000904000002ffefdc00090508020000000000090507"], 0x0)

17.713985604s ago: executing program 0 (id=4521):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x66)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00')
socket$nl_route(0x10, 0x3, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
io_uring_enter(r0, 0x2752, 0xf15b, 0x12, &(0x7f0000000040)={[0x1]}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0x22)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000024000/0x2000)=nil, 0x2000, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x27920c46}, 0x16, 0x9c85947736847e45)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x4bec, &(0x7f0000000040)={0x0, 0x677c, 0x4})
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x4)
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffecc)
prlimit64(0x0, 0xa, &(0x7f0000004080)={0x0, 0x1ff}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

17.270904066s ago: executing program 0 (id=4525):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_rr_get_interval(r1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x28)
sched_setaffinity(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000854aff0824042c01d0e2010203010902240001000000000904000002fadc6f00090549b54a"], 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0)
openat$incfs(r2, 0x0, 0x80400, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102375, 0x18fe7}], 0x1, 0xe00000, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$int_in(r3, 0x0, &(0x7f0000000240))
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16])
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r3, 0x20000005)
r5 = socket$inet6(0xa, 0x6, 0x0)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
close(r5)

12.032356605s ago: executing program 2 (id=4539):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3, 0xd, 0xe5, 0x10, 0x10d2, 0x1175, 0xf4c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0x60, 0xb3}}]}}]}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x10000, @remote}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4)
sendmsg$netlink(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x18, 0x1e, 0x323, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[<r3=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000003c0), 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000040), 0x3, r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000340)})
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000004000000004"], 0x0)
r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
close(r6)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0xc02, 0x0)
io_setup(0x9, &(0x7f0000000080)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x22, 0x8, 0x0, r6, 0x0}])
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x4c2f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd700}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}], 0x5c)

10.535314418s ago: executing program 2 (id=4543):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="52090205", @ANYRES16=r1, @ANYRES32=r0], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000875b0d20d81301002217010203010902120001000000000904"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
accept(0xffffffffffffffff, &(0x7f0000001200)=@l2, &(0x7f0000001280)=0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@loopback}, &(0x7f00000003c0)=0x14)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570cc9b643ddc16b5ebf44bb40b0898a212ba3bd1eb9bf41f530d9e4eda6d1291e4afafe9c936adfce90fba8efcee4b7f48d561733aa204eb08b225fbada54c18fbad0bfff3da", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x15}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x54}}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x68, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "e3de3d7b4cd07ec3ee1d49f58978af4403748cbc2d05fac27987cca41989a4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xba}]}]}, 0x68}}, 0x0)

9.062473667s ago: executing program 3 (id=4548):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000001580)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4, 0x1, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x7ff, "fe070960bcc37ecd538fa33f6e150ab7e9905a28c295e97f20f3a1938cfc0ee4ca173cfde9b42e47655c4c8f4ea81c8e9b81b992d6a5311eec0b12b79df025d0e120a2d383dcead2fd2583e3f56dc8c88d380a7936971d4442bfc50c34625bf150f7c98135030032e0ae97ed9654b6fd059f0acb17417730c42c06feae5b41becf4ef0637e2cfa70b467eaeb7876b4a689ee769173b8e7e86f58e8589fbe42174980f485ced37cc34bbf8b7f131e5548e866b2c747950a101ffd765be8cb82808f59055cc523b8c1e8d486bda7072a9a002211e6b62cb53126f709689e132c5e0cdc2d4a3d55968c06a80c7f6681ef3e243fdd1aaeb5cc68436dd53ced58d30f", 0xfc, 0x3, 0x2, 0x9, 0x81, 0x5, 0xd, 0x1}, r4}}, 0x128)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
recvmmsg(r5, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
writev(r5, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x900000d2)
read(r7, 0x0, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
shmat(0xffffffffffffffff, &(0x7f00001c9000/0xd000)=nil, 0x0)

7.572431979s ago: executing program 3 (id=4550):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000200)={'wg2\x00', {0x2, 0x0, @remote}})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006007d"], 0x48}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xffffffff)
syz_emit_ethernet(0x7c, 0x0, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r10 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r10, r9, &(0x7f00000001c0)=0x58, 0x9)
r11 = dup2(r1, r2)
io_uring_register$IORING_UNREGISTER_FILES(r11, 0x3, 0x0, 0x0)
read(r0, 0x0, 0x0)

6.633037642s ago: executing program 2 (id=4551):
socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
unlink(0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/15, 0xf}], 0x7, 0x0, 0x0)
gettid()
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x230f00, 0x0)
close(0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x1000, 0x6})
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x1)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60040}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd70b4706e4e00018008000900300000d45b2c3c0007000600736800d60003000200000006000e004e2100000000000000091d00000000000003002ed3e2bea6cb8faf632bd0dbfc49c4b6bb"], 0x58}, 0x1, 0x0, 0x0, 0x2e14cc1911b86c6f}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800c011)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(r1, 0x1, 0x0, &(0x7f0000000200))
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000900)=ANY=[], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f00000008c0))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x1b00)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000104001c00"/20, @ANYRES8=0x0, @ANYBLOB="00000000000000002000128008d457dc0e0a028006000f000000000002000e000000000000000000bbe91c47c5ca455b2afaeedd852b029cd919b32d2da7c25176cdcfb7070d182d3ee9d05c21e8c02cfb388851087b853b19a2e4d7c3de761b0dbfb61cc069826612bbc1da7d6e28aff1431f021d65d9effca4ab5aafcbc041d43168fff9072508a04eab6ed0d0f3841a85541b620180ce6628a6eb9cea6f484c4d74e3009c549a"], 0x40}}, 0x8000)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x0, r4, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000})

6.524957787s ago: executing program 3 (id=4552):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async)
syz_pidfd_open(0x0, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) (async)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="abc028bd7000fcdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0800090002ac0f000400280008000a00f85013e432000700aa3406da760000000800090001ac0f0004000b0009000700fb0d20c9da00007e08003700020000000800090005ac0f00b834702874861e0aefb13ef07e082eba9cdc86318adbfd357873a27762f09895bc7224cb98696554"], 0x64}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007"]) (async)
r5 = openat(0xffffffffffffffff, 0x0, 0x20002, 0x5)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) (async)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r8}) (async)
unshare(0xc040400)
syz_clone(0x209e8440, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480))

6.202993376s ago: executing program 3 (id=4553):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x620201, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dccb)
close(r2)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$setlease(r3, 0x400, 0x1)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
close_range(r6, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000001340)=""/114, 0x72}], 0x4, 0x0, 0x0)

6.202485009s ago: executing program 2 (id=4554):
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12013f00000000408332f4236713c7ed0001090204000100000000091fc625cfc80aad25d93ee05b1010700400001503000000092140000001220f00090581d7b2334eb0a20387dc0586652f2844d892f97dffde446e0e5cc73eae3f285a11b2606bdb76a0324e813b9d2d8052e0308bb170b18b563c63b283e736b23468a40400"/139], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00fc00"/21], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000080))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x11, @val=@perf_event={0x3}}, 0x40)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="000106000000fbdbdf250400000008000300050000092c000680060001000a000000050002000900000008000300ac1e000108000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="3800068014000400fc01000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB="0800060000000000060001000a000000060005004e22000024000180060001000a0000000600010002000000080006000a00000008000700", @ANYRES32=0x0, @ANYBLOB="0c0006802d22c2cdd219902095276ecb7f0d0306001e77f5ac00000500050002000000080004000c000100"], 0xc0}}, 0x800)
sendfile(r4, r5, &(0x7f0000000100), 0x10001)

5.38336489s ago: executing program 3 (id=4556):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd2}]}, &(0x7f00000003c0)=0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r2])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc8}, 0x9c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, <r9=>0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, r9, r10, 0x0, 0x0, 0x40000000, 0xc8df, 0x0, 0x0, 0x0, 0x0, 0xa20e09a})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380))
r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r11, 0x0)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9c5a, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc], 0x0, 0x380711})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

4.969442588s ago: executing program 3 (id=4557):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r3, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x361}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x3, 0x1, 0x6, 0xa, 0x7, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x2f, r1, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x2, 0x7f, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000900)=[r1, r0, r0], &(0x7f0000000940)=[{0x2, 0x4, 0x1, 0x3}, {0x3, 0x3, 0x0, 0xa}], 0x10, 0x4}, 0x90)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4)
recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40904}, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x20480)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x39, 0x10, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x8, 0x3, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb0, 0xc, 0x8}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

4.619417977s ago: executing program 1 (id=4558):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6}, @TCA_STAB={0x4}, @TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
recvmmsg$unix(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010000, 0x0)
listen(r0, 0x9)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x3c}}, 0x0)
r4 = fsmount(r2, 0x0, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000000)={'some', 0x20, 0x5, 0x20, 0x800}, 0x2f)

4.271863314s ago: executing program 1 (id=4559):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x8848}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}]}}]}, 0x9c}}, 0x0)

3.780235102s ago: executing program 1 (id=4560):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000200)={'wg2\x00', {0x2, 0x0, @remote}})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006007d"], 0x48}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xffffffff)
syz_emit_ethernet(0x7c, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'})
r9 = dup2(r1, r2)
io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0)
read(r0, 0x0, 0x0)

2.913278926s ago: executing program 2 (id=4561):
r0 = semget(0x0, 0x3, 0x449)
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000000)=""/50)
semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/236)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000140)=""/25)
r2 = getuid()
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
r5 = geteuid()
r6 = getgid()
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x2, r2, r4, r5, r6, 0x19, 0x8}, 0x9, 0x3f055455, 0x0, 0x0, 0x0, 0x0, 0xec95})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x200041, 0x2)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={<r8=>0x0}, &(0x7f00000003c0)=0x8)
r9 = semget(0x0, 0x2, 0x2)
semctl$IPC_RMID(r9, 0x0, 0x0)
r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000400), &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), 0x20, &(0x7f0000000500)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x401}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}})
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
write$tun(r7, &(0x7f00000005c0)={@val={0x0, 0x1b}, @val={0x1, 0x0, 0xffff, 0x1, 0x3, 0x101}, @llc={@llc={0xf0, 0xbc, '\ba', "80a3bb0590a308e1dbe896aa63150d40fea9068ff61f79616f858e8b7910e28ef240b409b5a420ee81113d01cfca10b9bd6985ec02aefadb1c14a6e296923dc73eb9a95259eb898c228bcfbffffc0181245f67b8d57042e323c5c6a2c17ca18bbb6f2d657ef0989da20fd5e56e597d44e39f97038b27b7b2304ed6986decdc87fc243b928ada"}}}, 0x98)
setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private0, 0x4e24, 0x1, 0x4e21, 0xfd80, 0xa, 0x20, 0xa0, 0x3c, 0x0, r5}, {0x9, 0x1, 0x5, 0x2, 0x8, 0xfffffffffffffff9, 0xffff, 0xfc}, {0x3, 0x9, 0x4, 0xc6a6000000000}, 0x9, 0x6e6bbd, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x3, 0x2, 0x8, 0x5, 0x2873, 0xff}}, 0xe8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000c00)={r8, 0xfa, "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"}, &(0x7f0000000bc0)=0x102)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f00000008c0))
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48800)
socket$inet_udp(0x2, 0x2, 0x0)
bind$alg(r7, &(0x7f0000000a00)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2s-256-arm,ecb(cast6))\x00'}, 0x58)
r11 = semget(0x2, 0x1, 0x38c)
semctl$SEM_INFO(r11, 0x3, 0x13, &(0x7f0000000a80)=""/105)
setregid(r6, r4)
r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x2000, 0x0)
accept$inet(r12, &(0x7f0000000b40)={0x2, 0x0, @multicast2}, &(0x7f0000000b80)=0x10)

2.612911099s ago: executing program 1 (id=4562):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000340)={0xa})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000000500)=""/191, 0xbf}], 0x2, 0x9, 0x7fff)
setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x49}, 0x8)
r2 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e000100697036657273f8456b6ebbf75b8970616e00000010000280040012000800050003900000"], 0x44}}, 0x0)
sendto$inet6(r1, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000400,default_permissions,max_read=0xfffffffffffffef'])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0434"], 0x8)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="03c8009e794e63ee9a3e63bd03f0761f767be125637ee49dc79a52faf9465718bff8", @ANYRES8=r3], 0x22)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061108a0000000000a60000006cc100009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000006c0)="d16376baf80c66b8b47c908766efbafc0c66ed66b8000000000f23d80f21f86635000000b00f23f83e660f3880a69300baf80c66b89ee7b88466efbafc0cecbaa10066b85500000066ef650f08baf80c66b8be126c8c66efbafc0cb80000ef66b9800000c00f326635000800000f3066b80001c0fe0f23d80f21f86635000000400f23f8", 0x84}], 0x1, 0x74, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r8}], 0x1, &(0x7f0000000140), 0x0, 0x0)

2.132881783s ago: executing program 4 (id=4490):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000580)={0xf0, 0x78, 0x690, 0x300, 0x5, 0xd, 0x1, 0x1, {0x3, 0x1, 0x1}, {0xffff, 0xfffff801}, {0x10000000, 0x2000000}, {0x8, 0xb, 0x1}, 0x0, 0x100, 0xfff, 0xfffffeff, 0x1, 0x1, 0xb, 0x5, 0x683a, 0x7, 0x3, 0x9, 0x2e, 0x300, 0x0, 0x2})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000)
timerfd_create(0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r6 = syz_io_uring_setup(0x60df, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_setup(0x1868, &(0x7f0000000640)={0x0, 0xfdd2, 0x80, 0x6000, 0x2000b3, 0x0, r0}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000300))
syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x6, 0x0})
io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0)
r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfc37, 0x2000, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000280))
syz_io_uring_setup(0x690c, &(0x7f0000000340)={0x0, 0xe3ed, 0x6a, 0x0, 0x0, 0x0, r9}, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRESHEX=r4, @ANYRES64=r4, @ANYRESDEC=0x0, @ANYRES16=r9, @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

980.979748ms ago: executing program 1 (id=4563):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote, 0x10001}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3}}]}, 0x190)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0xff8d, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

401.304875ms ago: executing program 1 (id=4564):
personality(0x500006)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfeff)

