last executing test programs:

3m24.855646569s ago: executing program 2 (id=149):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b79", 0x4}], 0x1}, 0x40)
listen(0xffffffffffffffff, 0x20000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x1000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800)={@mcast1}, &(0x7f0000000840)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x190, 0x230, 0x230, 0x190, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00', {}, {}, 0x4}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x0, 0xe}, 0x0)

3m24.214624374s ago: executing program 2 (id=152):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x1, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]})
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000140)={0x5, @capture={0x1000, 0x1, {0x3, 0x5}, 0x3, 0xdb0a}})
clock_adjtime(0x0, &(0x7f00000000c0)={0x5f50b6db, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0xffffffffffffff7f, 0x400, 0x5aa, 0x0, 0x0, 0x4, 0x400000000, 0x0, 0x0, 0x8})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m23.737334064s ago: executing program 2 (id=153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xfffc, r2, 0x0}])
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)

3m22.357573128s ago: executing program 2 (id=155):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
chdir(&(0x7f0000000200)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
r2 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
io_uring_setup(0x4fb3, &(0x7f0000000a80)={0x0, 0xd9e7, 0x1, 0x3, 0x1ec, 0x0, r1})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x4, 0x8000, 0x9, 0x400, 0x80000000, 0x6, 0x1, 0xff, 0x5, 0x3, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x80004, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb0, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x197e24b7, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffc]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"})
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

3m21.301204286s ago: executing program 2 (id=157):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
getdents(0xffffffffffffffff, &(0x7f0000000080)=""/43, 0x2b)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80800)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x4, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x16, 0xf39, 0x4, "99c55f2de2384bb7785a3948ad47fe78f4e8"}]}}}}}}}}, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newnexthop={0x48, 0x68, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0x16}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x8001, 0x0, 0x1}]}}]}, 0x48}}, 0x1)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
clock_gettime(0x0, &(0x7f0000000700)={<r5=>0x0, <r6=>0x0})
futex(&(0x7f0000000440)=0x1, 0xd, 0x2, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f0000000880), 0x1)
syz_usb_connect$uac1(0x2, 0x110, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x8, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x6}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x1a, "ab88b50d2f"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x4, 0x3, [0x5, 0x1, 0x2], 0xff}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x1, "f7100729"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x7, 0x6, "5d84c14855"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x6808, 0x3, "01741a"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x3, 0x2, 0x137, 0x7, 0x57}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xc7, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x6, 0x2, "98", "91"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0x9, "8541f4814f18ef"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x1, 0xf, "fda4"}, @as_header={0x7, 0x24, 0x1, 0xdf, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x3, 0xc, "0a9a266f48"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x0, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0xb5, 'Z', "2c557f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0xcc, 0x5, "", "ecbb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x97, 0x3, 0x6, {0x7, 0x25, 0x1, 0x1, 0x4, 0xff43}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x2, 0x0, 0xfd, 0xff, 0x9}, 0xec, &(0x7f0000000600)={0x5, 0xf, 0xec, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfd, 0xcf, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x51, 0x80, 0x1, 0x6}, @ptm_cap={0x3}, @generic={0xcf, 0x10, 0x4, "d93bc7aa40459f25e64c7d40bb0454ea70545953184d6c5cfbd7a5ec37ebed4fe6b890768a1d7f7cb071affb6df1c30e6a92c7b402ff9bc1a281f847eaf24dd4e7648e81dfec83f888f7d6b4d3c12daaf7afaf611fb6a39a86d990e7999e97277902858cb8f90e11cafd8433263e39ac0681a8c9c38b71c23e25c4b73346bf2dd04a5d609652acc2e8c144ac68b2a5e4bb3bc17127bd98d93966f08385ae34f5e03fd3ae4bf03e9540ab087b3cc4d87ab2e2d39b795d97b8b938f4acfd82cba1d7fcf091aef5f78a18d6a9ac"}]}, 0x1, [{0xaf, &(0x7f00000007c0)=@string={0xaf, 0x3, "0add25a43319f862e821148de2bea9a85feb839dd6fbb5dcf857a14487d9bf9b1f5b8cc465b8fb01b9f64d94d83d61b50b6694134b0bfe023570ea2b1f050fadb1991d3af98ae7707fbc842b5cf4d48b697841e6ae21256b06fa7d157da6b05cb2e6244676b35499bb8539da1082fd07fdc01667ef1f10a23439053843d38f63cfe8496bb17fccdeb4e04ffa30750ab08aaf84f0543427a35ee356e459b8d79e917773f2982d1e154211c66a34"}}]})
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x3, 0x6}, &(0x7f0000000480)=0xc)

3m19.790082356s ago: executing program 2 (id=162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000002c0))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007102100000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00074000000000000000000900010073797a3000000000c4200380c812008008000340"], 0x219c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

3m18.732547861s ago: executing program 32 (id=162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000002c0))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007102100000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00074000000000000000000900010073797a3000000000c4200380c812008008000340"], 0x219c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

1m59.142316535s ago: executing program 5 (id=529):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r0])
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)

1m58.779854194s ago: executing program 5 (id=535):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

1m58.416073296s ago: executing program 5 (id=540):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000100)='environ\x00')
syz_usb_disconnect(0xffffffffffffffff)
read(r5, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r8=>r7, {0x7}}, './file0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={<r11=>0x0, 0x80000000}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={r11, 0xbc, &(0x7f0000000440)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}, 0xe49}, @in6={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x8}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x4, @local, 0x8}, @in6={0xa, 0x4e21, 0x0, @private2, 0xa79}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000540)=0xc)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m54.776247491s ago: executing program 5 (id=575):
r0 = fanotify_init(0x0, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
close_range(r0, 0xffffffffffffffff, 0x0)

1m52.153796107s ago: executing program 5 (id=590):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000e00)=0xffff0001, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x43)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r2, 0x10d, 0x800000000d, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto(r3, &(0x7f0000000040)='C', 0x1, 0x95, 0x0, 0x0)
close(r2)

1m51.686477433s ago: executing program 5 (id=593):
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

1m36.272542521s ago: executing program 33 (id=593):
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

16.390737304s ago: executing program 7 (id=1174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x102)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8)
r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x652, 0x5, 0x2, 0x0, 0x81})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

15.402539974s ago: executing program 7 (id=1178):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)

15.327309639s ago: executing program 4 (id=1180):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000000ed, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xaebc, 0x20, 0x2, 0x180})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2202, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/net\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000080)
unshare(0x62040200)
socket$inet(0xa, 0x801, 0x84)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0)

14.66254961s ago: executing program 7 (id=1182):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000000)={0x11, 0x8, r1, 0x1, 0x9, 0x6, @link_local}, 0x14)

14.565910303s ago: executing program 1 (id=1183):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)

14.248735473s ago: executing program 6 (id=1184):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200", @ANYRES32], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

14.222800473s ago: executing program 3 (id=1185):
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x3}, 0x4})

13.862756897s ago: executing program 7 (id=1186):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c0003"], 0xf)

13.333098739s ago: executing program 3 (id=1187):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034003000000", 0x1c}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000330001002abd7000ffdbdb25010000000840e178db6f69418bf300040024000500"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2c00, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000000c0)={0xfffffffe, 0x50323234, 0x3, @discrete={0x4, 0x9}})
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x14)
r7 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r6, r7, 0x14, 0x0, @val=@tcx={@void, @value}}, 0x1c)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000007010200000000000000b2020000030900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44acc14474f16fbe)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000020000000000000000000000000000782c2958f0b1c8b05658768ce9d0dd695757d8b6bc4b94248ebb6df26ff6ca8718579e810f4ed2ad7a45f9c12faa78b24594f8"])
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

13.248399422s ago: executing program 1 (id=1188):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

12.614268645s ago: executing program 6 (id=1189):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffff9c, 0x0, 0x8e40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

12.394657043s ago: executing program 4 (id=1191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x102)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8)
r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x652, 0x5, 0x2, 0x0, 0x81})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

12.144358331s ago: executing program 6 (id=1192):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

5.514707455s ago: executing program 1 (id=1194):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x4, 0x5, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xf, 0x4)

5.275053346s ago: executing program 7 (id=1195):
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0xfffffffffffffe43, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0)

5.174789799s ago: executing program 4 (id=1196):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

3.851995292s ago: executing program 7 (id=1198):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204001, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x10001, 0x84201)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

3.829118932s ago: executing program 6 (id=1199):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
iopl(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000)
r3 = dup(r2)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

3.586608808s ago: executing program 1 (id=1201):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200", @ANYRES32], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

3.426695164s ago: executing program 0 (id=1202):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

3.419140862s ago: executing program 4 (id=1203):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x1, 0x9, {0x9, 0x21, 0x8}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x3c32000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = socket(0x25, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x8, 0x527, 0x50, @mcast2, @loopback, 0x40, 0x10, 0x1, 0x26}})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
socket(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

3.121766805s ago: executing program 0 (id=1204):
syz_emit_vhci(0x0, 0x0)
r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x501500, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400))
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000240)={"733adaed8fbe7fd63016267c26eda805", 0x0, 0x0, {0x6, 0x7}, {0xa87c, 0x7}, 0xf6f, [0x2, 0x0, 0x7, 0x7, 0x8, 0x100000000, 0xd, 0xff, 0x81, 0x32, 0x4, 0x2, 0xed01, 0x138f, 0x1, 0x100]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
sendfile(r1, r4, &(0x7f0000000100)=0x8dff, 0x100000000010001)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47be, 0x2, 0xd, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.041683952s ago: executing program 1 (id=1205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)