0s ago: executing program 2 (id=4565):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd2}]}, &(0x7f00000003c0)=0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r2])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc8}, 0x9c)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, <r10=>0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000000c0)={r9, r10, r11, 0x0, 0x0, 0x40000000, 0xc8df, 0x0, 0x0, 0x0, 0x0, 0xa20e09a})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000380))
r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r12, 0x0)
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9c5a, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc], 0x0, 0x380711})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 family 0 port 6081 - 0
[ 1623.965516][T19523] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1624.006585][T19523] usb 1-1: device descriptor read/8, error -71
[ 1624.066448][T21760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.084154][T21760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.125620][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1624.145531][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.164006][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.295514][T19523] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1624.345484][   T25] usb 3-1: Using ep0 maxpacket: 8
[ 1624.356132][T19523] usb 1-1: device descriptor read/8, error -71
[ 1624.374168][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1624.422480][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1624.454160][   T25] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1624.487778][T19523] usb usb1-port1: unable to enumerate USB device
[ 1624.496687][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.504749][   T25] usb 3-1: Product: syz
[ 1624.549127][T26002] dccp_close: ABORT with 36 bytes unread
[ 1624.560905][   T25] usb 3-1: Manufacturer: syz
[ 1624.578735][   T25] usb 3-1: SerialNumber: syz
[ 1624.591312][   T25] usb 3-1: config 0 descriptor??
[ 1624.605723][    T8] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1624.614167][   T25] imon_raw 3-1:0.0: IR endpoint missing
[ 1624.805646][    T8] usb 5-1: Using ep0 maxpacket: 32
[ 1624.830388][    T8] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=17.22
[ 1624.840682][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.848982][    T8] usb 5-1: Product: syz
[ 1624.853293][    T8] usb 5-1: Manufacturer: syz
[ 1624.858490][    T8] usb 5-1: SerialNumber: syz
[ 1624.878657][    T8] usb 5-1: config 0 descriptor??
[ 1624.909287][    T8] usb 5-1: selecting invalid altsetting 3
[ 1624.915097][    T8] comedi comedi0: could not set alternate setting 3 in high speed
[ 1624.939989][    T8] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[ 1624.972856][    T8] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[ 1625.058098][T26011] loop4: detected capacity change from 0 to 7
[ 1625.091535][T25996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1625.104675][T26011] Dev loop4: unable to read RDB block 7
[ 1625.113829][T26013] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1625.135668][T26011]  loop4: unable to read partition table
[ 1625.141621][T26011] loop4: partition table beyond EOD, truncated
[ 1625.157033][T25996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1625.174129][T26011] loop_reread_partitions: partition scan of loop4 (ţ被xüźŃř éÚ¬§˝dƤ´ŕ–�ݡŻ¨ťâ·ű
[ 1625.174129][T26011] 
) failed (rc=-5)
[ 1625.191308][    T8] usb 5-1: USB disconnect, device number 91
[ 1625.331729][ T3074] usb 3-1: USB disconnect, device number 11
[ 1625.715480][ T5288] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1625.777633][    T8] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1625.866524][T19523] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1625.905485][ T5288] usb 4-1: Using ep0 maxpacket: 8
[ 1625.914924][ T5288] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1625.943057][ T5288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1625.965534][    T8] usb 1-1: Using ep0 maxpacket: 16
[ 1625.973834][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1625.975505][ T5288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1626.006948][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1626.022133][ T5288] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.025607][T19523] usb 3-1: device descriptor read/64, error -71
[ 1626.042134][    T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1626.045487][ T5288] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1626.060788][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.080968][    T8] usb 1-1: config 0 descriptor??
[ 1626.085383][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.135508][   T25] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1626.325599][T19523] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1626.337129][   T25] usb 5-1: no configurations
[ 1626.341898][   T25] usb 5-1: can't read configurations, error -22
[ 1626.388837][T26019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4334'.
[ 1626.417708][ T5288] usb 4-1: GET_CAPABILITIES returned 0
[ 1626.423267][ T5288] usbtmc 4-1:16.0: can't read capabilities
[ 1626.515897][T19523] usb 3-1: device descriptor read/64, error -71
[ 1626.538943][   T25] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1626.678545][T19523] usb usb3-port1: attempt power cycle
[ 1626.722997][    T8] usbhid 1-1:0.0: can't add hid device: -71
[ 1626.757282][   T25] usb 5-1: no configurations
[ 1626.770409][   T25] usb 5-1: can't read configurations, error -22
[ 1626.778283][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1626.786115][   T25] usb usb5-port1: attempt power cycle
[ 1626.834307][    T8] usb 1-1: USB disconnect, device number 110
[ 1627.106419][T19523] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 1627.148087][T19523] usb 3-1: device descriptor read/8, error -71
[ 1627.215735][   T25] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1627.244930][T26047] geneve0: entered promiscuous mode
[ 1627.262793][T26047] geneve0: left promiscuous mode
[ 1627.289351][   T25] usb 5-1: no configurations
[ 1627.298060][   T25] usb 5-1: can't read configurations, error -22
[ 1627.374968][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1627.401900][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1627.435861][T19523] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 1627.455740][   T25] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1627.499234][   T25] usb 5-1: no configurations
[ 1627.506879][T19523] usb 3-1: device descriptor read/8, error -71
[ 1627.514766][   T25] usb 5-1: can't read configurations, error -22
[ 1627.525126][   T25] usb usb5-port1: unable to enumerate USB device
[ 1627.637796][T19523] usb usb3-port1: unable to enumerate USB device
[ 1627.660493][ T5311] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1628.155601][ T5311] usb 1-1: device descriptor read/64, error -71
[ 1628.445579][ T5311] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1628.464318][ T5287] usb 4-1: USB disconnect, device number 107
[ 1628.600280][T26065] program syz.3.4349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1628.646639][ T5311] usb 1-1: Using ep0 maxpacket: 8
[ 1628.657729][ T5311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1628.680574][ T5311] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1628.699945][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4349'.
[ 1628.709466][ T5311] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1628.715750][T26067] netlink: 'syz.3.4349': attribute type 18 has an invalid length.
[ 1628.733414][ T5311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1628.758585][   T29] audit: type=1326 audit(1724245911.815:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.3.4349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdee0379e79 code=0x0
[ 1628.781016][ T5311] usb 1-1: Product: syz
[ 1628.791625][ T5311] usb 1-1: Manufacturer: syz
[ 1628.796763][ T5311] usb 1-1: SerialNumber: syz
[ 1628.806944][ T5311] usb 1-1: config 0 descriptor??
[ 1628.824438][ T5311] imon_raw 1-1:0.0: IR endpoint missing
[ 1629.346381][ T5287] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1629.515969][ T5287] usb 5-1: device descriptor read/64, error -71
[ 1629.535895][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1629.547973][   T25] usb 1-1: USB disconnect, device number 112
[ 1629.736128][    T8] usb 3-1: Using ep0 maxpacket: 8
[ 1629.743021][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1629.753477][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1629.763482][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1629.786589][    T8] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82
[ 1629.797006][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1629.805094][    T8] usb 3-1: Product: syz
[ 1629.812186][ T5287] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1629.820663][    T8] usb 3-1: Manufacturer: syz
[ 1629.828659][    T8] usb 3-1: SerialNumber: syz
[ 1629.841120][    T8] usb 3-1: config 0 descriptor??
[ 1629.856021][ T5242] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1629.975528][ T5287] usb 5-1: device descriptor read/64, error -71
[ 1630.055543][ T5242] usb 4-1: Using ep0 maxpacket: 8
[ 1630.064002][    T8] usb 3-1: USB disconnect, device number 16
[ 1630.068916][ T5242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1630.085208][   T25] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1630.094215][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.110471][ T5242] usb 4-1: Product: syz
[ 1630.112145][ T5287] usb usb5-port1: attempt power cycle
[ 1630.114701][ T5242] usb 4-1: Manufacturer: syz
[ 1630.135964][ T5242] usb 4-1: SerialNumber: syz
[ 1630.160888][ T5242] usb 4-1: config 0 descriptor??
[ 1630.285671][   T25] usb 1-1: Using ep0 maxpacket: 32
[ 1630.296195][   T25] usb 1-1: config 0 has an invalid interface number: 144 but max is 0
[ 1630.323223][   T25] usb 1-1: config 0 has no interface number 0
[ 1630.338566][   T25] usb 1-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=a0.fe
[ 1630.348815][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.358806][   T25] usb 1-1: Product: syz
[ 1630.363233][   T25] usb 1-1: Manufacturer: syz
[ 1630.370025][   T25] usb 1-1: SerialNumber: syz
[ 1630.381743][ T5242] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1630.396653][   T25] usb 1-1: config 0 descriptor??
[ 1630.406120][   T25] gspca_main: tv8532-2.14.0 probing 0923:010f
[ 1630.595667][ T5287] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1630.636553][ T5287] usb 5-1: device descriptor read/8, error -71
[ 1630.684768][   T25] usb 1-1: USB disconnect, device number 113
[ 1630.888164][ T5242] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1630.932099][ T5287] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1630.932519][ T5242] usb 4-1: USB disconnect, device number 108
[ 1631.024692][ T5287] usb 5-1: device descriptor read/8, error -71
[ 1631.122117][T26105] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4362'.
[ 1631.144840][T26105] 0·: renamed from 
c1· (while UP)
[ 1631.156938][ T5287] usb usb5-port1: unable to enumerate USB device
[ 1631.166479][T26105] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[ 1631.660247][T26123] FAULT_INJECTION: forcing a failure.
[ 1631.660247][T26123] name failslab, interval 1, probability 0, space 0, times 0
[ 1631.687933][T26124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4367'.
[ 1631.704658][ T5242] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1631.718127][T26123] CPU: 1 UID: 0 PID: 26123 Comm: syz.1.4368 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1631.728928][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1631.739014][T26123] Call Trace:
[ 1631.742302][T26123]  <TASK>
[ 1631.745267][T26123]  dump_stack_lvl+0x241/0x360
[ 1631.750006][T26123]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1631.755229][T26123]  ? __pfx__printk+0x10/0x10
[ 1631.759866][T26123]  ? fs_reclaim_acquire+0x93/0x140
[ 1631.764992][T26123]  ? __pfx___might_resched+0x10/0x10
[ 1631.770296][T26123]  should_fail_ex+0x3b0/0x4e0
[ 1631.775004][T26123]  ? tomoyo_encode+0x26f/0x540
[ 1631.779782][T26123]  should_failslab+0xac/0x100
[ 1631.784503][T26123]  ? tomoyo_encode+0x26f/0x540
[ 1631.789290][T26123]  __kmalloc_noprof+0xd8/0x400
[ 1631.794067][T26123]  tomoyo_encode+0x26f/0x540
[ 1631.798674][T26123]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1631.804328][T26123]  tomoyo_path_number_perm+0x23a/0x880
[ 1631.809801][T26123]  ? tomoyo_path_number_perm+0x208/0x880
[ 1631.815451][T26123]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1631.821471][T26123]  ? __fget_files+0x29/0x470
[ 1631.826074][T26123]  ? __fget_files+0x3f6/0x470
[ 1631.830757][T26123]  ? __fget_files+0x29/0x470
[ 1631.835380][T26123]  security_file_ioctl+0x75/0xb0
[ 1631.840335][T26123]  __se_sys_ioctl+0x47/0x170
[ 1631.844947][T26123]  do_syscall_64+0xf3/0x230
[ 1631.849460][T26123]  ? clear_bhb_loop+0x35/0x90
[ 1631.854143][T26123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1631.860045][T26123] RIP: 0033:0x7feee9179e79
[ 1631.864463][T26123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1631.884076][T26123] RSP: 002b:00007feee8ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1631.892498][T26123] RAX: ffffffffffffffda RBX: 00007feee9315f80 RCX: 00007feee9179e79
[ 1631.900476][T26123] RDX: 0000000000000000 RSI: 000000004008af00 RDI: 0000000000000003
[ 1631.908453][T26123] RBP: 00007feee8ff8090 R08: 0000000000000000 R09: 0000000000000000
[ 1631.916435][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1631.924428][T26123] R13: 0000000000000000 R14: 00007feee9315f80 R15: 00007feee943fa38
[ 1631.932414][T26123]  </TASK>
[ 1631.947550][T26123] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1631.949510][   T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1632.145518][ T5242] usb 1-1: Using ep0 maxpacket: 16
[ 1632.150952][   T25] usb 3-1: device descriptor read/64, error -71
[ 1632.159570][ T5242] usb 1-1: config 0 has an invalid interface number: 42 but max is 1
[ 1632.181126][ T5242] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1632.211848][ T5242] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1632.230033][ T5242] usb 1-1: config 0 has no interface number 0
[ 1632.246814][ T5242] usb 1-1: config 0 interface 42 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1632.260513][ T5242] usb 1-1: config 0 interface 42 has no altsetting 0
[ 1632.275878][ T5242] usb 1-1: New USB device found, idVendor=045e, idProduct=0413, bcdDevice=cd.79
[ 1632.285788][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.312281][ T5242] usb 1-1: Product: syz
[ 1632.323250][ T5242] usb 1-1: Manufacturer: syz
[ 1632.336289][ T5242] usb 1-1: SerialNumber: syz
[ 1632.348490][ T5242] usb 1-1: config 0 descriptor??
[ 1632.455553][   T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1632.528075][ T5288] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1632.579322][T26118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1632.603081][T26118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1632.655670][   T25] usb 3-1: device descriptor read/64, error -71
[ 1632.711569][ T5242] usb 1-1: USB disconnect, device number 114
[ 1632.717990][ T5288] usb 2-1: Using ep0 maxpacket: 8
[ 1632.743012][ T5288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.772450][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1632.785186][   T25] usb usb3-port1: attempt power cycle
[ 1632.810309][ T5288] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1632.835417][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.855613][ T5288] usb 2-1: Product: syz
[ 1632.863361][ T5288] usb 2-1: Manufacturer: syz
[ 1632.877689][ T5288] usb 2-1: SerialNumber: syz
[ 1632.888137][ T5288] usb 2-1: config 0 descriptor??
[ 1632.898862][ T5288] imon_raw 2-1:0.0: IR endpoint missing
[ 1633.115513][ T5287] usb 4-1: new low-speed USB device number 109 using dummy_hcd
[ 1633.215659][   T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1633.281552][   T25] usb 3-1: device descriptor read/8, error -71
[ 1633.318869][ T5287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1633.369229][ T5287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1633.389564][ T5287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1633.421971][ T5287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1633.458690][ T5287] usb 4-1: string descriptor 0 read error: -22
[ 1633.484558][ T5287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1633.516137][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.551085][T26137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1633.575922][T26137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1633.609409][   T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1633.651211][ T5287] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1633.687252][   T25] usb 3-1: device descriptor read/8, error -71
[ 1633.769773][ T5242] usb 2-1: USB disconnect, device number 103
[ 1633.835950][   T25] usb usb3-port1: unable to enumerate USB device
[ 1634.585666][ T5288] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1634.847533][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1634.885706][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1634.922202][ T5288] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1634.958876][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.977048][ T5288] usb 3-1: config 0 descriptor??
[ 1635.453733][ T5288] cm6533_jd 0003:0D8C:0022.007D: unknown main item tag 0x0
[ 1635.474993][ T5288] cm6533_jd 0003:0D8C:0022.007D: unknown main item tag 0x0
[ 1635.503692][ T5288] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.007D/input/input138
[ 1635.565840][ T5288] cm6533_jd 0003:0D8C:0022.007D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[ 1635.567317][T10439] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1635.586924][T22226] Bluetooth: hci4: command 0x0406 tx timeout
[ 1635.759687][ T5287] usb 4-1: USB disconnect, device number 109
[ 1635.770697][T10439] usb 2-1: device descriptor read/64, error -71
[ 1636.067841][T10439] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1636.237385][T10439] usb 2-1: device descriptor read/64, error -71
[ 1636.375735][T10439] usb usb2-port1: attempt power cycle
[ 1636.411746][T19523] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1636.452659][ T5288] usb 3-1: USB disconnect, device number 21
[ 1636.615521][T19523] usb 1-1: Using ep0 maxpacket: 8
[ 1636.625912][T19523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1636.642039][T19523] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1636.675009][T19523] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.40
[ 1636.684433][T19523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1636.695249][ T1129] syzkaller0: tun_net_xmit 76
[ 1636.704226][T19523] usb 1-1: Product: syz