2.748540758s ago: executing program 0 (id=1206):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

2.634819369s ago: executing program 1 (id=1207):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
iopl(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000)
r3 = dup(r2)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000140)={0x9, 0x0, 0x8713, 0x40, 0xb1fc, 0xbf})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r5=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.431223914s ago: executing program 3 (id=1208):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0)

2.141742168s ago: executing program 3 (id=1209):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1000000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2, 0x19}, 0x10)

1.858584317s ago: executing program 3 (id=1210):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0x0, 0x9, 0x5)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[])
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020}, 0x2020)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.749717665s ago: executing program 0 (id=1211):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

1.038331931s ago: executing program 6 (id=1212):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="05000000", 0x4)
write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)

874.553394ms ago: executing program 3 (id=1213):
mknod$loop(0x0, 0x200, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x31303453, 0x8, 0x4, [{0x6}, {0x10}, {0x403, 0x4000}, {0x2, 0xa}, {}, {}, {0xb}, {0x4, 0x4}], 0x0, 0x0, 0x1, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000005740)={0x2020}, 0x2020)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast1}}}, 0x90)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020)
setsockopt$inet6_mreq(r2, 0x29, 0x7, 0x0, 0x0)
mremap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x3000, 0x8, &(0x7f0000ff8000/0x3000)=nil)

860.955228ms ago: executing program 4 (id=1214):
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad1", 0x32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

803.448536ms ago: executing program 0 (id=1215):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
recvmmsg(r0, 0x0, 0x0, 0x102, 0x0)

781.256127ms ago: executing program 6 (id=1216):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x30000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

880.531µs ago: executing program 0 (id=1217):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002000000265e00", @ANYRES32], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

0s ago: executing program 4 (id=1218):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104)
r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
ioctl$NBD_DO_IT(r2, 0xab03)

kernel console output (not intermixed with test programs):