[ 1636.706413][ T1129] syzkaller0: tun_net_xmit 48
[ 1636.710284][T19523] usb 1-1: Manufacturer: syz
[ 1636.721436][T19523] usb 1-1: SerialNumber: syz
[ 1636.726733][ T5288] syzkaller0: tun_net_xmit 76
[ 1636.785529][T10439] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1636.821505][T26177] syzkaller0: create flow: hash 1103760308 index 3
[ 1636.845901][T10439] usb 2-1: device descriptor read/8, error -71
[ 1636.907725][ T5288] syzkaller0: tun_net_xmit 76
[ 1636.970523][T26181] syzkaller0: delete flow: hash 1103760308 index 3
[ 1636.979003][T19523] usb 1-1: USB disconnect, device number 115
[ 1637.007309][    T8] syzkaller0: tun_net_xmit 76
[ 1637.045961][ T5288] syzkaller0: tun_net_xmit 76
[ 1637.066216][ T5288] syzkaller0: tun_net_xmit 76
[ 1637.125476][T10439] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1637.157018][T22226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1637.169541][T10439] usb 2-1: device descriptor read/8, error -71
[ 1637.170997][T22226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1637.188110][T22226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1637.198609][T22226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1637.207928][T22226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1637.217415][T22226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1637.301480][T10439] usb usb2-port1: unable to enumerate USB device
[ 1637.325499][    T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1637.446635][   T25] syzkaller0: tun_net_xmit 76
[ 1637.528206][    T8] usb 5-1: config index 0 descriptor too short (expected 797, got 739)
[ 1637.548640][T26192] input: syz0 as /devices/virtual/input/input139
[ 1637.555217][    T8] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[ 1637.602674][T26186] chnl_net:caif_netlink_parms(): no params data found
[ 1637.612405][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.650182][    T8] usb 5-1: config 0 has no interface number 0
[ 1637.671339][    T8] usb 5-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1637.702792][    T8] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10
[ 1637.713760][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1637.785532][    T8] usb 5-1: config 0 descriptor??
[ 1637.919924][T26186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1637.928701][T26186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1637.937834][T26186] bridge_slave_0: entered allmulticast mode
[ 1637.953419][T26186] bridge_slave_0: entered promiscuous mode
[ 1637.968848][T26186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1637.979163][T26186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1637.987332][T26186] bridge_slave_1: entered allmulticast mode
[ 1637.996630][T26186] bridge_slave_1: entered promiscuous mode
[ 1638.007192][    T8]  (null): keene_cmd_main failed (-71)
[ 1638.038819][    T8] video4linux radio32: keene_cmd_main failed (-71)
[ 1638.063196][    T8] radio-keene 5-1:0.16: V4L2 device registered as radio32
[ 1638.086456][    T8] usb 5-1: USB disconnect, device number 100
[ 1638.101627][T19523] syzkaller0: tun_net_xmit 76
[ 1638.166976][   T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1638.398856][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1638.428457][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1638.486817][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1638.534619][   T25] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[ 1638.564947][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1638.609663][   T25] usb 3-1: config 0 descriptor??
[ 1638.755688][T10439] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1638.963321][T10439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1638.976612][T10439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1638.988729][T10439] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1639.004119][T10439] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1639.013735][T10439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1639.090531][T10439] usb 2-1: config 0 descriptor??
[ 1639.138811][T26205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1639.266408][ T5239] Bluetooth: hci5: command tx timeout
[ 1639.625212][T10439] plantronics 0003:047F:FFFF.007E: unknown main item tag 0xd
[ 1639.650950][T10439] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving
[ 1639.680852][T10439] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1639.997975][ T5288] usb 2-1: USB disconnect, device number 108
[ 1640.902062][   T25] usb 3-1: string descriptor 0 read error: -71
[ 1640.920368][   T25] usbhid 3-1:0.0: can't add hid device: -71
[ 1640.935962][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1640.952220][   T25] usb 3-1: USB disconnect, device number 22
[ 1640.958759][T10439] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1641.179331][T10439] usb 2-1: Using ep0 maxpacket: 16
[ 1641.190644][T10439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1641.211300][T10439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1641.232099][T10439] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[ 1641.241452][T10439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.255455][T10439] usb 2-1: config 0 descriptor??
[ 1641.347168][ T5239] Bluetooth: hci5: command tx timeout
[ 1642.724922][T26186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1642.767023][T26186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1642.866397][T10439] usbhid 2-1:0.0: can't add hid device: -71
[ 1642.872649][T10439] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1642.907561][T10439] usb 2-1: USB disconnect, device number 109
[ 1642.960294][T26186] team0: Port device team_slave_0 added
[ 1642.997884][T26186] team0: Port device team_slave_1 added
[ 1643.142365][T26186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1643.163985][T26186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1643.208542][T26186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1643.255549][T26186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1643.288666][T26186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1643.343096][T26248] syz.4.4404 (26248): /proc/26236/oom_adj is deprecated, please use /proc/26236/oom_score_adj instead.
[ 1643.365632][T26186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1643.426152][ T5239] Bluetooth: hci5: command tx timeout
[ 1643.447124][   T29] audit: type=1326 audit(1724245926.515:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26244 comm="syz.0.4406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58fe779e79 code=0x0
[ 1643.628180][T26186] hsr_slave_0: entered promiscuous mode
[ 1643.651988][T26186] hsr_slave_1: entered promiscuous mode
[ 1643.680346][T26186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1643.694499][T26186] Cannot create hsr debugfs directory
[ 1644.491017][T26186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1644.585503][T10439] usb 5-1: new low-speed USB device number 101 using dummy_hcd
[ 1644.703599][T26186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1644.761981][T10439] usb 5-1: device descriptor read/64, error -71
[ 1645.031347][T26186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1645.035878][T10439] usb 5-1: new low-speed USB device number 102 using dummy_hcd
[ 1645.056705][ T5311] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1645.240226][T10439] usb 5-1: device descriptor read/64, error -71
[ 1645.302098][ T5311] usb 3-1: Using ep0 maxpacket: 8
[ 1645.316970][ T5311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1645.353079][ T5311] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1645.394400][ T5311] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[ 1645.424622][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.454262][ T5311] usb 3-1: config 0 descriptor??
[ 1645.467542][T10439] usb usb5-port1: attempt power cycle
[ 1645.505429][ T5239] Bluetooth: hci5: command tx timeout
[ 1645.528209][T26186] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1645.586495][T26186] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1645.624238][T26186] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1645.678160][T26186] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1645.795927][ T5311] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1645.906349][T26186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1645.980811][T26186] 8021q: adding VLAN 0 to HW filter on device team0
[ 1646.005528][T10439] usb 5-1: new low-speed USB device number 103 using dummy_hcd
[ 1646.005673][ T5311] usb 2-1: Using ep0 maxpacket: 8
[ 1646.031476][ T5311] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1646.071131][ T5311] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1646.088135][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1646.095406][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1646.104561][T10439] usb 5-1: device descriptor read/8, error -71
[ 1646.104852][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.125786][ T5311] usb 2-1: Product: syz
[ 1646.131320][ T5311] usb 2-1: Manufacturer: syz
[ 1646.137439][ T5311] usb 2-1: SerialNumber: syz
[ 1646.150644][ T5311] usb 2-1: config 0 descriptor??
[ 1646.168911][ T5311] imon_raw 2-1:0.0: IR endpoint missing
[ 1646.246169][T21762] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1646.253406][T21762] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1646.475553][T10439] usb 5-1: new low-speed USB device number 104 using dummy_hcd
[ 1646.516852][T26276] netlink: 'syz.0.4417': attribute type 2 has an invalid length.
[ 1646.548646][T26186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1646.558300][T10439] usb 5-1: device descriptor read/8, error -71
[ 1646.698168][T10439] usb usb5-port1: unable to enumerate USB device
[ 1646.726923][T26186] veth0_vlan: entered promiscuous mode
[ 1646.774680][T26186] veth1_vlan: entered promiscuous mode
[ 1646.883296][ T5311] usb 2-1: USB disconnect, device number 110
[ 1646.910563][T26186] veth0_macvtap: entered promiscuous mode
[ 1646.973274][T26186] veth1_macvtap: entered promiscuous mode
[ 1647.036324][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.052851][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.066576][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.078105][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.089553][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.102996][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.115511][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.126404][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.149777][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.163410][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.174566][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.186214][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.197563][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.228012][T26282] xt_policy: too many policy elements
[ 1647.233770][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.285653][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1647.308550][T10439] usb 3-1: USB disconnect, device number 23
[ 1647.354078][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.392431][T26186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1647.427068][ T5239] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1647.436995][ T5239] Bluetooth: hci3: Injecting HCI hardware error event
[ 1647.446920][T22226] Bluetooth: hci3: hardware error 0x00
[ 1647.478438][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.491312][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.501414][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.512677][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.537859][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.558151][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.568980][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.582454][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.594451][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.607646][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.618395][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.641260][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.663880][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.694711][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.725201][T26186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1647.746547][T26186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1647.775841][T26186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1647.846851][T26186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1647.925483][T26186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1647.965508][T26186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1647.974274][T26186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1648.049943][T26292] loop0: detected capacity change from 0 to 7
[ 1648.059264][T26292] Dev loop0: unable to read RDB block 7
[ 1648.064928][T26292]  loop0: AHDI p4
[ 1648.069564][T26292] loop0: partition table partially beyond EOD, truncated
[ 1648.476411][T21765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1648.536134][T21765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1648.660729][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1648.685551][ T5311] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 1648.701015][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1648.908556][ T5311] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[ 1648.941927][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.955567][T19523] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1648.979316][ T5311] usb 3-1: config 0 descriptor??
[ 1649.011331][ T5311] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1649.036802][ T5311] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1649.058604][ T5311] dvb-usb: bulk message failed: -22 (2/0)
[ 1649.100219][ T5311] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1649.123432][ T5242] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1649.177869][ T5311] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19)
[ 1649.208237][T19523] usb 1-1: Using ep0 maxpacket: 8
[ 1649.231359][T26304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1649.249957][T19523] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1649.288611][T26304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1649.335567][T19523] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1649.385685][ T5242] usb 2-1: Using ep0 maxpacket: 16
[ 1649.391305][T19523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1649.414124][ T5242] usb 2-1: too many configurations: 211, using maximum allowed: 8
[ 1649.447954][ T5242] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1649.455479][T19523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1649.475482][T19523] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1649.476533][ T5242] usb 2-1: can't read configurations, error -61
[ 1649.510571][T22226] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1649.569807][T19523] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1649.581891][T19523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.598378][T19523] usb 1-1: Product: syz
[ 1649.604946][T19523] usb 1-1: Manufacturer: syz
[ 1649.611574][T19523] usb 1-1: SerialNumber: syz
[ 1649.619543][T19523] usb 1-1: config 0 descriptor??
[ 1649.675740][ T5242] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1649.721484][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4431'.
[ 1649.855496][T19523] rc_core: IR keymap rc-imon-rsc not found
[ 1649.881617][T19523] Registered IR keymap rc-empty
[ 1649.919760][T19523] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1649.935899][ T5242] usb 2-1: Using ep0 maxpacket: 16
[ 1649.946218][ T5242] usb 2-1: too many configurations: 211, using maximum allowed: 8
[ 1649.975839][T19523] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input141
[ 1650.010618][ T5242] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1650.043148][T19523] imon_raw 1-1:0.0: probe with driver imon_raw failed with error -90
[ 1650.043148][ T5242] usb 2-1: can't read configurations, error -61
[ 1650.092151][ T5242] usb usb2-port1: attempt power cycle
[ 1650.535696][ T5242] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1650.587852][ T5242] usb 2-1: Using ep0 maxpacket: 16
[ 1650.600123][ T5242] usb 2-1: too many configurations: 211, using maximum allowed: 8
[ 1650.627654][ T5242] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1650.643909][ T5242] usb 2-1: can't read configurations, error -61
[ 1650.825632][ T5242] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1650.876359][ T5242] usb 2-1: Using ep0 maxpacket: 16
[ 1650.887019][ T5242] usb 2-1: too many configurations: 211, using maximum allowed: 8
[ 1650.929001][ T5242] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1650.941925][ T5242] usb 2-1: can't read configurations, error -61
[ 1650.963077][ T5242] usb usb2-port1: unable to enumerate USB device
[ 1651.277502][T10439] usb 3-1: USB disconnect, device number 24
[ 1651.661097][T10439] usb 1-1: USB disconnect, device number 116
[ 1652.277887][T10439] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1652.299599][T26365] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4444'.
[ 1652.469218][T10439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1652.503043][T10439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1652.552352][T10439] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1652.581474][T10439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.624661][T10439] usb 1-1: config 0 descriptor??
[ 1653.100855][T10439] cm6533_jd 0003:0D8C:0022.007F: unknown main item tag 0x0
[ 1653.146876][T26381] fuse: Unknown parameter '@'
[ 1653.158680][   T25] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1653.166659][T10439] cm6533_jd 0003:0D8C:0022.007F: unknown main item tag 0x0
[ 1653.195626][ T5287] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1653.236326][T10439] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.007F/input/input142
[ 1653.278037][T10439] cm6533_jd 0003:0D8C:0022.007F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[ 1653.375480][   T25] usb 4-1: Using ep0 maxpacket: 8
[ 1653.388576][   T25] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[ 1653.398209][T26381] vhci_hcd: default hub control req: 000f v00b6 i0005 l114
[ 1653.415432][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.443757][ T5287] usb 3-1: Using ep0 maxpacket: 8
[ 1653.453197][   T25] usb 4-1: config 0 has no interface number 0
[ 1653.455145][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1653.495512][   T25] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1653.502085][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1653.540485][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1653.544421][   T25] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1653.575720][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1653.597769][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1653.626291][   T25] usb 4-1: config 0 interface 52 has no altsetting 0