1 UID: 0 PID: 6519 Comm: syz.3.140 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[  129.285446][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  129.285461][ T6519] Call Trace:
[  129.285470][ T6519]  <TASK>
[  129.285480][ T6519]  dump_stack_lvl+0x241/0x360
[  129.285514][ T6519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.285540][ T6519]  ? __pfx__printk+0x10/0x10
[  129.285583][ T6519]  ? __pfx_lock_release+0x10/0x10
[  129.285617][ T6519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.285665][ T6519]  should_fail_ex+0x40a/0x550
[  129.285696][ T6519]  _copy_from_user+0x2d/0xb0
[  129.285722][ T6519]  sctp_getsockopt_connectx3+0x2c9/0x730
[  129.285747][ T6519]  ? __local_bh_enable_ip+0x168/0x200
[  129.285777][ T6519]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  129.285801][ T6519]  ? __local_bh_enable_ip+0x168/0x200
[  129.285827][ T6519]  ? sctp_getsockopt+0x13a/0xbb0
[  129.285857][ T6519]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  129.285882][ T6519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.285932][ T6519]  sctp_getsockopt+0x8de/0xbb0
[  129.285960][ T6519]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  129.285996][ T6519]  do_sock_getsockopt+0x3c6/0x7e0
[  129.286040][ T6519]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  129.286076][ T6519]  ? __fget_files+0x2a/0x410
[  129.286104][ T6519]  ? __fget_files+0x395/0x410
[  129.286128][ T6519]  ? __fget_files+0x2a/0x410
[  129.286162][ T6519]  __x64_sys_getsockopt+0x2a1/0x370
[  129.286208][ T6519]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  129.286249][ T6519]  ? do_syscall_64+0x100/0x230
[  129.286286][ T6519]  ? do_syscall_64+0xb6/0x230
[  129.286321][ T6519]  do_syscall_64+0xf3/0x230
[  129.286359][ T6519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.286392][ T6519] RIP: 0033:0x7f043e58cda9
[  129.286418][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.286438][ T6519] RSP: 002b:00007f043f305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  129.286464][ T6519] RAX: ffffffffffffffda RBX: 00007f043e7a5fa0 RCX: 00007f043e58cda9
[  129.286482][ T6519] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005
[  129.286498][ T6519] RBP: 00007f043f305090 R08: 0000000020000180 R09: 0000000000000000
[  129.286514][ T6519] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  129.286530][ T6519] R13: 0000000000000000 R14: 00007f043e7a5fa0 R15: 00007ffdc1e37a98
[  129.286564][ T6519]  </TASK>
[  129.321145][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.5.139 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[  129.321181][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  129.321195][ T6517] Call Trace:
[  129.321203][ T6517]  <TASK>
[  129.321213][ T6517]  dump_stack_lvl+0x241/0x360
[  129.321244][ T6517]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.321269][ T6517]  ? __pfx__printk+0x10/0x10
[  129.321313][ T6517]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  129.321341][ T6517]  ? __pfx___might_resched+0x10/0x10
[  129.321375][ T6517]  should_fail_ex+0x40a/0x550
[  129.321406][ T6517]  should_failslab+0xac/0x100
[  129.321446][ T6517]  kmem_cache_alloc_node_noprof+0x77/0x380
[  129.321471][ T6517]  ? __alloc_skb+0x1c3/0x440
[  129.321510][ T6517]  __alloc_skb+0x1c3/0x440
[  129.321548][ T6517]  ? __pfx___alloc_skb+0x10/0x10
[  129.321584][ T6517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.321621][ T6517]  ? netlink_autobind+0x2b0/0x2f0
[  129.321649][ T6517]  netlink_sendmsg+0x638/0xcb0
[  129.321698][ T6517]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.321739][ T6517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.321774][ T6517]  ? aa_sock_msg_perm+0x91/0x160
[  129.321807][ T6517]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.321847][ T6517]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.321882][ T6517]  __sock_sendmsg+0x223/0x270
[  129.321913][ T6517]  ____sys_sendmsg+0x52a/0x7e0
[  129.321959][ T6517]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.321993][ T6517]  ? __fget_files+0x2a/0x410
[  129.322022][ T6517]  ? __fget_files+0x2a/0x410
[  129.322056][ T6517]  __sys_sendmsg+0x269/0x350
[  129.322097][ T6517]  ? __pfx___sys_sendmsg+0x10/0x10
[  129.322147][ T6517]  ? do_sys_openat2+0x17a/0x1d0
[  129.322206][ T6517]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  129.322243][ T6517]  ? do_syscall_64+0x100/0x230
[  129.322279][ T6517]  ? do_syscall_64+0xb6/0x230
[  129.322313][ T6517]  do_syscall_64+0xf3/0x230
[  129.322348][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.322380][ T6517] RIP: 0033:0x7ff969b8cda9
[  129.322399][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.322418][ T6517] RSP: 002b:00007ff96aa38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.322441][ T6517] RAX: ffffffffffffffda RBX: 00007ff969da5fa0 RCX: 00007ff969b8cda9
[  129.322459][ T6517] RDX: 0000000004000000 RSI: 0000000020000780 RDI: 0000000000000007
[  129.322474][ T6517] RBP: 00007ff96aa38090 R08: 0000000000000000 R09: 0000000000000000
[  129.322489][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.322503][ T6517] R13: 0000000000000000 R14: 00007ff969da5fa0 R15: 00007ffcbbec2748
[  129.322535][ T6517]  </TASK>
[  130.312062][ T6528] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  130.474593][ T6528] cramfs: wrong magic
[  130.941061][  T971] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  130.971769][ T6533] xt_hashlimit: max too large, truncated to 1048576
[  131.002940][ T6533] xt_hashlimit: overflow, rate too high: 0
[  131.184887][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.204075][ T6538] netlink: 4796 bytes leftover after parsing attributes in process `syz.5.145'.
[  131.216749][ T6538] netlink: 4796 bytes leftover after parsing attributes in process `syz.5.145'.
[  131.691649][ T6540] netlink: 4796 bytes leftover after parsing attributes in process `syz.3.146'.
[  131.701106][ T6540] netlink: 4796 bytes leftover after parsing attributes in process `syz.3.146'.
[  131.812206][  T971] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  131.888966][ T6542] warning: `syz.2.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  131.900535][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.932235][  T971] usb 2-1: config 0 descriptor??
[  131.950841][ T6542] Bluetooth: MGMT ver 1.23
[  132.428064][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  132.434563][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  132.491519][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  132.502354][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.524699][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.681290][ T5906] usb 1-1: Using ep0 maxpacket: 32
[  132.728370][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  132.761663][ T6554] loop3: detected capacity change from 0 to 2048
[  132.784268][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  132.784289][   T29] audit: type=1326 audit(1738378298.468:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  132.818676][ T5906] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  132.831344][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.854588][ T6554]  loop3: p1 < > p4
[  132.861939][ T6554] loop3: p4 size 8388608 extends beyond EOD, truncated
[  132.890207][ T5906] usb 1-1: Product: syz
[  132.917443][ T5906] usb 1-1: Manufacturer: syz
[  132.949489][ T5906] usb 1-1: SerialNumber: syz
[  132.951439][   T29] audit: type=1326 audit(1738378298.478:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.007763][ T5906] usb 1-1: config 0 descriptor??
[  133.091957][ T6544] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  133.217126][   T29] audit: type=1326 audit(1738378298.478:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f043e58b710 code=0x7ffc0000
[  133.252112][ T5906] hub 1-1:0.0: bad descriptor, ignoring hub
[  133.265096][ T5906] hub 1-1:0.0: probe with driver hub failed with error -5
[  133.301049][   T29] audit: type=1326 audit(1738378298.478:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.337216][ T5906] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  133.375740][   T29] audit: type=1326 audit(1738378298.478:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.398783][   T29] audit: type=1326 audit(1738378298.478:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.422322][   T29] audit: type=1326 audit(1738378298.488:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.446366][   T29] audit: type=1326 audit(1738378298.488:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  133.489878][   T29] audit: type=1326 audit(1738378298.488:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  134.075193][ T6544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  134.081956][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  134.131070][   T29] audit: type=1326 audit(1738378298.488:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f043e58cde3 code=0x7ffc0000
[  134.168637][  T971] usbhid 2-1:0.0: can't add hid device: -71
[  134.201748][  T971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  134.237474][ T6544] vhci_hcd vhci_hcd.0: Device attached
[  134.277083][  T971] usb 2-1: USB disconnect, device number 6
[  134.401407][    T9] usb 1-1: USB disconnect, device number 5
[  134.407312][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  134.416464][ T6564] vhci_hcd: connection closed
[  134.423146][   T36] vhci_hcd: stop threads
[  134.474923][   T36] vhci_hcd: release socket
[  134.502806][ T5902] usb 34-1: SetAddress Request (2) to port 0
[  134.509000][ T5902] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  134.509404][   T36] vhci_hcd: disconnect device
[  134.603671][ T5902] usb 34-1: enqueue for inactive port 0
[  134.723624][ T6573] loop2: detected capacity change from 0 to 2048
[  134.834013][ T6573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.882505][ T6573] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.950155][ T6547] loop5: detected capacity change from 0 to 32768
[  134.986560][ T6547] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.150 (6547)
[  135.032095][ T5902] usb usb34-port1: attempt power cycle
[  135.166977][ T6547] BTRFS info (device loop5): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  135.233191][ T6547] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  135.313415][ T6547] BTRFS info (device loop5): using free-space-tree
[  135.321497][ T6573] loop2: detected capacity change from 2048 to 64
[  135.351438][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  135.371418][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  135.432579][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  135.492812][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  135.549809][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  135.619265][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  135.661490][ T5902] usb usb34-port1: unable to enumerate USB device
[  135.688401][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  135.688761][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  135.719434][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  135.730462][   T36] kworker/u8:3: attempt to access beyond end of device
[  135.730462][   T36] loop2: rw=1, sector=768, nr_sectors = 8 limit=64
[  135.841051][ T5940] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  135.861343][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  135.861653][ T6547] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  135.890146][   T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 13 starting block 96)
[  135.971510][   T36] Buffer I/O error on device loop2, logical block 96
[  136.005789][ T6547] BTRFS error (device loop5): open_ctree failed: -12
[  136.031156][ T5940] usb 1-1: Using ep0 maxpacket: 8
[  136.043312][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.064224][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.228262][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.251122][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  136.441040][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.451018][ T5940] usb 1-1: Product: syz
[  136.455204][ T5940] usb 1-1: Manufacturer: syz
[  136.459812][ T5940] usb 1-1: SerialNumber: syz
[  136.514254][ T6575] kmmpd-loop2: attempt to access beyond end of device
[  136.514254][ T6575] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64
[  136.581420][ T6575] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  136.671286][    T9] usb 5-1: Using ep0 maxpacket: 8
[  136.690297][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.734908][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.736700][ T5940] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  136.755080][    T9] usb 5-1: Product: syz
[  136.759273][    T9] usb 5-1: Manufacturer: syz
[  136.781003][    T9] usb 5-1: SerialNumber: syz
[  137.275909][    T9] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  137.465796][ T6619] netlink: 4796 bytes leftover after parsing attributes in process `syz.1.160'.
[  137.478465][ T6619] netlink: 4796 bytes leftover after parsing attributes in process `syz.1.160'.
[  137.996220][ T5967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.124754][ T5967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.338196][ T5967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.353226][ T5940] usb 1-1: USB disconnect, device number 6
[  138.652521][ T5967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.005508][ T5967] bridge_slave_1: left allmulticast mode
[  139.103260][ T5967] bridge_slave_1: left promiscuous mode
[  139.164355][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.207112][ T6628] usblp0: removed
[  139.228360][   T48] usb 5-1: USB disconnect, device number 4
[  139.244534][   T48] usblp1: removed
[  139.319889][ T5967] bridge_slave_0: left allmulticast mode
[  139.335621][ T6653] loop0: detected capacity change from 0 to 256
[  139.365830][ T5967] bridge_slave_0: left promiscuous mode
[  139.404356][ T6653] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  139.413353][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.490426][ T6653] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  139.622654][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.649619][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.660658][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.681515][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.684471][ T6653] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  139.700328][ T5141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  139.716349][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.771056][  T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.132967][  T971] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  140.177887][ T6677] loop3: detected capacity change from 0 to 256
[  140.185044][  T971] usb 5-1: config 0 has no interface number 0
[  140.201141][  T971] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  140.208754][ T6677] exfat: Deprecated parameter 'namecase'
[  140.247414][  T971] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  140.254227][ T6677] exfat: Bad value for 'uid'
[  140.269225][ T6677] exfat: Bad value for 'uid'
[  140.329805][  T971] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  140.390395][  T971] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  140.440129][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.474433][  T971] usb 5-1: config 0 descriptor??
[  140.493534][ T6662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  140.621262][   T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  140.832370][   T48] usb 4-1: Using ep0 maxpacket: 16
[  140.921746][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  140.921764][   T29] audit: type=1326 audit(1738378306.638:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066338cda9 code=0x7ffc0000
[  140.997940][   T48] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  141.025235][   T29] audit: type=1326 audit(1738378306.638:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f066338b710 code=0x7ffc0000
[  141.029977][   T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.058547][ T6690] loop0: detected capacity change from 0 to 2048
[  141.114130][ T6690]  loop0: p1 < > p4
[  141.131958][ T6690] loop0: p4 size 8388608 extends beyond EOD, truncated
[  141.183670][   T48] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  141.212551][   T29] audit: type=1326 audit(1738378306.638:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066338cda9 code=0x7ffc0000
[  141.223694][   T48] usb 4-1: config 1 has no interface number 1
[  141.694909][   T48] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.718680][   T48] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.731635][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.740070][   T48] usb 4-1: Product: syz
[  141.744358][   T48] usb 4-1: Manufacturer: syz
[  141.750567][   T48] usb 4-1: SerialNumber: syz
[  141.791108][ T5141] Bluetooth: hci2: command tx timeout
[  141.932769][   T29] audit: type=1326 audit(1738378306.638:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f066338cda9 code=0x7ffc0000
[  142.508541][ T6697] loop5: detected capacity change from 0 to 64
[  143.466698][   T48] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc
[  143.589861][   T48] usb 4-1: USB disconnect, device number 4
[  143.624808][   T29] audit: type=1800 audit(1738378309.398:106): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.176" name="file1" dev="tmpfs" ino=177 res=0 errno=0
[  143.744022][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.770784][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.794283][ T5967] bond0 (unregistering): Released all slaves
[  143.834470][ T6655] netlink: 260 bytes leftover after parsing attributes in process `syz.4.171'.
[  143.863291][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.884011][ T5141] Bluetooth: hci2: command tx timeout
[  143.912508][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.5.176'.
[  144.024962][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.5.176'.
[  144.103602][  T971] usb 5-1: string descriptor 0 read error: -71
[  144.120411][ T6704] FAULT_INJECTION: forcing a failure.
[  144.120411][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.153805][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.3.177 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[  144.153838][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  144.153852][ T6704] Call Trace:
[  144.153861][ T6704]  <TASK>
[  144.153870][ T6704]  dump_stack_lvl+0x241/0x360
[  144.153904][ T6704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.153929][ T6704]  ? __pfx__printk+0x10/0x10
[  144.153970][ T6704]  ? __pfx_lock_release+0x10/0x10
[  144.154007][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154051][ T6704]  should_fail_ex+0x40a/0x550
[  144.154082][ T6704]  _copy_to_iter+0x440/0x1c50
[  144.154134][ T6704]  ? __pfx__copy_to_iter+0x10/0x10
[  144.154181][ T6704]  ? __virt_addr_valid+0x183/0x530
[  144.154219][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154256][ T6704]  ? __virt_addr_valid+0x45f/0x530
[  144.154291][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154329][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154366][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154403][ T6704]  ? __check_object_size+0x47a/0x730
[  144.154447][ T6704]  __skb_datagram_iter+0x107/0x900
[  144.154475][ T6704]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  144.154501][ T6704]  ? __pfx___might_resched+0x10/0x10
[  144.154535][ T6704]  skb_copy_datagram_iter+0xd1/0x250
[  144.154564][ T6704]  netlink_recvmsg+0x2d1/0x11a0
[  144.154612][ T6704]  ? __pfx_netlink_recvmsg+0x10/0x10
[  144.154654][ T6704]  ? __pfx_aa_sk_perm+0x10/0x10
[  144.154687][ T6704]  ? iovec_from_user+0x1b4/0x240
[  144.154709][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154745][ T6704]  ? aa_sock_msg_perm+0x91/0x160
[  144.154778][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154814][ T6704]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.154851][ T6704]  ? __pfx_netlink_recvmsg+0x10/0x10
[  144.154890][ T6704]  sock_recvmsg+0x231/0x280
[  144.154924][ T6704]  ____sys_recvmsg+0x1c6/0x480
[  144.154971][ T6704]  ? __pfx_____sys_recvmsg+0x10/0x10
[  144.155031][ T6704]  __sys_recvmsg+0x291/0x390
[  144.155059][ T6704]  ? __pfx___sys_recvmsg+0x10/0x10
[  144.155095][ T6704]  ? __fget_files+0x2a/0x410
[  144.155136][ T6704]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  144.155175][ T6704]  ? do_syscall_64+0x100/0x230
[  144.155212][ T6704]  ? do_syscall_64+0xb6/0x230
[  144.155246][ T6704]  do_syscall_64+0xf3/0x230
[  144.155283][ T6704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.155315][ T6704] RIP: 0033:0x7f043e58cda9
[  144.155336][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.155355][ T6704] RSP: 002b:00007f043c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  144.155381][ T6704] RAX: ffffffffffffffda RBX: 00007f043e7a6080 RCX: 00007f043e58cda9
[  144.155399][ T6704] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[  144.155414][ T6704] RBP: 00007f043c3f6090 R08: 0000000000000000 R09: 0000000000000000
[  144.155429][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.155444][ T6704] R13: 0000000000000001 R14: 00007f043e7a6080 R15: 00007ffdc1e37a98
[  144.155475][ T6704]  </TASK>
[  144.180389][  T971] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected
[  144.890441][ T6706] loop4: detected capacity change from 0 to 2048
[  145.111166][  T971] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1
[  145.128969][  T971] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84
[  145.138483][  T971] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2
[  145.287706][  T971] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  145.329214][  T971] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88
[  145.378828][  T971] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6
[  145.431431][  T971] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  145.474094][  T971] usb 5-1: USB disconnect, device number 5
[  145.515512][  T971] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  145.557211][  T971] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  145.611752][ T6721] loop4: detected capacity change from 0 to 256
[  145.619004][  T971] keyspan 5-1:0.168: device disconnected
[  145.951466][ T5141] Bluetooth: hci2: command tx timeout
[  146.532612][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  146.703285][    T9] usb 1-1: Using ep0 maxpacket: 8
[  146.713013][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  146.713050][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.713075][    T9] usb 1-1: Product: syz
[  146.713094][    T9] usb 1-1: Manufacturer: syz
[  146.713113][    T9] usb 1-1: SerialNumber: syz
[  146.947566][ T5967] hsr_slave_0: left promiscuous mode
[  147.048675][    T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  147.083834][ T5967] hsr_slave_1: left promiscuous mode
[  147.110866][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.343537][ T6741] loop5: detected capacity change from 0 to 32768
[  147.352646][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.481626][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.622325][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.723520][ T6741] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  147.740123][ T6741] bcachefs (loop5): initializing new filesystem
[  147.777951][ T6741] bcachefs (loop5): going read-write
[  147.857505][ T6741] bcachefs (loop5): marking superblocks
[  147.869448][ T6741] bcachefs (loop5): initializing freespace
[  147.876565][ T6741] bcachefs (loop5): done initializing freespace
[  147.884404][ T6741] bcachefs (loop5): reading snapshots table
[  147.890339][ T6741] bcachefs (loop5): reading snapshots done
[  148.031335][ T5141] Bluetooth: hci2: command tx timeout
[  148.157202][ T6741] bcachefs (loop5): done starting filesystem
[  148.309626][ T5967] veth1_macvtap: left promiscuous mode
[  148.321453][ T5852] bcachefs (loop5): shutting down
[  148.326944][ T5852] bcachefs (loop5): going read-only
[  148.332353][ T5852] bcachefs (loop5): finished waiting for writes to stop
[  148.339611][ T5967] veth0_macvtap: left promiscuous mode
[  148.345397][ T5967] veth1_vlan: left promiscuous mode
[  148.353155][ T5967] veth0_vlan: left promiscuous mode
[  148.379957][ T5852] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  148.511812][ T5852] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  148.521090][ T6000] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  148.544887][ T5852] bcachefs (loop5): clean shutdown complete, journal seq 4
[  148.557792][ T6762] loop3: detected capacity change from 0 to 2048
[  148.580328][ T5852] bcachefs (loop5): marking filesystem clean
[  148.649381][ T5852] bcachefs (loop5): shutdown complete
[  148.690588][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.711388][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.720249][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.751049][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.777049][ T6000] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.818970][ T6000] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  148.834136][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.877046][ T6000] usb 2-1: config 0 descriptor??
[  148.921330][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  149.222084][  T971] usb 1-1: USB disconnect, device number 7
[  149.248244][  T971] usblp0: removed
[  149.332557][ T6000] logitech-djreceiver 0003:046D:C53F.0005: item fetching failed at offset 0/5
[  149.363429][ T6000] logitech-djreceiver 0003:046D:C53F.0005: logi_dj_probe: parse failed
[  149.388354][ T6000] logitech-djreceiver 0003:046D:C53F.0005: probe with driver logitech-djreceiver failed with error -22
[  149.476486][ T6785] loop0: detected capacity change from 0 to 512
[  149.514085][ T6785] EXT4-fs: Ignoring removed nomblk_io_submit option
[  149.530735][  T971] usb 2-1: USB disconnect, device number 7
[  149.534525][ T6785] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  149.544788][ T6785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=3842c01c, mo2=0002]
[  149.556577][ T6785] System zones: 1-12
[  149.567322][ T6785] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  149.580647][ T6785] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  149.592010][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  149.885933][ T5967] team0 (unregistering): Port device team_slave_1 removed
[  149.953199][ T6797] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 3: comm syz.0.200: lblock 0 mapped to illegal pblock 3 (length 1)
[  149.978560][ T6797] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.200: error -117 reading directory block
[  150.006123][ T5967] team0 (unregistering): Port device team_slave_0 removed
[  150.197062][ T6803] loop1: detected capacity change from 0 to 64
[  150.448924][ T6803] overlay: ./file1 is not a directory
[  151.361495][ T6815] loop5: detected capacity change from 0 to 2048
[  151.466520][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'.
[  152.384859][ T6827] loop3: detected capacity change from 0 to 64
[  152.421305][ T6827] hfs: request for non-existent node 16777216 in B*Tree
[  152.428560][ T6827] hfs: request for non-existent node 16777216 in B*Tree
[  152.472262][ T6829] loop5: detected capacity change from 0 to 1764
[  152.555843][ T6794] netlink: 'syz.4.203': attribute type 14 has an invalid length.
[  152.686855][ T6665] chnl_net:caif_netlink_parms(): no params data found
[  152.827053][ T6839] capability: warning: `syz.5.213' uses 32-bit capabilities (legacy support in use)
[  152.830485][ T6834] netlink: 'syz.1.212': attribute type 4 has an invalid length.
[  152.852788][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.889183][ T6841] netlink: 'syz.1.212': attribute type 4 has an invalid length.
[  153.172353][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.181958][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.189203][ T6665] bridge_slave_0: entered allmulticast mode
[  153.208403][ T6665] bridge_slave_0: entered promiscuous mode
[  153.219379][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.229581][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.238445][ T6665] bridge_slave_1: entered allmulticast mode
[  153.245635][ T6665] bridge_slave_1: entered promiscuous mode
[  153.252443][ T6854] fuse: Bad value for 'fd'
[  153.311098][  T968] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  153.494056][  T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.515433][  T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.531722][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.536187][  T968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  153.618643][  T968] usb 5-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  153.684154][  T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.812600][  T968] usb 5-1: config 0 descriptor??