[ 1653.637824][   T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[ 1653.644831][ T5287] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1653.656768][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.665969][   T25] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[ 1653.682080][ T5287] usb 3-1: Product: syz
[ 1653.687325][   T25] usb 4-1: Product: syz
[ 1653.691619][   T25] usb 4-1: SerialNumber: syz
[ 1653.697586][ T5287] usb 3-1: Manufacturer: syz
[ 1653.713641][ T5287] usb 3-1: SerialNumber: syz
[ 1653.736256][   T25] usb 4-1: config 0 descriptor??
[ 1653.736441][ T5287] usb 3-1: config 0 descriptor??
[ 1653.895591][ T5287] rc_core: IR keymap rc-imon-rsc not found
[ 1653.908457][ T5287] Registered IR keymap rc-empty
[ 1653.935003][ T5287] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1653.965286][ T5287] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input143
[ 1653.965552][   T25] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input144
[ 1654.026795][    T8] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1654.091640][ T5287] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90
[ 1654.245739][    T8] usb 2-1: Using ep0 maxpacket: 8
[ 1654.261517][    T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=2b.37
[ 1654.298979][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.339263][    T8] usb 2-1: Product: syz
[ 1654.352565][    T8] usb 2-1: Manufacturer: syz
[ 1654.366219][    T8] usb 2-1: SerialNumber: syz
[ 1654.381522][    T8] usb 2-1: config 0 descriptor??
[ 1654.430765][    T8] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[ 1654.456844][    T8] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[ 1654.515570][   T25] usb 1-1: reset high-speed USB device number 117 using dummy_hcd
[ 1654.722720][    T8] radio-raremono 2-1:0.0: this is not Thanko's Raremono.
[ 1654.737926][    T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1654.764889][    T8] usb 2-1: USB disconnect, device number 115
[ 1655.170099][T26401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'.
[ 1655.188019][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4457'.
[ 1655.299448][T26404] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[ 1655.323561][T26403] IPVS: stopping backup sync thread 26404 ...
[ 1655.698536][ T5311] usb 1-1: USB disconnect, device number 117
[ 1655.772210][   T25] usb 4-1: USB disconnect, device number 110
[ 1655.978123][ T5287] usb 3-1: USB disconnect, device number 25
[ 1656.167730][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4462'.
[ 1656.738715][T22226] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1656.951980][ T5287] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1657.151187][ T5287] usb 4-1: too many configurations: 211, using maximum allowed: 8
[ 1657.201413][ T5287] usb 4-1: config index 0 descriptor too short (expected 64979, got 137)
[ 1657.233289][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.283722][ T5287] usb 4-1: config index 1 descriptor too short (expected 64979, got 137)
[ 1657.320569][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.357847][ T5287] usb 4-1: config index 2 descriptor too short (expected 64979, got 137)
[ 1657.384616][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.414427][ T5287] usb 4-1: config index 3 descriptor too short (expected 64979, got 137)
[ 1657.458360][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.503173][ T5287] usb 4-1: config index 4 descriptor too short (expected 64979, got 137)
[ 1657.553403][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.609470][ T5287] usb 4-1: config index 5 descriptor too short (expected 64979, got 137)
[ 1657.651627][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.702086][ T5287] usb 4-1: config index 6 descriptor too short (expected 64979, got 137)
[ 1657.732670][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.753539][T26438] macvlan2: entered allmulticast mode
[ 1657.770498][ T5287] usb 4-1: config index 7 descriptor too short (expected 64979, got 137)
[ 1657.782437][T26438] mac80211_hwsim hwsim171 wlan0: entered promiscuous mode
[ 1657.807079][ T5287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.825161][T26438] mac80211_hwsim hwsim171 wlan0: entered allmulticast mode
[ 1657.858498][ T5287] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1657.875063][T26438] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1657.889791][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.926976][ T5287] usb 4-1: Product: syz
[ 1657.941364][ T5287] usb 4-1: Manufacturer: syz
[ 1657.957473][ T5287] usb 4-1: SerialNumber: syz
[ 1658.006910][ T5287] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1658.063468][T10444] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1658.317663][T26446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4468'.
[ 1659.191517][T10444] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1659.236050][T10444] ath9k_htc: Failed to initialize the device
[ 1659.290217][T10444] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1659.372158][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4471'.
[ 1659.464733][T26459] FAULT_INJECTION: forcing a failure.
[ 1659.464733][T26459] name failslab, interval 1, probability 0, space 0, times 0
[ 1659.477759][T26459] CPU: 1 UID: 0 PID: 26459 Comm: syz.0.4471 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1659.488562][T26459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1659.498693][T26459] Call Trace:
[ 1659.502091][T26459]  <TASK>
[ 1659.505067][T26459]  dump_stack_lvl+0x241/0x360
[ 1659.509806][T26459]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1659.515058][T26459]  ? __pfx__printk+0x10/0x10
[ 1659.519720][T26459]  ? __kmalloc_node_noprof+0xb7/0x440
[ 1659.525128][T26459]  ? __pfx___might_resched+0x10/0x10
[ 1659.530557][T26459]  should_fail_ex+0x3b0/0x4e0
[ 1659.535286][T26459]  should_failslab+0xac/0x100
[ 1659.540014][T26459]  __kmalloc_node_noprof+0xdf/0x440
[ 1659.545246][T26459]  ? crypto_create_tfm_node+0x88/0x3d0
[ 1659.550843][T26459]  crypto_create_tfm_node+0x88/0x3d0
[ 1659.556166][T26459]  crypto_alloc_tfm_node+0x161/0x360
[ 1659.561498][T26459]  ? md5_transform+0x3e0/0xe60
[ 1659.566330][T26459]  ? __pfx_hash_bind+0x10/0x10
[ 1659.571340][T26459]  alg_bind+0x305/0x570
[ 1659.575549][T26459]  __sys_bind+0x23d/0x2f0
[ 1659.579912][T26459]  ? __pfx___sys_bind+0x10/0x10
[ 1659.584796][T26459]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1659.591361][T26459]  ? do_syscall_64+0x100/0x230
[ 1659.596261][T26459]  __x64_sys_bind+0x7a/0x90
[ 1659.600794][T26459]  do_syscall_64+0xf3/0x230
[ 1659.605318][T26459]  ? clear_bhb_loop+0x35/0x90
[ 1659.610134][T26459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1659.616075][T26459] RIP: 0033:0x7f58fe779e79
[ 1659.620521][T26459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1659.640173][T26459] RSP: 002b:00007f58ff4ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1659.648800][T26459] RAX: ffffffffffffffda RBX: 00007f58fe916058 RCX: 00007f58fe779e79
[ 1659.656941][T26459] RDX: 0000000000000058 RSI: 00000000200023c0 RDI: 0000000000000006
[ 1659.665036][T26459] RBP: 00007f58ff4ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1659.673135][T26459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1659.681140][T26459] R13: 0000000000000000 R14: 00007f58fe916058 R15: 00007f58fea3fa38
[ 1659.689242][T26459]  </TASK>
[ 1660.024081][   T25] usb 4-1: USB disconnect, device number 111
[ 1660.075488][ T5287] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1660.345561][ T5287] usb 3-1: Using ep0 maxpacket: 8
[ 1660.355041][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1660.374892][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1660.408139][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1660.433145][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1660.453796][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1660.453857][   T25] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1660.500535][ T5287] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1660.525230][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.560860][ T5287] usb 3-1: Product: syz
[ 1660.570072][ T5287] usb 3-1: Manufacturer: syz
[ 1660.587483][ T5287] usb 3-1: SerialNumber: syz
[ 1660.627585][ T5287] usb 3-1: config 0 descriptor??
[ 1660.675766][   T25] usb 4-1: Using ep0 maxpacket: 16
[ 1660.700162][   T25] usb 4-1: config 8 has an invalid interface number: 179 but max is 0
[ 1660.727481][   T25] usb 4-1: config 8 has no interface number 0
[ 1660.779482][   T25] usb 4-1: New USB device found, idVendor=c21c, idProduct=79d3, bcdDevice=56.9d
[ 1660.826810][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.865650][ T5287] rc_core: IR keymap rc-imon-rsc not found
[ 1660.884192][   T25] usb 4-1: Product: syz
[ 1660.896154][ T5287] Registered IR keymap rc-empty
[ 1660.899644][   T25] usb 4-1: Manufacturer: syz
[ 1660.916856][ T5287] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1660.954551][ T5287] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input145
[ 1660.961468][   T25] usb 4-1: SerialNumber: syz
[ 1661.038293][   T25] usb 4-1: bad CDC descriptors
[ 1661.056151][ T5287] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90
[ 1661.137956][T26477] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4476'.
[ 1661.183278][ T5287] usb 3-1: USB disconnect, device number 26
[ 1661.750796][T26482] FAULT_INJECTION: forcing a failure.
[ 1661.750796][T26482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1661.817521][T26482] CPU: 1 UID: 0 PID: 26482 Comm: syz.1.4477 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1661.828344][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1661.838444][T26482] Call Trace:
[ 1661.841731][T26482]  <TASK>
[ 1661.844795][T26482]  dump_stack_lvl+0x241/0x360
[ 1661.849575][T26482]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1661.854957][T26482]  ? __pfx__printk+0x10/0x10
[ 1661.859595][T26482]  ? __pfx_lock_release+0x10/0x10
[ 1661.864662][T26482]  should_fail_ex+0x3b0/0x4e0
[ 1661.869360][T26482]  _copy_to_iter+0x43a/0x1960
[ 1661.874047][T26482]  ? __virt_addr_valid+0x183/0x530
[ 1661.879174][T26482]  ? __pfx__copy_to_iter+0x10/0x10
[ 1661.884295][T26482]  ? __virt_addr_valid+0x183/0x530
[ 1661.889415][T26482]  ? __virt_addr_valid+0x183/0x530
[ 1661.894529][T26482]  ? __virt_addr_valid+0x45f/0x530
[ 1661.899642][T26482]  ? __phys_addr_symbol+0x2f/0x70
[ 1661.904678][T26482]  ? __check_object_size+0x49c/0x900
[ 1661.909976][T26482]  __skb_datagram_iter+0x112/0x890
[ 1661.915134][T26482]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1661.920786][T26482]  skb_copy_datagram_iter+0xd1/0x250
[ 1661.926102][T26482]  netlink_recvmsg+0x2d0/0x11d0
[ 1661.930991][T26482]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1661.936462][T26482]  ? iovec_from_user+0x87/0x240
[ 1661.941413][T26482]  ? iovec_from_user+0x87/0x240
[ 1661.946365][T26482]  ? iovec_from_user+0x87/0x240
[ 1661.951229][T26482]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1661.956116][T26482]  ? aa_sock_msg_perm+0x91/0x160
[ 1661.961065][T26482]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1661.966379][T26482]  ? security_socket_recvmsg+0x90/0xb0
[ 1661.971858][T26482]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1661.977221][T26482]  sock_recvmsg+0x22f/0x280
[ 1661.981784][T26482]  ____sys_recvmsg+0x1db/0x470
[ 1661.986613][T26482]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1661.988055][T19523] usb 4-1: USB disconnect, device number 112
[ 1661.991958][T26482]  do_recvmmsg+0x474/0xae0
[ 1662.002382][T26482]  ? mark_lock+0x9a/0x350
[ 1662.006803][T26482]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1662.011806][T26482]  ? __pfx___might_resched+0x10/0x10
[ 1662.017113][T26482]  ? __might_fault+0xaa/0x120
[ 1662.021805][T26482]  ? __pfx_lock_release+0x10/0x10
[ 1662.026875][T26482]  ? vfs_write+0x7c4/0xc90
[ 1662.031538][T26482]  ? get_timespec64+0x19c/0x280
[ 1662.036469][T26482]  __x64_sys_recvmmsg+0x1b8/0x250
[ 1662.041547][T26482]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1662.047148][T26482]  ? do_syscall_64+0x100/0x230
[ 1662.051965][T26482]  ? do_syscall_64+0xb6/0x230
[ 1662.056705][T26482]  do_syscall_64+0xf3/0x230
[ 1662.061387][T26482]  ? clear_bhb_loop+0x35/0x90
[ 1662.066124][T26482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.072072][T26482] RIP: 0033:0x7feee9179e79
[ 1662.076535][T26482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1662.096195][T26482] RSP: 002b:00007feee8ff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1662.104651][T26482] RAX: ffffffffffffffda RBX: 00007feee9315f80 RCX: 00007feee9179e79
[ 1662.112690][T26482] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003
[ 1662.120707][T26482] RBP: 00007feee8ff8090 R08: 0000000020003700 R09: 0000000000000000
[ 1662.128727][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.136834][T26482] R13: 0000000000000000 R14: 00007feee9315f80 R15: 00007feee943fa38
[ 1662.144859][T26482]  </TASK>
[ 1662.275672][ T5287] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1662.485510][ T5287] usb 3-1: Using ep0 maxpacket: 8
[ 1662.504137][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1662.538500][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[ 1662.561030][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1662.582405][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1662.595687][T19523] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1662.639197][ T5287] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0
[ 1662.648744][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1662.657460][ T5287] usb 3-1: Product: syz
[ 1662.661912][ T5287] usb 3-1: Manufacturer: syz
[ 1662.667217][ T5287] usb 3-1: SerialNumber: syz
[ 1662.693635][ T5287] usb 3-1: config 0 descriptor??
[ 1662.787302][T19523] usb 2-1: Using ep0 maxpacket: 8
[ 1662.795556][T19523] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1662.810091][T19523] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1662.849609][T19523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1662.875601][    T8] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1662.888443][T19523] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1662.927846][T19523] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1662.938441][T19523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1662.949075][T19523] usb 2-1: Product: syz
[ 1662.962687][T19523] usb 2-1: Manufacturer: syz
[ 1663.003004][T26495] fuse: Unknown parameter '01777777777777777777777˙˙'
[ 1663.010393][T19523] usb 2-1: SerialNumber: syz
[ 1663.038244][T19523] usb 2-1: config 0 descriptor??
[ 1663.057027][T19523] imon_raw 2-1:0.0: IR endpoint missing
[ 1663.095682][    T8] usb 1-1: Using ep0 maxpacket: 8
[ 1663.104381][    T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1663.115451][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1663.136682][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1663.205625][    T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1663.260881][ T5287] usb 3-1: probing VID:PID(0424:012C)   
[ 1663.267372][    T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1663.290320][ T5287] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 09
[ 1663.305435][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1663.334029][ T5287] usb 3-1: vub300 ignoring EndPoint(0) 09
[ 1663.356046][ T5287] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1663.383088][ T5287] vub300 3-1:0.0: probe with driver vub300 failed with error -22
[ 1663.408563][ T5287] usb 3-1: USB disconnect, device number 27
[ 1663.556565][    T8] usb 1-1: GET_CAPABILITIES returned 0
[ 1663.562100][    T8] usbtmc 1-1:16.0: can't read capabilities
[ 1663.794694][ T5287] usb 2-1: USB disconnect, device number 116
[ 1663.875368][ T5311] usb 1-1: USB disconnect, device number 118
[ 1663.944245][   T25] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1664.166413][   T25] usb 4-1: too many configurations: 211, using maximum allowed: 8
[ 1664.196082][   T25] usb 4-1: config index 0 descriptor too short (expected 64979, got 137)
[ 1664.218888][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.296620][   T25] usb 4-1: config index 1 descriptor too short (expected 64979, got 137)
[ 1664.340460][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.375098][   T25] usb 4-1: config index 2 descriptor too short (expected 64979, got 137)
[ 1664.403036][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.441011][   T25] usb 4-1: config index 3 descriptor too short (expected 64979, got 137)
[ 1664.457676][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.485455][ T5287] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1664.489511][   T25] usb 4-1: config index 4 descriptor too short (expected 64979, got 137)
[ 1664.520159][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.564061][   T25] usb 4-1: config index 5 descriptor too short (expected 64979, got 137)
[ 1664.588868][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.629880][   T25] usb 4-1: config index 6 descriptor too short (expected 64979, got 137)
[ 1664.638931][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.660663][   T25] usb 4-1: config index 7 descriptor too short (expected 64979, got 137)
[ 1664.685360][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.715503][ T5287] usb 3-1: Using ep0 maxpacket: 32
[ 1664.728564][   T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1664.745935][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.750407][ T5287] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[ 1664.784978][   T25] usb 4-1: Product: syz
[ 1664.785013][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.809105][   T25] usb 4-1: Manufacturer: syz
[ 1664.832630][   T25] usb 4-1: SerialNumber: syz
[ 1664.835949][ T5287] usb 3-1: config 0 descriptor??
[ 1664.874904][ T5287] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1664.892249][   T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1664.917128][ T5287] gspca_mr97310a: reg write [21] error -22
[ 1664.943316][ T5287] mr97310a 3-1:0.0: probe with driver mr97310a failed with error -22
[ 1664.947384][ T5242] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1665.097877][T26509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1665.161338][T26509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1665.283988][T26519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1665.402312][T26519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1666.089765][ T5242] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1666.165942][ T5242] ath9k_htc: Failed to initialize the device
[ 1666.255754][ T5242] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1666.489044][    T8] usb 3-1: USB disconnect, device number 28