[  154.105346][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.556311][  T968] logitech-djreceiver 0003:046D:C53F.0006: item fetching failed at offset 0/5
[  154.568750][  T968] logitech-djreceiver 0003:046D:C53F.0006: logi_dj_probe: parse failed
[  154.580107][  T968] logitech-djreceiver 0003:046D:C53F.0006: probe with driver logitech-djreceiver failed with error -22
[  155.632345][  T968] usb 5-1: USB disconnect, device number 7
[  155.736583][ T6665] team0: Port device team_slave_0 added
[  155.782651][ T6665] team0: Port device team_slave_1 added
[  155.999921][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.041040][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.094777][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.107794][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.114891][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.141352][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.181744][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'.
[  156.276217][ T6883] bridge_slave_0: left allmulticast mode
[  156.313980][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'.
[  156.366468][ T6883] bridge_slave_0: left promiscuous mode
[  156.406406][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.597365][ T6883] bridge_slave_1: left allmulticast mode
[  156.630742][ T6883] bridge_slave_1: left promiscuous mode
[  156.647078][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.711687][ T6883] bond0: (slave bond_slave_0): Releasing backup interface
[  156.750559][ T6883] bond0: (slave bond_slave_1): Releasing backup interface
[  156.817613][ T6883] team0: Port device team_slave_0 removed
[  156.865196][ T6883] team0: Port device team_slave_1 removed
[  156.879500][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.897928][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.913715][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.929309][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.996936][ T6891] vlan0: entered promiscuous mode
[  157.750173][ T6665] hsr_slave_0: entered promiscuous mode
[  157.780157][ T6665] hsr_slave_1: entered promiscuous mode
[  157.801766][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.840676][ T6665] Cannot create hsr debugfs directory
[  157.856360][ T6925] netlink: 'syz.3.233': attribute type 10 has an invalid length.
[  157.923146][ T5839] Bluetooth: hci3: link tx timeout
[  157.929726][ T5839] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  158.578898][ T6665] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  158.715290][ T6948] bridge_slave_0: left allmulticast mode
[  158.743205][ T6948] bridge_slave_0: left promiscuous mode
[  158.776454][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.913327][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[  158.922757][ T6948] bridge_slave_1: left allmulticast mode
[  158.959277][ T6948] bridge_slave_1: left promiscuous mode
[  158.989880][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.037820][ T6948] bond0: (slave bond_slave_0): Releasing backup interface
[  159.249799][ T6948] bond0: (slave bond_slave_1): Releasing backup interface
[  159.322706][ T6948] team0: Port device team_slave_0 removed
[  160.102184][ T6948] team0: Port device team_slave_1 removed
[  160.134461][ T5141] Bluetooth: hci3: command 0x0406 tx timeout
[  160.144168][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.185565][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.251609][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.289669][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.597086][ T6665] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  160.627620][ T6665] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  160.703929][ T6951] team0: Mode changed to "loadbalance"
[  160.772096][ T6954] vlan0: entered promiscuous mode
[  161.574571][ T6665] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  161.968041][ T7005] 9pnet_virtio: no channels available for device syz
[  162.016691][ T7009] 9pnet_virtio: no channels available for device syz
[  162.016971][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.267048][ T6665] 8021q: adding VLAN 0 to HW filter on device team0
[  163.104756][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.111934][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.162254][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.169416][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.288673][   T29] audit: type=1326 audit(1738378329.058:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  163.533595][   T29] audit: type=1326 audit(1738378329.058:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.111476][ T5839] Bluetooth: hci2: command tx timeout
[  164.554917][   T29] audit: type=1326 audit(1738378329.058:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.807589][   T29] audit: type=1326 audit(1738378329.058:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.839515][ T6665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.850328][   T29] audit: type=1326 audit(1738378329.058:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.850376][   T29] audit: type=1326 audit(1738378329.058:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.850419][   T29] audit: type=1326 audit(1738378329.058:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.850473][   T29] audit: type=1326 audit(1738378329.058:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.850516][   T29] audit: type=1326 audit(1738378329.058:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  164.850559][   T29] audit: type=1326 audit(1738378329.058:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f521858cda9 code=0x7ffc0000
[  165.998014][ T7042] veth0_to_team: entered promiscuous mode
[  166.051146][ T7042] veth0_to_team: entered allmulticast mode
[  167.285625][ T7049] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.462201][ T7059] 9pnet_virtio: no channels available for device syz
[  167.557938][ T7059] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  167.729741][ T7049] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.743781][ T7065] hpfs: Bad magic ... probably not HPFS
[  168.872724][ T7049] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.903864][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.078425][ T7071] 9pnet_virtio: no channels available for device syz
[  169.098380][ T7076] netlink: 'syz.1.272': attribute type 2 has an invalid length.
[  169.115040][ T7076] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[  169.169499][ T7076] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[  169.170726][ T7077] loop7: detected capacity change from 0 to 16384
[  169.384121][ T7049] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.414994][ T7076] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[  170.281169][ T7082] netlink: 'syz.0.274': attribute type 12 has an invalid length.
[  170.311510][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.274'.
[  170.346637][ T7077] loop7: detected capacity change from 16384 to 16383
[  170.609340][ T7049] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.744990][ T7049] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.787935][ T7049] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.880162][ T7049] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.001221][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  171.132248][ T6665] veth0_vlan: entered promiscuous mode
[  171.186115][ T6665] veth1_vlan: entered promiscuous mode
[  171.206576][ T5902] usb 4-1: Using ep0 maxpacket: 8
[  171.280102][ T5902] usb 4-1: config 0 has no interfaces?
[  171.313731][ T5902] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  171.328808][ T6665] veth0_macvtap: entered promiscuous mode
[  171.378679][ T6665] veth1_macvtap: entered promiscuous mode
[  171.391711][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.461008][ T5902] usb 4-1: Product: syz
[  171.465232][ T5902] usb 4-1: Manufacturer: syz
[  171.509370][ T5902] usb 4-1: SerialNumber: syz
[  171.531484][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.559527][ T5902] usb 4-1: config 0 descriptor??
[  171.601261][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.648686][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.710376][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.751854][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.791164][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.832852][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.865305][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.891215][ T7121] ceph: No mds server is up or the cluster is laggy
[  172.004573][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.226753][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.306771][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.331323][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.352803][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.394820][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.497720][ T6665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.543683][ T6665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.588391][ T6665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.641445][ T6665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.904399][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.965213][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.039815][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.101113][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.705240][ T7163] FAULT_INJECTION: forcing a failure.
[  173.705240][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.784244][ T5940] usb 4-1: USB disconnect, device number 5
[  173.881648][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.6.163 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[  173.881685][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  173.881701][ T7163] Call Trace:
[  173.881710][ T7163]  <TASK>
[  173.881721][ T7163]  dump_stack_lvl+0x241/0x360
[  173.881756][ T7163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.881783][ T7163]  ? __pfx__printk+0x10/0x10
[  173.881830][ T7163]  ? snprintf+0xda/0x120
[  173.881859][ T7163]  should_fail_ex+0x40a/0x550
[  173.881892][ T7163]  _copy_to_user+0x31/0xb0
[  173.881920][ T7163]  simple_read_from_buffer+0xca/0x150
[  173.881969][ T7163]  proc_fail_nth_read+0x1e9/0x250
[  173.882013][ T7163]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.882056][ T7163]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.882094][ T7163]  ? rw_verify_area+0x243/0x630
[  173.882127][ T7163]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.882168][ T7163]  vfs_read+0x1fa/0xb40
[  173.882228][ T7163]  ? fdget_pos+0x254/0x320
[  173.882256][ T7163]  ? __pfx___mutex_lock+0x10/0x10
[  173.882290][ T7163]  ? __pfx_vfs_read+0x10/0x10
[  173.882327][ T7163]  ? __fget_files+0x2a/0x410
[  173.882355][ T7163]  ? __fget_files+0x395/0x410
[  173.882379][ T7163]  ? __fget_files+0x2a/0x410
[  173.882410][ T7163]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.882453][ T7163]  ksys_read+0x18f/0x2b0
[  173.882489][ T7163]  ? __pfx_ksys_read+0x10/0x10
[  173.882522][ T7163]  ? do_syscall_64+0x100/0x230
[  173.882559][ T7163]  ? do_syscall_64+0xb6/0x230
[  173.882595][ T7163]  do_syscall_64+0xf3/0x230
[  173.882632][ T7163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.882666][ T7163] RIP: 0033:0x7f8b9918b7bc
[  173.882688][ T7163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  173.882708][ T7163] RSP: 002b:00007f8b99f21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.882735][ T7163] RAX: ffffffffffffffda RBX: 00007f8b993a5fa0 RCX: 00007f8b9918b7bc
[  173.882754][ T7163] RDX: 000000000000000f RSI: 00007f8b99f210a0 RDI: 0000000000000015
[  173.882770][ T7163] RBP: 00007f8b99f21090 R08: 0000000000000000 R09: 0000000000000000
[  173.882786][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.882801][ T7163] R13: 0000000000000000 R14: 00007f8b993a5fa0 R15: 00007ffe26d9a298
[  173.882837][ T7163]  </TASK>
[  175.672406][ T7194] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  176.341300][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  177.201454][   T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  177.311561][ T5902] usb 4-1: Using ep0 maxpacket: 8
[  177.323773][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  177.327362][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.6.307'.
[  177.351492][ T5902] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  177.380895][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.422843][ T5902] usb 4-1: config 0 descriptor??
[  177.481293][ T7223] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  177.546526][   T48] usb 6-1: Using ep0 maxpacket: 32
[  177.611072][   T48] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  177.619301][   T48] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  177.625395][ T7230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  177.661032][   T48] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  177.675737][ T5902] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  177.731125][   T48] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  177.841632][   T48] usb 6-1: config 0 interface 0 has no altsetting 0
[  177.876277][   T48] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  177.893523][ T5940] kernel read not supported for file /bus/input/devices (pid: 5940 comm: kworker/1:7)
[  177.929210][    T9] usb 4-1: USB disconnect, device number 6
[  177.933302][   T48] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  177.989575][   T48] usb 6-1: Product: syz
[  178.011137][   T48] usb 6-1: Manufacturer: syz
[  178.025352][   T48] usb 6-1: SerialNumber: syz
[  178.065972][   T48] usb 6-1: config 0 descriptor??
[  178.108939][   T48] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  178.151600][   T48] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  178.331424][ T7248] ptrace attach of "./syz-executor exec"[5844] was attempted by "úÿÿÿ   ÿ      \x09      €      \x09                o     €ûŠ  ò\x0b  á  \x0b   \x0aÿÿÿ   \x07      ÿÿ     l     g                   é  
  �      '       
   ÿ
  Œ\x0a  Ñ\x0b     H               ‚           
        É      ±ñŸ{   ¹   !Øz   €   @Í          \x07   ÿ        \x07   F\x0b        \x09   \x0a         I\x0b     \x0c   ÷ÿÿÿ\x09   \x07   ÿÿÿÿ                ÿ      ùÿÿÿÿÿÿÿ