[ 1667.138583][ T5288] usb 4-1: USB disconnect, device number 113
[ 1667.468268][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1667.482916][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1667.496708][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1667.504986][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1667.514261][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1667.522857][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1667.944931][ T3074] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1668.195656][ T3074] usb 4-1: Using ep0 maxpacket: 8
[ 1668.233656][ T3074] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1668.260757][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.299737][ T3074] usb 4-1: Product: syz
[ 1668.309153][ T3074] usb 4-1: Manufacturer: syz
[ 1668.326009][ T3074] usb 4-1: SerialNumber: syz
[ 1668.346642][ T3074] usb 4-1: config 0 descriptor??
[ 1668.377282][ T3074] gspca_main: se401-2.14.0 probing 047d:5003
[ 1668.407650][T26540] kvm_pr_unimpl_wrmsr: 91 callbacks suppressed
[ 1668.407667][T26540] kvm: kvm [26536]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000
[ 1668.481618][T26540] kvm: kvm [26536]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x27e00000080
[ 1668.797524][T26542] netlink: 'syz.1.4494': attribute type 25 has an invalid length.
[ 1668.844032][T26542] netlink: 'syz.1.4494': attribute type 44 has an invalid length.
[ 1669.101172][T26535] chnl_net:caif_netlink_parms(): no params data found
[ 1669.266012][ T3074] usb 4-1: reset high-speed USB device number 114 using dummy_hcd
[ 1669.355974][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.362328][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.511863][ T3074] usb 4-1: device firmware changed
[ 1669.522716][ T3074] gspca_se401: read req failed req 0x06 error -19
[ 1669.536623][ T3074] usb 4-1: USB disconnect, device number 114
[ 1669.588866][ T5239] Bluetooth: hci6: command tx timeout
[ 1669.735584][    T8] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1669.746655][ T3074] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1669.783607][T26535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.824106][T26535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.842774][T26535] bridge_slave_0: entered allmulticast mode
[ 1669.868770][T26535] bridge_slave_0: entered promiscuous mode
[ 1669.915016][T26535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1669.935623][T26535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1669.964370][T26535] bridge_slave_1: entered allmulticast mode
[ 1669.975868][    T8] usb 2-1: Using ep0 maxpacket: 8
[ 1669.975893][ T3074] usb 4-1: Using ep0 maxpacket: 8
[ 1669.985277][T26535] bridge_slave_1: entered promiscuous mode
[ 1669.997934][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1670.027293][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1670.042922][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1670.097383][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1670.142055][    T8] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1670.169722][ T3074] usb 4-1: string descriptor 0 read error: -22
[ 1670.178541][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.200293][ T3074] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1670.207988][    T8] usb 2-1: Product: syz
[ 1670.229681][    T8] usb 2-1: Manufacturer: syz
[ 1670.244194][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.248755][T26535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1670.296308][ T3074] usb 4-1: config 0 descriptor??
[ 1670.299773][    T8] usb 2-1: SerialNumber: syz
[ 1670.318066][    T8] usb 2-1: config 0 descriptor??
[ 1670.318380][ T3074] gspca_main: se401-2.14.0 probing 047d:5003
[ 1670.357651][    T8] imon_raw 2-1:0.0: IR endpoint missing
[ 1670.591460][T26535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1670.804413][T26535] team0: Port device team_slave_0 added
[ 1671.051312][ T1129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1671.104126][   T25] usb 2-1: USB disconnect, device number 117
[ 1671.200301][T26568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1671.221586][T26535] team0: Port device team_slave_1 added
[ 1671.277989][ T3074] gspca_se401: read req failed req 0x06 error -19
[ 1671.316160][ T3074] usb 4-1: USB disconnect, device number 115
[ 1671.522939][ T1129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1671.572007][T26535] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1671.612432][   T29] audit: type=1326 audit(1724245954.665:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1671.635077][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1671.635814][T26535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1671.675518][ T5239] Bluetooth: hci6: command tx timeout
[ 1671.751832][   T29] audit: type=1326 audit(1724245954.665:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1671.775345][T26535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1671.822801][T26535] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1671.841834][T26535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1671.877062][   T29] audit: type=1326 audit(1724245954.675:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1671.899506][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1671.906011][ T3074] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1671.969204][T26535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1672.063796][   T29] audit: type=1326 audit(1724245954.675:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.141524][ T1129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1672.153575][   T29] audit: type=1326 audit(1724245954.675:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.195372][ T3074] usb 3-1: Using ep0 maxpacket: 8
[ 1672.217756][   T29] audit: type=1326 audit(1724245954.675:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.232638][ T3074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1672.319973][   T29] audit: type=1326 audit(1724245954.745:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.360825][ T3074] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1672.378338][ T1129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1672.411923][ T3074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1672.415692][   T29] audit: type=1326 audit(1724245954.745:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.471963][ T3074] usb 3-1: config 0 descriptor??
[ 1672.556266][   T29] audit: type=1326 audit(1724245954.745:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.644253][   T29] audit: type=1326 audit(1724245954.775:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26580 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1672.666764][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1672.671604][T26535] hsr_slave_0: entered promiscuous mode
[ 1672.712114][T26535] hsr_slave_1: entered promiscuous mode
[ 1672.740603][T26535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1672.777661][T26535] Cannot create hsr debugfs directory
[ 1672.917800][ T3074] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1673.246670][T26591] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[ 1673.337131][T26591] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1673.356843][T26591] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1673.382469][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1673.413495][T26591] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1673.484817][ T1129] bridge_slave_1: left allmulticast mode
[ 1673.504504][ T1129] bridge_slave_1: left promiscuous mode
[ 1673.526350][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1673.564181][ T1129] bridge_slave_0: left allmulticast mode
[ 1673.624465][ T1129] bridge_slave_0: left promiscuous mode
[ 1673.634351][T26599] vxcan1: tx address claim with dlc 1
[ 1673.644542][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1673.748294][ T5239] Bluetooth: hci6: command tx timeout
[ 1673.805890][ T3074] usb 3-1: USB disconnect, device number 29
[ 1673.837987][ T3074] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[ 1674.929159][    T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1675.066186][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1675.090050][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1675.111530][ T1129] bond0 (unregistering): Released all slaves
[ 1675.146726][    T8] usb 3-1: config 0 has no interfaces?
[ 1675.152417][    T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1675.186692][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.225272][    T8] usb 3-1: config 0 descriptor??
[ 1675.632764][T26604] netlink: 'syz.2.4509': attribute type 5 has an invalid length.
[ 1675.719363][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4509'.
[ 1675.765562][T10439] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1675.805500][    T8] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1675.836165][ T5239] Bluetooth: hci6: command tx timeout
[ 1675.885899][ T5287] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1675.956513][T10439] usb 4-1: Using ep0 maxpacket: 8
[ 1675.969942][T10439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1675.995487][    T8] usb 1-1: Using ep0 maxpacket: 8
[ 1676.000829][T10439] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[ 1676.024476][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1676.037514][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[ 1676.052865][T10439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1676.107281][ T5287] usb 2-1: config 0 has no interfaces?
[ 1676.123842][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1676.142567][T10439] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1676.171279][ T5287] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1676.181266][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1676.194498][ T1129] hsr_slave_0: left promiscuous mode
[ 1676.212886][T10439] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0
[ 1676.222680][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.233465][T10439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.249961][ T5287] usb 2-1: Product: syz
[ 1676.256318][    T8] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0
[ 1676.258664][ T1129] hsr_slave_1: left promiscuous mode
[ 1676.266654][T10439] usb 4-1: Product: syz
[ 1676.275460][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.283981][ T5287] usb 2-1: Manufacturer: syz
[ 1676.291399][T10439] usb 4-1: Manufacturer: syz
[ 1676.300415][ T5287] usb 2-1: SerialNumber: syz
[ 1676.307446][    T8] usb 1-1: Product: syz
[ 1676.313492][T10439] usb 4-1: SerialNumber: syz
[ 1676.321859][ T5287] usb 2-1: config 0 descriptor??
[ 1676.327390][    T8] usb 1-1: Manufacturer: syz
[ 1676.344424][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1676.346781][T10439] usb 4-1: config 0 descriptor??
[ 1676.362705][    T8] usb 1-1: SerialNumber: syz
[ 1676.376101][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1676.377162][    T8] usb 1-1: config 0 descriptor??
[ 1676.421777][ T5287] usb 3-1: USB disconnect, device number 30
[ 1676.438110][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1676.475455][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1676.596827][ T1129] veth1_macvtap: left promiscuous mode
[ 1676.602559][ T1129] veth0_macvtap: left promiscuous mode
[ 1676.656055][ T1129] veth1_vlan: left promiscuous mode
[ 1676.661476][ T1129] veth0_vlan: left promiscuous mode
[ 1676.789401][T26631] fuse: Unknown parameter '01777777777777777777777˙˙'
[ 1676.798163][T26633] fuse: Unknown parameter '01777777777777777777777˙˙'
[ 1676.900636][T26637] FAULT_INJECTION: forcing a failure.
[ 1676.900636][T26637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1677.110167][T26637] CPU: 1 UID: 0 PID: 26637 Comm: syz.2.4514 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1677.121018][T26637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1677.131129][T26637] Call Trace:
[ 1677.134495][T26637]  <TASK>
[ 1677.137488][T26637]  dump_stack_lvl+0x241/0x360
[ 1677.142248][T26637]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1677.147593][T26637]  ? __pfx__printk+0x10/0x10
[ 1677.152255][T26637]  ? __pfx_lock_release+0x10/0x10
[ 1677.157787][T26637]  should_fail_ex+0x3b0/0x4e0
[ 1677.162529][T26637]  _copy_from_user+0x2f/0xe0
[ 1677.167191][T26637]  copy_msghdr_from_user+0xae/0x680
[ 1677.172490][T26637]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1677.178460][T26637]  __sys_sendmsg+0x23d/0x3a0
[ 1677.183106][T26637]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1677.188263][T26637]  ? vfs_write+0x7c4/0xc90
[ 1677.192766][T26637]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1677.199144][T26637]  ? do_syscall_64+0x100/0x230
[ 1677.203960][T26637]  ? do_syscall_64+0xb6/0x230
[ 1677.208679][T26637]  do_syscall_64+0xf3/0x230
[ 1677.213215][T26637]  ? clear_bhb_loop+0x35/0x90
[ 1677.217935][T26637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1677.223870][T26637] RIP: 0033:0x7fbd28779e79
[ 1677.228356][T26637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1677.248094][T26637] RSP: 002b:00007fbd2949a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1677.256550][T26637] RAX: ffffffffffffffda RBX: 00007fbd28915f80 RCX: 00007fbd28779e79
[ 1677.264552][T26637] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1677.272563][T26637] RBP: 00007fbd2949a090 R08: 0000000000000000 R09: 0000000000000000
[ 1677.280570][T26637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1677.288571][T26637] R13: 0000000000000000 R14: 00007fbd28915f80 R15: 00007fbd28a3fa38
[ 1677.296591][T26637]  </TASK>
[ 1677.385605][    T8] usb 1-1: probing VID:PID(0424:012C)   
[ 1677.414054][    T8] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 09
[ 1677.442493][    T8] usb 1-1: vub300 ignoring EndPoint(0) 09
[ 1677.479208][    T8] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1677.517537][T10439] usb 4-1: probing VID:PID(0424:012C)   
[ 1677.554299][T10439] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 09
[ 1677.570671][    T8] vub300 1-1:0.0: probe with driver vub300 failed with error -22
[ 1677.598909][T10439] usb 4-1: vub300 ignoring EndPoint(0) 09
[ 1677.604721][T10439] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1677.661262][    T8] usb 1-1: USB disconnect, device number 119
[ 1677.697611][T10439] vub300 4-1:0.0: probe with driver vub300 failed with error -22
[ 1677.736045][T10439] usb 4-1: USB disconnect, device number 116
[ 1679.552947][ T1129] team0 (unregistering): Port device team_slave_1 removed
[ 1680.797737][ T1129] team0 (unregistering): Port device team_slave_0 removed
[ 1680.864623][T10439] usb 2-1: USB disconnect, device number 118
[ 1681.367212][T10439] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1681.567862][T10439] usb 2-1: Using ep0 maxpacket: 8
[ 1681.588209][T10439] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1681.602339][T10439] usb 2-1: config 0 has no interfaces?
[ 1681.625508][T10439] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1681.646786][T10439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1681.679946][T10439] usb 2-1: config 0 descriptor??
[ 1681.920405][T10439] usb 2-1: USB disconnect, device number 119
[ 1682.302894][T26672] IPVS: length: 78 != 24
[ 1682.392790][T26672] bridge_slave_1: left allmulticast mode
[ 1682.408631][T26672] bridge_slave_1: left promiscuous mode
[ 1682.414625][T26672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1682.596000][ T3074] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1682.795738][ T3074] usb 3-1: Using ep0 maxpacket: 8
[ 1682.803290][ T3074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1682.824102][ T3074] usb 3-1: config 0 has no interfaces?
[ 1682.835098][T26535] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1682.867541][ T3074] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1682.898501][ T3074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1682.916713][T26535] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1682.937209][ T3074] usb 3-1: config 0 descriptor??
[ 1682.966302][ T5242] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1683.025584][T26535] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1683.068501][T26535] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1683.168215][ T5242] usb 4-1: config 0 has an invalid interface number: 156 but max is 0
[ 1683.175702][T10444] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1683.198769][ T5242] usb 4-1: config 0 has no interface number 0
[ 1683.226145][ T5242] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1683.251915][   T25] usb 3-1: USB disconnect, device number 31
[ 1683.286636][ T5242] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1683.313830][ T5242] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1683.359770][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1683.405194][ T5242] usb 4-1: config 0 descriptor??
[ 1683.418420][T10444] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1683.430895][ T5242] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1683.503122][T10444] usb 2-1: New USB device found, idVendor=3283, idProduct=23f4, bcdDevice=13.67
[ 1683.523409][T10444] usb 2-1: New USB device strings: Mfr=199, Product=237, SerialNumber=0
[ 1683.532156][ T1129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1683.585754][T10444] usb 2-1: Product: syz
[ 1683.613095][T10444] usb 2-1: Manufacturer: syz
[ 1683.638842][ T5242] spca561 4-1:0.156: probe with driver spca561 failed with error -22
[ 1683.645038][T10444] usb 2-1: config 0 descriptor??
[ 1683.687441][ T5242] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1683.703949][ T5242] usb 4-1: MIDIStreaming interface descriptor not found
[ 1683.813663][ T1129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1684.043837][ T5242] snd-usb-audio 4-1:0.156: probe with driver snd-usb-audio failed with error -12
[ 1684.125159][ T5242] usb 4-1: USB disconnect, device number 117
[ 1684.158679][ T1129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1684.254661][T26535] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1684.569542][ T1129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1684.606600][T22226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1684.619868][T22226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1684.629793][T22226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1684.639094][T22226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1684.647161][T22226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1684.654561][T22226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1684.742106][T26535] 8021q: adding VLAN 0 to HW filter on device team0
[ 1684.832269][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1684.839554][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1685.052877][T26535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1685.084283][T26535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1685.203200][T21765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1685.210475][T21765] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1685.825239][ T1129] bridge_slave_1: left allmulticast mode
[ 1685.844319][ T1129] bridge_slave_1: left promiscuous mode
[ 1685.858668][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1685.905233][ T1129] bridge_slave_0: left allmulticast mode
[ 1685.934637][ T1129] bridge_slave_0: left promiscuous mode
[ 1685.964487][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1686.050790][ T1129] batman_adv: batadv0: Interface deactivated: ip6gretap1
[ 1686.175672][   T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1686.207000][ T5288] usb 2-1: USB disconnect, device number 120
[ 1686.385874][   T29] kauditd_printk_skb: 61 callbacks suppressed
[ 1686.385896][   T29] audit: type=1326 audit(1724245969.445:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.389478][   T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1686.392046][   T29] audit: type=1326 audit(1724245969.445:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.414433][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1686.443625][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1686.446013][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1686.544196][   T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1686.583939][   T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1686.595536][   T29] audit: type=1326 audit(1724245969.445:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.639420][   T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1686.648444][   T29] audit: type=1326 audit(1724245969.445:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.665357][   T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1686.715528][   T25] usb 3-1: Product: syz
[ 1686.719775][   T25] usb 3-1: Manufacturer: syz
[ 1686.731045][   T29] audit: type=1326 audit(1724245969.445:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.761851][ T1129] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1686.767434][   T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1686.799461][T22226] Bluetooth: hci3: command tx timeout
[ 1686.806175][ T5288] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1686.863692][   T29] audit: type=1326 audit(1724245969.445:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.887315][   T29] audit: type=1326 audit(1724245969.445:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1686.978923][   T29] audit: type=1326 audit(1724245969.455:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1687.038599][ T5288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.051003][ T5288] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1687.075405][   T29] audit: type=1326 audit(1724245969.455:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1687.100520][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1687.118072][ T5288] usb 4-1: config 0 descriptor??
[ 1687.127493][ T5288] pwc: Askey VC010 type 2 USB webcam detected.
[ 1687.155467][   T29] audit: type=1326 audit(1724245969.455:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26739 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de4f79e79 code=0x7ffc0000
[ 1687.366094][ T5288] pwc: send_video_command error -71
[ 1687.371369][ T5288] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1687.395752][ T5288] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 1687.443169][ T5288] usb 4-1: USB disconnect, device number 118
[ 1687.584910][    T8] usb 3-1: USB disconnect, device number 32
[ 1687.866064][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1687.882946][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1687.903950][ T1129] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1687.923248][ T1129] mac80211_hwsim hwsim171 wlan0: left allmulticast mode
[ 1687.930541][ T1129] mac80211_hwsim hwsim171 wlan0: left promiscuous mode
[ 1687.944047][ T1129] bond0 (unregistering): Released all slaves
[ 1687.976895][T26741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4536'.
[ 1687.995158][T26740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4537'.
[ 1688.050827][T26535] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1688.166337][ T5288] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1688.184648][T26535] veth0_vlan: entered promiscuous mode
[ 1688.396691][ T5288] usb 3-1: Using ep0 maxpacket: 16
[ 1688.408064][ T5288] usb 3-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2
[ 1688.418074][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.426838][ T5288] usb 3-1: Product: syz
[ 1688.431137][ T5288] usb 3-1: Manufacturer: syz
[ 1688.436090][ T5288] usb 3-1: SerialNumber: syz
[ 1688.444960][ T5288] usb 3-1: config 0 descriptor??
[ 1688.453436][ T5288] usblcd 3-1:0.0: USBLCD model not supported.
[ 1688.702938][ T5288] usb 3-1: USB disconnect, device number 33
[ 1688.733680][T26535] veth1_vlan: entered promiscuous mode
[ 1688.819523][ T1129] hsr_slave_0: left promiscuous mode
[ 1688.855839][ T1129] 0·: left promiscuous mode
[ 1688.865879][T22226] Bluetooth: hci3: command tx timeout
[ 1688.880434][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1688.888388][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1688.899745][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1688.909326][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1688.987232][ T1129] veth1_macvtap: left promiscuous mode
[ 1689.003516][ T1129] veth0_macvtap: left promiscuous mode
[ 1689.014527][ T1129] veth1_vlan: left promiscuous mode
[ 1689.032758][ T1129] veth0_vlan: left promiscuous mode
[ 1689.655580][    T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1689.855927][    T8] usb 3-1: Using ep0 maxpacket: 32
[ 1689.871762][    T8] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=17.22
[ 1689.897713][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1689.918713][    T8] usb 3-1: Product: syz
[ 1689.922952][    T8] usb 3-1: Manufacturer: syz
[ 1689.948256][    T8] usb 3-1: SerialNumber: syz
[ 1689.971421][    T8] usb 3-1: config 0 descriptor??
[ 1690.004240][    T8] usb 3-1: selecting invalid altsetting 3
[ 1690.021634][    T8] comedi comedi0: could not set alternate setting 3 in high speed
[ 1690.032204][    T8] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[ 1690.065844][    T8] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[ 1690.640057][T26797] FAULT_INJECTION: forcing a failure.
[ 1690.640057][T26797] name failslab, interval 1, probability 0, space 0, times 0
[ 1690.664915][T26797] CPU: 1 UID: 0 PID: 26797 Comm: syz.1.4546 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1690.675744][T26797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1690.685841][T26797] Call Trace:
[ 1690.689149][T26797]  <TASK>
[ 1690.692128][T26797]  dump_stack_lvl+0x241/0x360
[ 1690.696950][T26797]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1690.702202][T26797]  ? __pfx__printk+0x10/0x10
[ 1690.706852][T26797]  ? fs_reclaim_acquire+0x93/0x140
[ 1690.712189][T26797]  ? __pfx___might_resched+0x10/0x10
[ 1690.717529][T26797]  should_fail_ex+0x3b0/0x4e0
[ 1690.722443][T26797]  ? tomoyo_encode+0x26f/0x540
[ 1690.727262][T26797]  should_failslab+0xac/0x100
[ 1690.732083][T26797]  ? tomoyo_encode+0x26f/0x540
[ 1690.737004][T26797]  __kmalloc_noprof+0xd8/0x400
[ 1690.741822][T26797]  tomoyo_encode+0x26f/0x540
[ 1690.746480][T26797]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1690.752188][T26797]  tomoyo_path_number_perm+0x23a/0x880
[ 1690.757705][T26797]  ? tomoyo_path_number_perm+0x208/0x880
[ 1690.763382][T26797]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1690.769458][T26797]  ? __fget_files+0x29/0x470
[ 1690.774093][T26797]  ? __fget_files+0x3f6/0x470
[ 1690.778820][T26797]  ? __fget_files+0x29/0x470
[ 1690.783478][T26797]  security_file_ioctl+0x75/0xb0
[ 1690.788474][T26797]  __se_sys_ioctl+0x47/0x170
[ 1690.793113][T26797]  do_syscall_64+0xf3/0x230
[ 1690.797655][T26797]  ? clear_bhb_loop+0x35/0x90
[ 1690.802382][T26797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.808324][T26797] RIP: 0033:0x7feee9179e79
[ 1690.812784][T26797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1690.832527][T26797] RSP: 002b:00007feee8fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1690.840997][T26797] RAX: ffffffffffffffda RBX: 00007feee9316058 RCX: 00007feee9179e79
[ 1690.849018][T26797] RDX: 0000000020000080 RSI: 0000000000003ba0 RDI: 0000000000000005
[ 1690.857128][T26797] RBP: 00007feee8fd7090 R08: 0000000000000000 R09: 0000000000000000
[ 1690.865204][T26797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1690.873232][T26797] R13: 0000000000000000 R14: 00007feee9316058 R15: 00007feee943fa38
[ 1690.881354][T26797]  </TASK>
[ 1690.905823][T26797] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1690.954617][T22226] Bluetooth: hci3: command tx timeout
[ 1691.078902][T26803] fuse: Bad value for 'fd'
[ 1691.084591][ T1129] team0 (unregistering): Port device team_slave_1 removed
[ 1691.256418][ T1129] team0 (unregistering): Port device team_slave_0 removed
[ 1691.865445][    T8] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1692.081895][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1692.095443][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.124308][    T8] usb 2-1: config 0 descriptor??
[ 1692.144774][    T8] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1692.865243][T26804] tipc: Started in network mode
[ 1692.877094][T26804] tipc: Node identity 7f000001, cluster identity 4711
[ 1692.904340][T26804] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1692.991209][ T5288] usb 3-1: USB disconnect, device number 34
[ 1693.007628][T26712] chnl_net:caif_netlink_parms(): no params data found
[ 1693.035967][T22226] Bluetooth: hci3: command tx timeout
[ 1693.389015][    T8] gspca_stv06xx: I2C: Read error writing address: -71
[ 1693.406914][    T8] usb 2-1: USB disconnect, device number 121
[ 1693.512031][T26535] veth0_macvtap: entered promiscuous mode
[ 1693.524452][T26820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4551'.
[ 1693.541701][T26535] veth1_macvtap: entered promiscuous mode
[ 1693.550940][T26712] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.559982][T26712] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1693.576137][T26712] bridge_slave_0: entered allmulticast mode
[ 1693.591636][T26712] bridge_slave_0: entered promiscuous mode
[ 1693.623491][T26712] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1693.647743][T26712] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1693.655080][T26712] bridge_slave_1: entered allmulticast mode
[ 1693.685497][T26712] bridge_slave_1: entered promiscuous mode
[ 1693.797452][T26712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1693.891357][T26712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1694.035689][ T5288] tipc: Node number set to 2130706433
[ 1694.063980][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.111224][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.135104][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.157785][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.169816][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.191207][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.225362][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.225685][T10444] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1694.263949][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.281440][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.310006][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.334503][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.353789][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.364260][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1694.388375][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.445056][T26535] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1694.484760][T10444] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1694.518077][T10444] usb 3-1: New USB device found, idVendor=3283, idProduct=23f4, bcdDevice=13.67
[ 1694.582390][T26712] team0: Port device team_slave_0 added
[ 1694.588694][T10444] usb 3-1: New USB device strings: Mfr=199, Product=237, SerialNumber=0
[ 1694.610496][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'.
[ 1694.633241][T10444] usb 3-1: Product: syz
[ 1694.638203][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4555'.
[ 1694.649300][T10444] usb 3-1: Manufacturer: syz
[ 1694.659744][T10444] usb 3-1: config 0 descriptor??
[ 1694.708209][T26851] vlan2: entered promiscuous mode
[ 1694.725778][T26851] bridge2: entered promiscuous mode
[ 1694.742066][T26851] bridge2: port 1(vlan2) entered blocking state
[ 1694.763890][T26851] bridge2: port 1(vlan2) entered disabled state
[ 1694.771795][T26851] vlan2: entered allmulticast mode
[ 1694.779022][T26851] bridge2: entered allmulticast mode
[ 1694.794059][T26851] vlan2: left allmulticast mode
[ 1694.878504][T26851] bridge2: left allmulticast mode
[ 1694.908675][T26851] bridge2: left promiscuous mode
[ 1695.026482][T26712] team0: Port device team_slave_1 added
[ 1695.091947][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.132538][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.154333][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.169520][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.215477][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.255399][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.280114][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.297541][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.329620][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.346613][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.365894][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.399318][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.424680][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1695.455476][ T5288] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1695.455537][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.486672][T26535] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1695.577543][T26535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.600171][T26535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.685359][T26535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.694103][T26535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.706192][ T5288] usb 4-1: Using ep0 maxpacket: 8
[ 1695.767046][ T5288] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1695.785485][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1695.787160][T26712] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1695.800854][ T5288] usb 4-1: Product: syz
[ 1695.806447][ T5288] usb 4-1: Manufacturer: syz
[ 1695.811298][ T5288] usb 4-1: SerialNumber: syz
[ 1695.822217][ T5288] usb 4-1: config 0 descriptor??
[ 1695.830938][T26712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1695.832906][ T5288] gspca_main: se401-2.14.0 probing 047d:5003
[ 1695.899622][T26712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1695.979573][T26712] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1695.998136][T26712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1696.089448][T26712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1696.356619][T26712] hsr_slave_0: entered promiscuous mode
[ 1696.370688][T26712] hsr_slave_1: entered promiscuous mode
[ 1696.418571][T26712] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1696.434288][T26712] Cannot create hsr debugfs directory
[ 1696.745816][ T5288] usb 4-1: reset high-speed USB device number 119 using dummy_hcd
[ 1696.913360][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1696.936866][T10439] usb 3-1: USB disconnect, device number 35
[ 1696.971398][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1696.997354][ T5288] usb 4-1: device firmware changed
[ 1697.020019][ T5288] gspca_se401: read req failed req 0x06 error -19
[ 1697.026123][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[ 1697.117046][ T5288] usb 4-1: USB disconnect, device number 119
[ 1697.376082][ T5288] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1697.424839][T21762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1697.450208][T21762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1697.485615][T10444] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1697.512506][T22226] Bluetooth: hci2: unexpected event 0x34 length: 5 < 6
[ 1697.519989][T22226] Bluetooth: hci2: SCO packet for unknown connection handle 200
[ 1697.605390][ T5288] usb 4-1: Using ep0 maxpacket: 8
[ 1697.677682][ T5288] usb 4-1: string descriptor 0 read error: -22
[ 1697.684313][ T5288] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1697.711079][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.726661][ T5288] usb 4-1: config 0 descriptor??
[ 1697.754682][T10444] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1697.786783][ T5288] gspca_main: se401-2.14.0 probing 047d:5003
[ 1697.808601][T10444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.864266][T10444] usb 3-1: Product: syz
[ 1697.870339][T10444] usb 3-1: Manufacturer: syz
[ 1697.884430][T10444] usb 3-1: SerialNumber: syz
[ 1697.981342][T10444] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1698.046842][ T5287] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1698.816778][T26892] fuse: Unknown parameter '˙˙˙˙0xffffffffffffffff˙˙˙˙˙˙˙˙00000000000000000000˙˙00000000000000000000'
[ 1699.085529][ T5288] usb 4-1: reset high-speed USB device number 120 using dummy_hcd
[ 1699.295655][ T5288] usb 4-1: device descriptor read/64, error -32
[ 1699.581216][ T5288] usb 4-1: reset high-speed USB device number 120 using dummy_hcd
[ 1699.765469][ T5288] usb 4-1: device descriptor read/64, error -32
[ 1701.765891][ T5288] usb 4-1: reset high-speed USB device number 120 using dummy_hcd
[ 1701.836443][ T5288] usb 4-1: device descriptor read/8, error -32
[ 1703.558571][ T5287] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1703.615835][ T5288] usb 4-1: reset high-speed USB device number 120 using dummy_hcd
[ 1703.646824][ T5288] usb 4-1: device descriptor read/8, error -32
[ 1703.677313][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[ 1703.775971][ T5288] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1703.776684][ T5288] gspca_se401: read req failed req 0x06 error -19
[ 1703.784219][ T5288] usb 4-1: USB disconnect, device number 120
[ 1703.797037][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1703.828521][T26712] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1703.885734][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1703.965945][ T5288] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1703.966175][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[ 1703.966332][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1704.045632][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1704.115747][ T5288] usb 4-1: device descriptor read/64, error -32