  \x09      ÿÿÿÿùÿÿÿ       Â   þ         \x0a     @    \x0c            ÿ\x07        O   �\x09  \x07            ÿ  \x0c   \x07                        
   ÿ   â/     ¾j     tÄ  \x07           
 æ         
      
   
   ÿ                     û  
   ¨l    
      \x0b 
 mqprio   
 qfq \x0c    "[7248]
[  178.407105][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.518906][ T7251] ALSA: mixer_oss: invalid OSS volume ''
[  178.789549][ T7216] netlink: 'syz.5.306': attribute type 10 has an invalid length.
[  178.867901][ T7216] netlink: 55 bytes leftover after parsing attributes in process `syz.5.306'.
[  181.225100][  T968] usb 6-1: USB disconnect, device number 2
[  181.266452][  T968] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  182.134195][ T5902] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  182.333057][ T5902] usb 2-1: not running at top speed; connect to a high speed hub
[  182.363566][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  182.442897][ T5902] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  182.479189][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.507669][ T5902] usb 2-1: Product: Ф
[  182.512923][ T5902] usb 2-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  182.581369][ T5902] usb 2-1: SerialNumber: à ”
[  182.598412][ T7303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  182.636221][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  182.827259][    T9] usb 1-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  182.879013][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  182.925718][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.001136][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.025210][    T9] usb 1-1: config 0 descriptor??
[  183.030515][ T5902] usbhid 2-1:1.0: can't add hid device: -71
[  183.040193][ T5902] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  183.112583][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  183.148688][ T5902] usb 2-1: USB disconnect, device number 8
[  183.311129][ T5141] Bluetooth: hci2: command 0x0405 tx timeout
[  184.176489][ T5902] usb 1-1: USB disconnect, device number 8
[  184.781313][ T7372] netlink: 'syz.1.345': attribute type 4 has an invalid length.
[  184.804427][ T5902] libceph: connect (1)[c::]:6789 error -101
[  184.842711][ T5902] libceph: mon0 (1)[c::]:6789 connect error
[  184.879383][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'.
[  185.137633][ T5902] libceph: connect (1)[c::]:6789 error -101
[  185.183719][ T5902] libceph: mon0 (1)[c::]:6789 connect error
[  185.367468][ T7386] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1'
[  185.515055][ T7370] ceph: No mds server is up or the cluster is laggy
[  186.519828][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  186.519851][   T29] audit: type=1800 audit(1738378352.288:139): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.355" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  186.769731][ T7430] bridge_slave_0: left allmulticast mode
[  186.790192][ T7430] bridge_slave_0: left promiscuous mode
[  186.798489][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.883519][ T7430] bridge_slave_1: left allmulticast mode
[  186.911205][ T7430] bridge_slave_1: left promiscuous mode
[  186.951610][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.061996][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  187.100547][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.121809][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.128572][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.153138][ T7430] bond0: (slave bond_slave_0): Releasing backup interface
[  187.160975][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.180408][ T7430] bond0: (slave bond_slave_1): Releasing backup interface
[  187.181243][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.208174][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.219945][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.230182][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.239529][ T7430] team0: Port device team_slave_0 removed
[  187.243647][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  187.268534][ T7430] team0: Port device team_slave_1 removed
[  187.280324][ T7430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.288820][ T7430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.315584][ T7447] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  187.319478][ T7430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.349064][ T7447] overlayfs: missing 'lowerdir'
[  187.360430][ T7430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.385869][ T7432] vlan0: entered promiscuous mode
[  187.392906][ T5940] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  187.454601][ T7432] team0: Port device vlan0 added
[  187.568271][ T5940] usb 7-1: Using ep0 maxpacket: 8
[  187.593046][ T5940] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  187.629454][ T5940] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.646281][ T7454] netlink: 'syz.3.368': attribute type 2 has an invalid length.
[  187.654085][ T7454] netlink: 'syz.3.368': attribute type 1 has an invalid length.
[  187.662059][ T7454] netlink: 'syz.3.368': attribute type 1 has an invalid length.
[  187.674581][ T7454] loop7: detected capacity change from 0 to 16384
[  187.782167][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  187.822731][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  187.876792][ T5940] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.954084][ T5940] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  187.997624][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.303365][ T5940] usb 7-1: usb_control_msg returned -32
[  188.325775][ T5940] usbtmc 7-1:16.0: can't read capabilities
[  188.421091][  T971] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  188.453044][ T7456] loop7: detected capacity change from 16384 to 16383
[  188.649948][  T971] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  188.663794][  T971] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  188.684697][  T971] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  188.746121][  T971] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  188.827960][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  188.831408][   T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  188.925013][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  188.977547][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  189.031405][   T48] usb 6-1: Using ep0 maxpacket: 32
[  189.047749][   T48] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.065162][  T971] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  189.078036][   T48] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.088601][ T7489] usbtmc 7-1:16.0: usb_control_msg returned -32
[  189.109060][  T971] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  189.122118][   T48] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  189.135499][  T971] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  189.145246][   T48] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  189.157049][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.201102][  T971] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  189.233708][  T968] usb 7-1: USB disconnect, device number 2
[  189.296509][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  189.358608][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  189.387776][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  189.400461][  T971] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  189.409678][  T971] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  189.417135][  T971] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  189.428241][  T971] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  189.440068][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  189.635993][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  189.836588][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[  190.515038][  T971] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  190.530643][  T971] usb 1-1: string descriptor 0 read error: -22
[  190.537429][  T971] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  190.548269][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.625993][   T48] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/0003:0458:5011.0007/input/input7
[  190.634820][  T971] adutux 1-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  190.768499][   T48] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/0003:0458:5011.0007/input/input8
[  190.871814][   T48] kye 0003:0458:5011.0007: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0
[  190.932861][    T9] usb 1-1: USB disconnect, device number 9
[  190.991036][ T5141] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.006497][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  191.015377][   T48] usb 6-1: USB disconnect, device number 3
[  192.162269][ T5902] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  192.391090][ T5902] usb 5-1: Using ep0 maxpacket: 32
[  192.424066][ T5902] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.459694][ T5902] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.473098][  T968] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  192.526590][ T5902] usb 5-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  192.588128][ T5902] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  192.650604][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.680611][  T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  192.714103][  T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  192.762649][  T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  192.896135][  T968] usb 7-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce
[  192.906075][  T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.914610][  T968] usb 7-1: Product: syz
[  192.918947][  T968] usb 7-1: Manufacturer: syz
[  192.924072][  T968] usb 7-1: SerialNumber: syz
[  192.932032][  T968] usb 7-1: config 0 descriptor??
[  192.984643][  T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9
[  193.131522][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/0003:0458:5011.0008/input/input10
[  193.188349][  T971] usb 7-1: USB disconnect, device number 3
[  193.188505][    C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  193.203271][  T971] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  193.290557][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/0003:0458:5011.0008/input/input11
[  193.362114][ T5902] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[  193.429864][ T5902] usb 5-1: USB disconnect, device number 8
[  193.815277][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  193.831341][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  194.017388][ T7578] netlink: 216 bytes leftover after parsing attributes in process `syz.3.407'.
[  194.081220][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'.
[  194.173220][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'.
[  195.821364][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  196.001072][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  196.026682][ T5906] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  197.009294][ T5906] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.029540][ T5906] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.217546][ T5906] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.710992][ T5906] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.734191][ T5906] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  197.743623][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.810007][ T5906] usb 4-1: can't set config #16, error -71
[  197.851593][ T5906] usb 4-1: USB disconnect, device number 7
[  197.895992][ T5141] Bluetooth: hci6: sending frame failed (-49)
[  197.905124][ T5839] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  200.110393][   T29] audit: type=1326 audit(1738378365.878:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.162724][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'.
[  200.180279][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'.
[  200.264103][   T29] audit: type=1326 audit(1738378365.878:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.287156][   T29] audit: type=1326 audit(1738378365.918:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.309591][   T29] audit: type=1326 audit(1738378365.918:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.426729][   T29] audit: type=1326 audit(1738378365.918:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.662637][   T29] audit: type=1326 audit(1738378365.928:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.721095][   T29] audit: type=1326 audit(1738378365.928:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  200.911965][   T29] audit: type=1326 audit(1738378365.928:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  201.068336][   T29] audit: type=1326 audit(1738378365.928:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  201.159895][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  201.162017][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  201.166321][ T5856] Bluetooth: hci5: command 0x0406 tx timeout
[  201.180070][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  201.187508][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  201.205424][   T29] audit: type=1326 audit(1738378365.938:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  201.261714][ T7704] capability: warning: `syz.1.447' uses deprecated v2 capabilities in a way that may be insecure
[  201.366978][ T7713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  203.227760][ T7751] netlink: 188 bytes leftover after parsing attributes in process `syz.1.458'.
[  203.267677][ T7751] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[  205.764115][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'.