[ 1704.236052][ T5288] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1704.236440][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1704.315695][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1704.386234][ T5288] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1704.387372][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[ 1704.387562][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1704.477427][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1704.556876][ T5288] usb 4-1: device descriptor read/64, error -32
[ 1704.676585][ T5288] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1704.676837][ T5288] usb usb4-port1: attempt power cycle
[ 1704.677046][ T5288] raw-gadget.1 gadget.3: failed to queue disconnect event
[ 1704.716235][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1704.809096][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1704.809660][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1705.036644][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1705.105693][ T5288] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1705.156731][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[ 1705.156850][ T5288] usb 4-1: device descriptor read/8, error -32
[ 1705.275727][ T5288] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1705.276129][ T5288] raw-gadget.1 gadget.3: failed to queue reset event
[ 1705.355806][ T5288] raw-gadget.1 gadget.3: failed to queue resume event
[ 1705.426116][ T5288] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1705.465960][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[ 1705.466080][ T5288] usb 4-1: device descriptor read/8, error -32
[ 1705.586605][ T5288] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1705.586857][ T5288] usb usb4-port1: unable to enumerate USB device
[ 1705.652031][T26924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1705.655172][T26924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1705.656789][T26924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1705.659318][T26924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1705.660127][T26924] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1705.660527][T26924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1709.192062][T26929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1709.197733][T26929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1709.198907][T26929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1709.200154][T26929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1709.200990][T26929] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1709.201413][T26929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1710.346838][T26935] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1710.352020][T26935] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1710.353209][T26935] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1710.354478][T26935] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1710.355718][T26935] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1710.356165][T26935] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1710.846930][T26929] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1710.850824][T26929] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1710.851985][T26929] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1710.853260][T26929] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1710.854657][T26929] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1710.855084][T26929] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1718.775969][T26924] Bluetooth: hci4: command tx timeout
[ 1718.804421][T26929] Bluetooth: hci9: command tx timeout
[ 1719.012781][T26712] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1719.168922][T26712] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1719.403906][T26712] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1720.795808][T22226] Bluetooth: hci4: command tx timeout
[ 1720.878668][T22226] Bluetooth: hci7: command tx timeout
[ 1720.888349][ T5239] Bluetooth: hci9: command tx timeout
[ 1720.894487][ T5239] Bluetooth: hci8: command tx timeout
[ 1721.219170][T26712] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1721.281989][T26939] chnl_net:caif_netlink_parms(): no params data found
[ 1723.115599][ T5239] Bluetooth: hci4: command tx timeout
[ 1723.121172][ T5239] Bluetooth: hci8: command tx timeout
[ 1723.144902][ T5239] Bluetooth: hci7: command tx timeout
[ 1723.150772][ T5239] Bluetooth: hci9: command tx timeout
[ 1723.805881][T26936] chnl_net:caif_netlink_parms(): no params data found
[ 1725.203608][T22226] Bluetooth: hci9: command tx timeout
[ 1725.209597][ T5239] Bluetooth: hci7: command tx timeout
[ 1725.215037][ T5239] Bluetooth: hci8: command tx timeout
[ 1725.221887][T26929] Bluetooth: hci4: command tx timeout
[ 1726.414789][T26925] chnl_net:caif_netlink_parms(): no params data found
[ 1726.478745][T26712] 8021q: adding VLAN 0 to HW filter on device team0
[ 1726.746351][T26931] chnl_net:caif_netlink_parms(): no params data found
[ 1727.266159][T22226] Bluetooth: hci8: command tx timeout
[ 1727.272612][T22226] Bluetooth: hci7: command tx timeout
[ 1729.963690][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1729.970974][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1731.536358][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1731.542761][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1744.299951][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1744.311837][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1744.328798][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1744.337774][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1744.350410][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1744.358311][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1746.396152][ T5239] Bluetooth: hci10: command tx timeout
[ 1747.562129][T21758] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1747.569365][T21758] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1748.083151][T26936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1748.104635][T26936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.127897][T26936] bridge_slave_0: entered allmulticast mode
[ 1748.154846][T26936] bridge_slave_0: entered promiscuous mode
[ 1748.475675][ T5239] Bluetooth: hci10: command tx timeout
[ 1749.505914][T26939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.535719][T26939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1749.543289][T26939] bridge_slave_0: entered allmulticast mode
[ 1749.567508][T26939] bridge_slave_0: entered promiscuous mode
[ 1749.584776][T26939] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.605595][T26939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1749.612966][T26939] bridge_slave_1: entered allmulticast mode
[ 1749.638201][T26939] bridge_slave_1: entered promiscuous mode
[ 1749.727841][T26936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.735046][T26936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1749.775565][T26936] bridge_slave_1: entered allmulticast mode
[ 1749.805829][T26936] bridge_slave_1: entered promiscuous mode
[ 1750.556092][ T5239] Bluetooth: hci10: command tx timeout
[ 1752.336130][T21765] bridge_slave_1: left allmulticast mode
[ 1752.341844][T21765] bridge_slave_1: left promiscuous mode
[ 1752.365617][T21765] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1752.562357][T21765] bridge_slave_0: left allmulticast mode
[ 1752.569310][T21765] bridge_slave_0: left promiscuous mode
[ 1752.575119][T21765] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1752.642515][ T5239] Bluetooth: hci10: command tx timeout
[ 1764.684922][T22226] Bluetooth: hci5: command 0x0406 tx timeout
[ 1775.665845][ T5286] kworker/1:4 (5286) used greatest stack depth: 18360 bytes left
[ 1777.398076][T22226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1777.409309][T22226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1777.424243][T22226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1777.432932][T22226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1777.441196][T22226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1777.448668][T22226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1777.556410][ T5239] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1777.573087][ T5239] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1777.582295][ T5239] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1777.612512][ T5239] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1777.628673][ T5239] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1777.638480][ T5239] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1777.936005][ T5239] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1777.949119][ T5239] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1777.958676][ T5239] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1777.970012][ T5239] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1777.978744][ T5239] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1777.988226][ T5239] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1778.213590][T22226] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1778.226945][T22226] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1778.245694][T22226] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1778.258259][T22226] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1778.274683][T22226] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1778.283326][T22226] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1779.519516][T22226] Bluetooth: hci3: command tx timeout
[ 1779.755844][T22226] Bluetooth: hci11: command tx timeout
[ 1780.076151][T22226] Bluetooth: hci12: command tx timeout
[ 1780.520294][T22226] Bluetooth: hci13: command tx timeout
[ 1781.596470][T22226] Bluetooth: hci3: command tx timeout
[ 1781.835638][T22226] Bluetooth: hci11: command tx timeout
[ 1782.156017][T22226] Bluetooth: hci12: command tx timeout
[ 1782.555574][T22226] Bluetooth: hci13: command tx timeout
[ 1783.679591][T22226] Bluetooth: hci3: command tx timeout
[ 1783.916155][T22226] Bluetooth: hci11: command tx timeout
[ 1784.235838][T22226] Bluetooth: hci12: command tx timeout
[ 1784.635719][T22226] Bluetooth: hci13: command tx timeout
[ 1785.756616][T22226] Bluetooth: hci3: command tx timeout
[ 1785.995894][T22226] Bluetooth: hci11: command tx timeout
[ 1786.324154][T22226] Bluetooth: hci12: command tx timeout
[ 1786.715386][T22226] Bluetooth: hci13: command tx timeout
[ 1792.328933][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.335617][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1804.835673][ T5239] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1804.848059][ T5239] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1804.857616][ T5239] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1804.867985][ T5239] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1804.876392][ T5239] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1804.886440][ T5239] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1806.946047][ T5239] Bluetooth: hci14: command tx timeout
[ 1809.035798][ T5239] Bluetooth: hci14: command tx timeout
[ 1811.116659][ T5239] Bluetooth: hci14: command tx timeout
[ 1813.187114][ T5239] Bluetooth: hci14: command tx timeout
[ 1837.787163][T22226] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1837.802007][T22226] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1837.811315][T22226] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1837.819716][T22226] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1837.831100][T22226] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1837.839067][T22226] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1837.957059][ T5239] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1837.975337][ T5239] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1837.984637][ T5239] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1837.995450][ T5239] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1838.004250][ T5239] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 1838.017039][ T5239] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1838.158785][T22226] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1838.172829][T22226] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1838.197446][T22226] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1838.215972][T22226] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1838.223985][T22226] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[ 1838.233252][T22226] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1838.438456][ T5239] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 1838.450879][ T5239] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 1838.466584][ T5239] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 1838.475515][ T5239] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 1838.487719][ T5239] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[ 1838.496386][ T5239] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 1839.905535][ T5239] Bluetooth: hci15: command tx timeout
[ 1840.075757][ T5239] Bluetooth: hci16: command tx timeout
[ 1840.315387][ T5239] Bluetooth: hci17: command tx timeout
[ 1840.555763][ T5239] Bluetooth: hci18: command tx timeout
[ 1841.986226][ T5239] Bluetooth: hci15: command tx timeout
[ 1842.157040][ T5239] Bluetooth: hci16: command tx timeout
[ 1842.386608][ T5239] Bluetooth: hci17: command tx timeout
[ 1842.635918][ T5239] Bluetooth: hci18: command tx timeout
[ 1844.075774][T27059] Bluetooth: hci15: command tx timeout
[ 1844.235943][T27059] Bluetooth: hci16: command tx timeout
[ 1844.476108][T27059] Bluetooth: hci17: command tx timeout
[ 1844.716933][T26937] Bluetooth: hci18: command tx timeout
[ 1845.557102][T27059] Bluetooth: hci8: command 0x0406 tx timeout
[ 1845.563244][T27059] Bluetooth: hci7: command 0x0406 tx timeout
[ 1845.575294][T26937] Bluetooth: hci9: command 0x0406 tx timeout
[ 1845.581471][T26937] Bluetooth: hci4: command 0x0406 tx timeout
[ 1846.155541][T26937] Bluetooth: hci15: command tx timeout
[ 1846.316560][T26937] Bluetooth: hci16: command tx timeout
[ 1846.556414][T26937] Bluetooth: hci17: command tx timeout
[ 1846.797586][T26937] Bluetooth: hci18: command tx timeout
[ 1853.791237][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.797889][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1859.427961][   T30] INFO: task khugepaged:37 blocked for more than 143 seconds.
[ 1859.435617][   T30]       Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1859.443275][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1859.473670][   T30] task:khugepaged      state:D stack:26096 pid:37    tgid:37    ppid:2      flags:0x00004000
[ 1859.515717][   T30] Call Trace:
[ 1859.519076][   T30]  <TASK>
[ 1859.522041][   T30]  __schedule+0x1800/0x4a60
[ 1859.535538][   T30]  ? __pfx___schedule+0x10/0x10
[ 1859.540511][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1859.555769][   T30]  ? schedule+0x90/0x320
[ 1859.560111][   T30]  schedule+0x14b/0x320
[ 1859.564317][   T30]  schedule_timeout+0xb0/0x310
[ 1859.585661][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1859.591132][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1860.175675][   T30]  ? wait_for_completion+0x2fe/0x620
[ 1860.181063][   T30]  ? wait_for_completion+0x2fe/0x620
[ 1860.223887][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1860.245371][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1860.258229][   T30]  ? wait_for_completion+0x2fe/0x620
[ 1860.312905][   T30]  wait_for_completion+0x355/0x620
[ 1860.357078][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1860.361974][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[ 1860.414426][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 1860.425264][   T30]  ? __flush_work+0xe6/0xd00
[ 1860.429965][   T30]  __flush_work+0xaa9/0xd00
[ 1860.434523][   T30]  ? __flush_work+0xe6/0xd00
[ 1860.456139][   T30]  ? __pfx___flush_work+0x10/0x10
[ 1860.461259][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1860.483710][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1860.512276][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1860.525703][   T30]  __lru_add_drain_all+0x4f6/0x560
[ 1860.537761][   T30]  khugepaged+0x1bb/0x1dc0
[ 1860.542301][   T30]  ? __pfx_khugepaged+0x10/0x10
[ 1860.569994][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1860.598088][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1860.604266][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1860.637197][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1860.643531][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 1860.655270][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1860.660560][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1860.685272][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1860.691816][   T30]  ? __kthread_parkme+0x169/0x1d0
[ 1860.705276][   T30]  ? __pfx_khugepaged+0x10/0x10
[ 1860.710218][   T30]  kthread+0x2f0/0x390
[ 1860.714342][   T30]  ? __pfx_khugepaged+0x10/0x10
[ 1860.748003][   T30]  ? __pfx_kthread+0x10/0x10
[ 1860.752700][   T30]  ret_from_fork+0x4b/0x80
[ 1860.775566][   T30]  ? __pfx_kthread+0x10/0x10
[ 1860.786013][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1860.790974][   T30]  </TASK>
[ 1860.794162][   T30] 
[ 1860.794162][   T30] Showing all locks held in the system:
[ 1860.821037][   T30] 1 lock held by pool_workqueue_/3:
[ 1860.831703][   T30]  #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 1860.855457][   T30] 2 locks held by kworker/0:0/8:
[ 1860.860466][   T30] 3 locks held by kworker/1:0/25:
[ 1860.879936][   T30]  #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1860.904984][   T30]  #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1860.937420][   T30]  #2: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[ 1860.954944][   T30] 1 lock held by khungtaskd/30:
[ 1860.979041][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 1861.005289][   T30] 1 lock held by khugepaged/37:
[ 1861.010342][   T30]  #0: ffffffff8e9f21a8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x560
[ 1861.035317][   T30] 6 locks held by kworker/u9:1/4622:
[ 1861.040896][   T30]  #0: ffff888066123948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1861.065302][   T30]  #1: ffffc9000cf9fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.095633][   T30]  #2: ffff88805fa2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[ 1861.125307][   T30]  #3: ffff88805fa2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[ 1861.145731][   T30]  #4: ffffffff8fdeff68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340
[ 1861.167127][   T30]  #5: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 1861.194804][   T30] 2 locks held by getty/4990:
[ 1861.203093][   T30]  #0: ffff88802f9c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1861.240372][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[ 1861.266221][   T30] 3 locks held by kworker/1:3/5242:
[ 1861.271514][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1861.301741][   T30]  #1: ffffc90003b6fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.330415][   T30]  #2: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 1861.375158][   T30] 2 locks held by kworker/0:4/5287:
[ 1861.385607][   T30] 3 locks held by kworker/0:1/10439:
[ 1861.390961][   T30] 5 locks held by kworker/0:7/10444:
[ 1861.410716][   T30] 3 locks held by kworker/u8:14/21762:
[ 1861.420076][   T30]  #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140
[ 1861.449933][   T30]  #1: ffffc9000480fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.485422][   T30]  #2: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xcb/0x610
[ 1861.495051][   T30] 3 locks held by kworker/u8:16/21763:
[ 1861.516269][   T30]  #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1861.548843][   T30]  #1: ffffc9000482fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.575261][   T30]  #2: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1861.584603][   T30] 4 locks held by kworker/u8:17/21765:
[ 1861.615423][   T30]  #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1861.635260][   T30]  #1: ffffc9000483fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.673860][   T30]  #2: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 1861.696855][   T30]  #3: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[ 1861.714503][   T30] 2 locks held by syz.3.4557/26858:
[ 1861.733865][   T30] 3 locks held by syz.4.4490/26889:
[ 1861.740278][   T30] 1 lock held by syz.1.4564/26900:
[ 1861.762652][   T30]  #0: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0
[ 1861.782887][   T30] 3 locks held by syz.2.4565/26907:
[ 1861.795258][   T30]  #0: ffff88801e558d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[ 1861.821561][   T30]  #1: ffff88801e558078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[ 1861.855409][   T30]  #2: ffffffff8fdeff68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[ 1861.880433][   T30] 1 lock held by syz-executor/26925:
[ 1861.892485][   T30]  #0: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1861.916671][   T30] 5 locks held by kworker/u9:3/26929:
[ 1861.922106][   T30]  #0: ffff88807a425148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1861.945334][   T30]  #1: ffffc90004017d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1861.983174][   T30]  #2: ffff8880676fcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[ 1862.008187][   T30]  #3: ffff8880676fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[ 1862.032243][   T30]  #4: ffffffff8fdeff68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340
[ 1862.052703][   T30] 1 lock held by syz-executor/26931:
[ 1862.065257][   T30]  #0: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1862.074882][   T30] 4 locks held by kworker/u9:5/26935:
[ 1862.102491][   T30]  #0: ffff8880127c4148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1862.135512][   T30]  #1: ffffc90003e67d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1862.164634][   T30]  #2: ffff8880502b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[ 1862.184460][   T30]  #3: ffff8880502b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[ 1862.203843][   T30] 1 lock held by syz-executor/26936:
[ 1862.238465][   T30]  #0: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1862.265312][   T30] 1 lock held by syz-executor/26939:
[ 1862.270894][   T30]  #0: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1862.295284][   T30] 3 locks held by kworker/u8:0/26972:
[ 1862.300726][   T30]  #0: ffff88802a33c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1862.332033][   T30]  #1: ffffc90004317d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1862.355004][   T30]  #2: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[ 1862.393734][   T30] 2 locks held by syz-executor/27008:
[ 1862.405262][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.414871][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710
[ 1862.444816][   T30] 2 locks held by syz-executor/27024:
[ 1862.464387][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.494239][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.525553][   T30] 2 locks held by syz-executor/27027:
[ 1862.531004][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.555703][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.573955][   T30] 2 locks held by syz-executor/27029:
[ 1862.589193][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.619857][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.655050][   T30] 2 locks held by syz-executor/27031:
[ 1862.661335][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.685474][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.710333][   T30] 2 locks held by syz-executor/27035:
[ 1862.724554][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.751216][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.775263][   T30] 2 locks held by syz-executor/27052:
[ 1862.780715][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.811398][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.838767][   T30] 2 locks held by syz-executor/27055:
[ 1862.853600][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.885899][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.905594][   T30] 2 locks held by syz-executor/27056:
[ 1862.911044][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.936389][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1862.965272][   T30] 2 locks held by syz-executor/27058:
[ 1862.970800][   T30]  #0: ffffffff8fc77a90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1862.994194][   T30]  #1: ffffffff8fc84648 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[ 1863.036152][   T30] 
[ 1863.038591][   T30] =============================================
[ 1863.038591][   T30] 
[ 1863.055293][   T30] NMI backtrace for cpu 1
[ 1863.059694][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1863.070230][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1863.080342][   T30] Call Trace:
[ 1863.083646][   T30]  <TASK>
[ 1863.086607][   T30]  dump_stack_lvl+0x241/0x360
[ 1863.091328][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1863.096561][   T30]  ? __pfx__printk+0x10/0x10
[ 1863.101190][   T30]  ? vprintk_emit+0x667/0x7c0
[ 1863.105902][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[ 1863.111004][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 1863.115987][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1863.121488][   T30]  ? _printk+0xd5/0x120
[ 1863.125688][   T30]  ? __pfx__printk+0x10/0x10
[ 1863.130348][   T30]  ? __wake_up_klogd+0xcc/0x110
[ 1863.135330][   T30]  ? __pfx__printk+0x10/0x10
[ 1863.139966][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 1863.145028][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1863.151046][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 1863.157067][   T30]  watchdog+0xff4/0x1040
[ 1863.161352][   T30]  ? watchdog+0x1ea/0x1040
[ 1863.165825][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1863.170565][   T30]  kthread+0x2f0/0x390
[ 1863.174900][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1863.179665][   T30]  ? __pfx_kthread+0x10/0x10
[ 1863.184312][   T30]  ret_from_fork+0x4b/0x80
[ 1863.188776][   T30]  ? __pfx_kthread+0x10/0x10
[ 1863.193449][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1863.198291][   T30]  </TASK>
[ 1863.203075][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 1863.209084][    C0] NMI backtrace for cpu 0
[ 1863.209100][    C0] CPU: 0 UID: 0 PID: 10439 Comm: kworker/0:1 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1863.209121][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1863.209134][    C0] Workqueue: events_power_efficient neigh_periodic_work
[ 1863.209166][    C0] RIP: 0010:lock_acquire+0x6d/0x550
[ 1863.209194][    C0] Code: 24 00 01 00 00 49 bd 00 00 00 00 00 fc ff df 48 c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 42 2c 03 8e 48 c7 44 24 50 c0 cd 6f 81 <4c> 8d 64 24 40 49 c1 ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04
[ 1863.209210][    C0] RSP: 0018:ffffc900000069c0 EFLAGS: 00000086
[ 1863.209225][    C0] RAX: 49bd771d69cd6300 RBX: 1ffff92000000d68 RCX: 0000000000000000
[ 1863.209239][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888022907310
[ 1863.209252][    C0] RBP: ffffc90000006b08 R08: 0000000000000001 R09: 0000000000000000
[ 1863.209263][    C0] R10: dffffc0000000000 R11: ffffed1004520e68 R12: 0000000000000046
[ 1863.209277][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[ 1863.209290][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 1863.209306][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1863.209319][    C0] CR2: 000000110c434be9 CR3: 000000000e734000 CR4: 00000000003526f0
[ 1863.209335][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1863.209346][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1863.209358][    C0] Call Trace:
[ 1863.209365][    C0]  <NMI>
[ 1863.209373][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1863.209397][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1863.209424][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1863.209445][    C0]  ? nmi_handle+0x2a/0x5a0
[ 1863.209473][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1863.209496][    C0]  ? nmi_handle+0x14f/0x5a0
[ 1863.209513][    C0]  ? nmi_handle+0x2a/0x5a0
[ 1863.209531][    C0]  ? lock_acquire+0x6d/0x550
[ 1863.209555][    C0]  ? default_do_nmi+0x63/0x160
[ 1863.209578][    C0]  ? exc_nmi+0x123/0x1f0
[ 1863.209600][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1863.209629][    C0]  ? lock_acquire+0x6d/0x550
[ 1863.209666][    C0]  ? lock_acquire+0x6d/0x550
[ 1863.209691][    C0]  ? lock_acquire+0x6d/0x550
[ 1863.209715][    C0]  </NMI>
[ 1863.209722][    C0]  <IRQ>
[ 1863.209732][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1863.209757][    C0]  ? __lock_acquire+0x137a/0x2040
[ 1863.209793][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[ 1863.209819][    C0]  ? usb_unanchor_urb+0x55/0xc0
[ 1863.209840][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1863.209873][    C0]  usb_unanchor_urb+0x55/0xc0
[ 1863.209893][    C0]  ? usb_anchor_suspend_wakeups+0x1/0x40
[ 1863.209918][    C0]  __usb_hcd_giveback_urb+0x2a6/0x6e0
[ 1863.209938][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[ 1863.209958][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1863.209984][    C0]  dummy_timer+0x830/0x45a0
[ 1863.210013][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1863.210049][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1863.210076][    C0]  ? __hrtimer_run_queues+0x477/0xd50
[ 1863.210095][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1863.210123][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1863.210148][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1863.210174][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1863.210196][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1863.210215][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[ 1863.210249][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1863.210275][    C0]  hrtimer_interrupt+0x396/0x990
[ 1863.210308][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1863.210338][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[ 1863.210364][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1863.210386][    C0] RIP: 0010:unwind_next_frame+0x467/0x2a00
[ 1863.210415][    C0] Code: fc 4d 39 fd 0f 83 cc 13 00 00 e8 a4 5f 52 00 4c 89 f9 4d 89 fc e9 55 14 00 00 4a 8d 1c bd 4c fe 24 90 45 29 fc 4e 8d 64 a3 fc <49> 39 dc 73 4d e8 7f 5f 52 00 48 29 db e9 dd 00 00 00 48 ba fc ff
[ 1863.210430][    C0] RSP: 0018:ffffc90000007348 EFLAGS: 00000202
[ 1863.210445][    C0] RAX: 0000000000000100 RBX: ffffffff9028d3b0 RCX: ffffffff909dd34c
[ 1863.210458][    C0] RDX: ffff8880233f9e00 RSI: 000000000000f559 RDI: 000000000000f55a
[ 1863.210471][    C0] RBP: 000000000000575f R08: ffffffff81412a2e R09: ffffc90000007510
[ 1863.210484][    C0] R10: 0000000000000003 R11: ffffffff817f3110 R12: ffffffff9028d3b0
[ 1863.210497][    C0] R13: 00000000000b0001 R14: dffffc0000000000 R15: 000000000000f559
[ 1863.210512][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1863.210536][    C0]  ? unwind_next_frame+0x2de/0x2a00
[ 1863.210567][    C0]  ? unwind_next_frame+0x2de/0x2a00
[ 1863.210595][    C0]  ? do_softirq+0x11a/0x1e0
[ 1863.210619][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.210646][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.210667][    C0]  ? __kernel_text_address+0xd/0x40
[ 1863.210685][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.210706][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1863.210729][    C0]  arch_stack_walk+0x151/0x1b0
[ 1863.210750][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.210774][    C0]  stack_trace_save+0x118/0x1d0
[ 1863.210797][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1863.210827][    C0]  kasan_save_track+0x3f/0x80
[ 1863.210850][    C0]  ? kasan_save_track+0x3f/0x80
[ 1863.210871][    C0]  ? __kasan_slab_alloc+0x66/0x80
[ 1863.210895][    C0]  ? kmem_cache_alloc_node_noprof+0x16b/0x320
[ 1863.210914][    C0]  ? __alloc_skb+0x1c3/0x440
[ 1863.210932][    C0]  ? skb_copy+0x12b/0x820
[ 1863.210953][    C0]  ? mac80211_hwsim_tx_frame_no_nl+0x106b/0x18d0
[ 1863.210976][    C0]  ? mac80211_hwsim_tx_frame+0x1cc/0x220
[ 1863.211000][    C0]  ? mac80211_hwsim_beacon_tx+0x3bf/0x850
[ 1863.211024][    C0]  ? __iterate_interfaces+0x222/0x510
[ 1863.211043][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[ 1863.211064][    C0]  ? mac80211_hwsim_beacon+0xd4/0x1f0
[ 1863.211082][    C0]  ? __hrtimer_run_queues+0x59b/0xd50
[ 1863.211100][    C0]  ? hrtimer_run_softirq+0x19a/0x2c0
[ 1863.211118][    C0]  ? handle_softirqs+0x2c4/0x970
[ 1863.211140][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.211185][    C0]  __kasan_slab_alloc+0x66/0x80
[ 1863.211209][    C0]  ? __alloc_skb+0x1c3/0x440
[ 1863.211228][    C0]  kmem_cache_alloc_node_noprof+0x16b/0x320
[ 1863.211251][    C0]  __alloc_skb+0x1c3/0x440
[ 1863.211270][    C0]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 1863.211294][    C0]  ? __pfx___alloc_skb+0x10/0x10
[ 1863.211316][    C0]  ? do_raw_spin_lock+0x14f/0x370
[ 1863.211338][    C0]  skb_copy+0x12b/0x820
[ 1863.211360][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1863.211387][    C0]  mac80211_hwsim_tx_frame_no_nl+0x106b/0x18d0
[ 1863.211421][    C0]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[ 1863.211446][    C0]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 1863.211477][    C0]  ? mac80211_hwsim_monitor_rx+0x1bc/0x810
[ 1863.211504][    C0]  mac80211_hwsim_tx_frame+0x1cc/0x220
[ 1863.211532][    C0]  mac80211_hwsim_beacon_tx+0x3bf/0x850
[ 1863.211562][    C0]  __iterate_interfaces+0x222/0x510
[ 1863.211582][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1863.211607][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1863.211632][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170
[ 1863.211660][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[ 1863.211684][    C0]  mac80211_hwsim_beacon+0xd4/0x1f0
[ 1863.211705][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1863.211725][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1863.211744][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[ 1863.211779][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1863.211799][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[ 1863.211827][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[ 1863.211850][    C0]  handle_softirqs+0x2c4/0x970
[ 1863.211875][    C0]  ? do_softirq+0x11b/0x1e0
[ 1863.211900][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1863.211928][    C0]  do_softirq+0x11b/0x1e0
[ 1863.211950][    C0]  </IRQ>
[ 1863.211956][    C0]  <TASK>
[ 1863.211963][    C0]  ? __pfx_do_softirq+0x10/0x10
[ 1863.211985][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 1863.212012][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1863.212039][    C0]  __local_bh_enable_ip+0x1bb/0x200
[ 1863.212063][    C0]  ? neigh_periodic_work+0xb35/0xd50
[ 1863.212097][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1863.212120][    C0]  ? neigh_destroy+0x423/0x580
[ 1863.212147][    C0]  neigh_periodic_work+0xb35/0xd50
[ 1863.212177][    C0]  ? process_scheduled_works+0x945/0x1830
[ 1863.212200][    C0]  process_scheduled_works+0xa2c/0x1830
[ 1863.212240][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1863.212268][    C0]  ? assign_work+0x364/0x3d0
[ 1863.212293][    C0]  worker_thread+0x86d/0xd40
[ 1863.212325][    C0]  ? __kthread_parkme+0x169/0x1d0
[ 1863.212352][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1863.212376][    C0]  kthread+0x2f0/0x390
[ 1863.212403][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1863.212426][    C0]  ? __pfx_kthread+0x10/0x10
[ 1863.212454][    C0]  ret_from_fork+0x4b/0x80
[ 1863.212479][    C0]  ? __pfx_kthread+0x10/0x10
[ 1863.212506][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1863.212540][    C0]  </TASK>
[ 1864.854995][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1864.861911][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[ 1864.872444][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1864.882554][   T30] Call Trace:
[ 1864.885859][   T30]  <TASK>
[ 1864.888811][   T30]  dump_stack_lvl+0x241/0x360
[ 1864.893528][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1864.898758][   T30]  ? __pfx__printk+0x10/0x10
[ 1864.903382][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1864.909668][   T30]  ? vscnprintf+0x5d/0x90
[ 1864.914036][   T30]  panic+0x349/0x860
[ 1864.917972][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1864.924176][   T30]  ? __pfx_panic+0x10/0x10
[ 1864.928633][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 1864.934040][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 1864.939625][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1864.945029][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1864.951215][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 1864.957408][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 1864.963596][   T30]  watchdog+0x1033/0x1040
[ 1864.967964][   T30]  ? watchdog+0x1ea/0x1040
[ 1864.972542][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1864.977258][   T30]  kthread+0x2f0/0x390
[ 1864.981365][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1864.986107][   T30]  ? __pfx_kthread+0x10/0x10
[ 1864.990736][   T30]  ret_from_fork+0x4b/0x80
[ 1864.995193][   T30]  ? __pfx_kthread+0x10/0x10
[ 1864.999825][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1865.004638][   T30]  </TASK>
[ 1865.010633][   T30] Kernel Offset: disabled
[ 1865.014973][   T30] Rebooting in 86400 seconds..