[  210.378652][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  210.385775][   T29] audit: type=1326 audit(1738378376.128:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  210.532658][   T29] audit: type=1326 audit(1738378376.128:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  210.616528][   T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  210.757423][   T29] audit: type=1326 audit(1738378376.148:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  210.994883][   T48] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  211.049673][   T29] audit: type=1326 audit(1738378376.148:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  211.097343][   T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.126470][   T48] usb 7-1: Product: syz
[  211.136724][   T48] usb 7-1: Manufacturer: syz
[  211.146961][   T48] usb 7-1: SerialNumber: syz
[  211.167459][   T29] audit: type=1326 audit(1738378376.148:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  211.211634][   T48] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  211.254513][ T5940] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  211.282258][ T7886] 9pnet_virtio: no channels available for device syz
[  211.309776][   T29] audit: type=1326 audit(1738378376.148:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  211.433164][ T7886] bridge_slave_0: left allmulticast mode
[  211.504098][  T971] usb 7-1: USB disconnect, device number 4
[  211.512575][ T5845] Bluetooth: hci2: unexpected event for opcode 0x1003
[  211.521393][   T29] audit: type=1326 audit(1738378376.158:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff969b8cda9 code=0x7ffc0000
[  211.533426][ T7886] bridge_slave_0: left promiscuous mode
[  211.553490][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.668499][ T7886] bridge_slave_1: left allmulticast mode
[  211.714215][ T7886] bridge_slave_1: left promiscuous mode
[  211.720544][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.760178][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.498'.
[  211.857773][ T7886] bond0: (slave bond_slave_0): Releasing backup interface
[  211.905244][ T7886] bond0: (slave bond_slave_1): Releasing backup interface
[  212.036089][ T7886] team0: Port device team_slave_0 removed
[  212.041227][ T7906] nbd4: detected capacity change from 0 to 67108884
[  212.111065][ T7914] nbd4: detected capacity change from 67108884 to 131072
[  212.132521][ T6221] block nbd4: Send control failed (result -89)
[  212.171737][ T6221] block nbd4: Request send failed, requeueing
[  212.242762][ T5845] block nbd4: Receive control failed (result -32)
[  212.252066][   T26] block nbd4: Dead connection, failed to find a fallback
[  212.260480][   T26] block nbd4: shutting down sockets
[  212.265938][   T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.275532][ T5940] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  212.282537][   T26] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.311168][ T5940] ath9k_htc: Failed to initialize the device
[  212.311988][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.326600][  T971] usb 7-1: ath9k_htc: USB layer deinitialized
[  212.342436][ T7886] team0: Port device team_slave_1 removed
[  212.349018][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.369613][ T7920] netlink: 308 bytes leftover after parsing attributes in process `syz.1.505'.
[  212.425592][ T7921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13
[  212.442306][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[  212.451947][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.482332][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.504880][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.528145][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.541175][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.550600][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.554018][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.559105][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.578289][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.586669][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.596193][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.621115][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.654754][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.663551][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.710879][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.739875][ T7888] team0: Mode changed to "loadbalance"
[  212.772648][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  212.784157][ T7889] vlan0: entered promiscuous mode
[  212.989350][ T6221] ldm_validate_partition_table(): Disk read failed.
[  212.996669][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.007061][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  213.021104][ T6221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.030165][ T6221] Buffer I/O error on dev nbd4, logical block 0, async page read
[  213.887044][ T6221] Dev nbd4: unable to read RDB block 0
[  213.952827][ T6221]  nbd4: unable to read partition table
[  214.204158][ T6221] ldm_validate_partition_table(): Disk read failed.
[  214.621224][ T6221] Dev nbd4: unable to read RDB block 0
[  214.703580][ T6221]  nbd4: unable to read partition table
[  215.540804][ T7920] net_ratelimit: 22 callbacks suppressed
[  215.540828][ T7920] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  215.571130][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  215.579617][ T5845] Bluetooth: hci2: Injecting HCI hardware error event
[  215.593198][ T5845] Bluetooth: hci2: hardware error 0x00
[  215.832733][ T7959] netlink: 64 bytes leftover after parsing attributes in process `syz.6.518'.
[  215.891330][ T7959] netlink: 84 bytes leftover after parsing attributes in process `syz.6.518'.
[  216.119137][ T7971] 9pnet_virtio: no channels available for device syz
[  216.433525][ T7982] 9pnet_virtio: no channels available for device syz
[  217.871263][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  219.034772][ T8028] netlink: 68 bytes leftover after parsing attributes in process `syz.5.540'.
[  219.088104][   T11] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1
[  219.098037][   T11] Bluetooth: hci6: Frame reassembly failed (-84)
[  219.136491][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'.
[  220.461302][ T5940] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  220.613188][ T5940] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  220.650952][ T5940] usb 7-1: config 0 has no interface number 0
[  220.669007][ T5940] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  220.683501][ T5940] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  220.713544][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.738443][ T5940] usb 7-1: config 0 descriptor??
[  220.804588][ T5940] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  221.126115][  T971] usb 7-1: USB disconnect, device number 5
[  221.151049][ T5845] Bluetooth: hci6: command 0x1003 tx timeout
[  221.151451][   T55] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  222.471420][ T5940] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  222.635186][ T5940] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  222.665161][ T5940] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  222.692407][ T5940] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  222.751463][ T5940] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  222.816780][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  222.857954][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  222.922608][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  222.944592][ T5940] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  222.954139][ T5940] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  222.963406][ T5940] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  222.973499][ T5940] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  222.993072][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  223.004758][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  223.018116][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  223.036018][ T5940] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  223.057798][ T5940] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  223.089572][ T5940] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  223.117398][ T5940] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  223.131930][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  223.212122][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  223.301350][ T5940] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  223.344978][ T5940] usb 6-1: string descriptor 0 read error: -22
[  223.351816][ T5940] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  223.374754][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.417233][ T5940] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  224.133511][  T971] usb 6-1: USB disconnect, device number 4
[  224.424794][ T8148] fuse: Bad value for 'fd'
[  224.989643][ T8163] dccp_close: ABORT with 1 bytes unread
[  226.361122][  T968] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  226.528316][  T968] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  226.949368][  T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.019357][  T968] usb 4-1: config 0 has no interface number 0
[  227.036034][  T968] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  227.069813][  T968] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  227.182056][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.232979][  T968] usb 4-1: config 0 descriptor??
[  227.264347][  T968] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  228.800868][ T5940] usb 4-1: USB disconnect, device number 8
[  229.112273][ T8201] bond0: entered promiscuous mode
[  229.152332][ T8201] bond0: left promiscuous mode
[  231.791588][  T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.281435][  T971] usb 4-1: Using ep0 maxpacket: 32
[  232.362792][  T971] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  232.383719][  T971] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  232.411037][  T971] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  232.440965][  T971] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  232.462116][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.477295][  T971] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  232.522513][  T971] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  232.560110][  T971] usb 4-1: Product: syz
[  232.575091][  T971] usb 4-1: Manufacturer: syz
[  232.610935][  T971] usb 4-1: SerialNumber: syz
[  232.643875][  T971] usb 4-1: config 0 descriptor??
[  232.670138][  T971] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  232.786536][  T971] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  232.992740][  T971] usb 4-1: USB disconnect, device number 9
[  233.037155][  T971] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  236.199512][ T8281] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  236.245382][ T8279] ipip0: entered promiscuous mode
[  236.716123][   T48] IPVS: starting estimator thread 0...
[  236.992913][ T8288] IPVS: using max 21 ests per chain, 50400 per kthread
[  239.066051][ T8313] netlink: 'syz.6.641': attribute type 1 has an invalid length.
[  241.807688][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.655'.
[  241.939819][ T8346] netlink: 'syz.6.655': attribute type 1 has an invalid length.
[  241.982389][ T8346] netlink: 'syz.6.655': attribute type 2 has an invalid length.
[  242.231502][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  242.253003][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  242.274474][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  242.328955][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  242.372906][ T5859] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  242.386122][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.871171][ T5859] Bluetooth: hci5: command 0x0406 tx timeout
[  243.983217][ T8362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  243.990441][ T8362] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  244.004468][ T8357] chnl_net:caif_netlink_parms(): no params data found
[  244.093280][ T8362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  244.104681][ T8362] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  244.143102][ T8362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  244.160006][ T8362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  244.205978][ T8362] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  244.272329][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.289260][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.321294][ T8362] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  244.328268][ T8357] bridge_slave_0: entered allmulticast mode
[  244.341026][ T8357] bridge_slave_0: entered promiscuous mode
[  244.366789][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.374347][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.381139][ T8362] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  244.382108][ T8357] bridge_slave_1: entered allmulticast mode
[  244.401066][ T8357] bridge_slave_1: entered promiscuous mode
[  244.511857][ T5859] Bluetooth: hci6: command tx timeout
[  244.576028][ T8362] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  244.591337][ T8362] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  244.624861][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.636239][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.656688][ T8362] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  245.006674][ T8357] team0: Port device team_slave_0 added
[  245.112041][ T8357] team0: Port device team_slave_1 added
[  245.276130][ T8397] netlink: 'syz.6.667': attribute type 9 has an invalid length.
[  245.321417][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.350981][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.626552][ T8400] random: crng reseeded on system resumption
[  245.752462][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.826290][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.869081][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.952900][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  246.111325][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  246.191015][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  246.191076][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  246.238904][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.350994][ T5859] Bluetooth: hci5: command 0x0406 tx timeout
[  246.591030][ T5859] Bluetooth: hci6: command 0x040f tx timeout
[  246.693459][ T8357] hsr_slave_0: entered promiscuous mode
[  246.710433][ T8357] hsr_slave_1: entered promiscuous mode
[  246.784871][ T8357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.815612][ T8357] Cannot create hsr debugfs directory
[  247.522035][ T8357] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  247.565818][ T8357] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  247.604039][ T8357] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  247.682690][ T8357] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  248.031364][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  248.058411][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.095950][ T8357] 8021q: adding VLAN 0 to HW filter on device team0
[  248.154225][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.161362][ T6415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.191134][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  248.256109][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.263247][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.278330][ T5859] Bluetooth: hci4: command 0x0406 tx timeout
[  248.349148][ T8357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.376051][ T8357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.434617][ T5859] Bluetooth: hci5: command 0x0406 tx timeout
[  248.438666][ T8430] netlink: 'syz.3.680': attribute type 9 has an invalid length.
[  248.481040][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  248.511184][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'.
[  248.671015][ T5859] Bluetooth: hci6: command 0x040f tx timeout
[  248.688278][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.771021][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.780800][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  248.871838][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  248.918430][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.958979][ T5840] usb 2-1: config 0 descriptor??
[  248.979961][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'.
[  249.301119][ T8439] hsr_slave_1 (unregistering): left promiscuous mode
[  249.456538][ T5840] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  249.484169][ T5840] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  249.545192][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.851385][ T4254] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.065748][ T4254] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.253460][ T4254] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.366450][ T4254] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.665771][ T8357] veth0_vlan: entered promiscuous mode
[  250.752098][ T5859] Bluetooth: hci6: command 0x040f tx timeout
[  251.032515][ T8357] veth1_vlan: entered promiscuous mode
[  251.692040][    T9] usb 2-1: USB disconnect, device number 9
[  252.757265][ T4254] bond0 (unregistering): Released all slaves
[  252.828904][ T8515] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  252.841401][   T55] Bluetooth: hci6: command 0x040f tx timeout
[  252.860590][ T8515] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  252.932570][ T8357] veth0_macvtap: entered promiscuous mode
[  252.948281][ T8515] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  252.978588][ T8357] veth1_macvtap: entered promiscuous mode
[  253.136674][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.189060][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.231413][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.270939][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.362910][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.713370][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.761038][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.791484][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.831391][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.879073][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.930484][ T8357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.001334][ T8357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.010093][ T8357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.090973][ T8357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.419277][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'.
[  254.633312][ T8569] ISOFS: Unable to identify CD-ROM format.
[  255.001923][ T5859] Bluetooth: hci6: command 0x040f tx timeout
[  255.176598][ T4254] hsr_slave_0: left promiscuous mode
[  255.233715][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  255.240158][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  255.297512][ T4254] hsr_slave_1: left promiscuous mode
[  255.389157][ T4254] veth1_macvtap: left promiscuous mode
[  255.598437][ T4254] veth0_macvtap: left promiscuous mode
[  255.601285][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.734'.
[  255.633997][ T4254] veth1_vlan: left promiscuous mode
[  255.639282][ T4254] veth0_vlan: left promiscuous mode
[  257.071261][ T5859] Bluetooth: hci6: command 0x040f tx timeout
[  257.820332][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.891114][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.984406][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.030963][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.064815][   T55] Bluetooth: hci3: unexpected event for opcode 0x1003
[  259.033726][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'.
[  259.311419][ T5859] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  259.321346][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  259.622536][ T8666] : entered promiscuous mode
[  260.531606][ T5840] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  260.741253][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.781011][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  260.811009][ T5840] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  260.852091][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  260.898737][ T5840] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  260.936126][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.961039][  T971] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  260.972749][ T8647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  260.983617][ T5840] hub 5-1:1.0: bad descriptor, ignoring hub
[  260.989547][ T5840] hub 5-1:1.0: probe with driver hub failed with error -5
[  261.022876][ T5840] cdc_wdm 5-1:1.0: skipping garbage
[  261.028129][ T5840] cdc_wdm 5-1:1.0: skipping garbage
[  261.048127][ T5840] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  261.100010][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.781'.
[  261.158992][  T971] usb 8-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  261.231216][  T971] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  261.326336][  T971] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.362204][  T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.431646][  T971] usb 8-1: config 0 descriptor??
[  261.612135][  T971] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  262.111529][ T5859] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  262.132761][ T5859] Bluetooth: hci3: Injecting HCI hardware error event
[  262.147955][  T971] usb 5-1: USB disconnect, device number 9
[  262.156368][ T5859] Bluetooth: hci3: hardware error 0x00
[  262.508940][   T48] usb 8-1: USB disconnect, device number 2
[  263.369705][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.793'.
[  263.558283][ T8769] block device autoloading is deprecated and will be removed.
[  264.195137][ T5859] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  264.411035][   T48] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  264.720992][   T48] usb 8-1: Using ep0 maxpacket: 8
[  264.727818][   T48] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  264.745859][   T48] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  264.795056][   T48] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  264.861008][   T48] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  264.916093][   T48] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.951050][   T48] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  264.971698][   T48] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.200805][   T48] usb 8-1: usb_control_msg returned -32
[  265.214961][   T48] usbtmc 8-1:16.0: can't read capabilities
[  265.562220][ T8829] usbtmc 8-1:16.0: usb_control_msg returned -32
[  265.613680][   T48] usb 8-1: USB disconnect, device number 3
[  267.650985][  T971] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  267.872820][  T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.107557][  T971] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  268.225972][ T8873] can0: slcan on ttyS3.
[  268.990355][  T971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  269.000021][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.008102][  T971] usb 2-1: Product: syz
[  269.017374][  T971] usb 2-1: Manufacturer: syz
[  269.027786][  T971] usb 2-1: SerialNumber: syz
[  269.692542][ T8856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  269.732104][ T8866] can0 (unregistered): slcan off ttyS3.
[  270.017027][ T8876] lo speed is unknown, defaulting to 1000
[  270.039412][ T8876] lo speed is unknown, defaulting to 1000
[  270.070186][ T8876] lo speed is unknown, defaulting to 1000
[  270.083385][ T8876] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  270.086068][ T8884] lo speed is unknown, defaulting to 1000
[  270.337072][ T8876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  270.361898][ T8856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  270.668770][  T971] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  270.678722][  T971] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  270.688742][  T971] cdc_mbim 2-1:1.0: setting rx_max = 2048
[  270.829817][ T8876] lo speed is unknown, defaulting to 1000
[  270.841038][   T48] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  270.881141][  T971] cdc_mbim 2-1:1.0: setting tx_max = 184
[  270.892006][ T8876] lo speed is unknown, defaulting to 1000
[  270.910555][  T971] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  270.995286][  T971] wwan wwan0: port wwan0mbim0 attached
[  271.038819][   T48] usb 7-1: Using ep0 maxpacket: 8
[  271.056908][   T48] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  271.091054][   T48] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.100829][   T48] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  271.105966][ T8876] lo speed is unknown, defaulting to 1000
[  271.130282][   T48] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.156544][   T48] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.166893][  T971] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42
[  271.187855][ T8876] lo speed is unknown, defaulting to 1000
[  271.251871][   T48] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  271.262618][ T8876] lo speed is unknown, defaulting to 1000
[  271.303390][ T8876] lo speed is unknown, defaulting to 1000
[  271.353318][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.575858][  T971] usb 2-1: USB disconnect, device number 10
[  271.588966][  T971] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  271.611543][   T48] usb 7-1: usb_control_msg returned -32
[  271.617159][   T48] usbtmc 7-1:16.0: can't read capabilities
[  271.766737][  T971] wwan wwan0: port wwan0mbim0 disconnected
[  271.921017][   T48] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  272.071252][   T48] usb 4-1: device descriptor read/64, error -71
[  272.371446][   T48] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  272.652141][   T48] usb 4-1: device descriptor read/64, error -71
[  272.864991][   T48] usb usb4-port1: attempt power cycle
[  273.312464][   T48] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  273.353298][   T48] usb 4-1: device descriptor read/8, error -71
[  273.577168][  T971] usb 7-1: USB disconnect, device number 6
[  273.611015][   T48] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  273.660110][   T48] usb 4-1: device descriptor read/8, error -71
[  273.806074][   T48] usb usb4-port1: unable to enumerate USB device
[  274.187947][   T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  274.260412][ T8998] block device autoloading is deprecated and will be removed.
[  275.146802][   T48] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  275.176921][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.191140][   T48] usb 1-1: Product: syz
[  275.201730][   T48] usb 1-1: Manufacturer: syz
[  275.228849][   T48] usb 1-1: SerialNumber: syz
[  275.258352][   T48] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  275.286654][ T5840] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  276.302565][  T971] usb 1-1: USB disconnect, device number 10
[  276.365356][ T5840] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  276.408373][ T5840] ath9k_htc: Failed to initialize the device
[  276.436480][  T971] usb 1-1: ath9k_htc: USB layer deinitialized
[  276.605517][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.317248][ T5840] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  277.510986][ T5840] usb 8-1: Using ep0 maxpacket: 8
[  277.917712][ T5840] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  277.986647][ T5840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.123779][ T5840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  278.287665][ T5840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.468228][ T5840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.507650][ T5840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.530943][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.833384][ T9067] process 'syz.1.873' launched '/dev/fd/6' with NULL argv: empty string added
[  279.421378][ T9086] usbtmc 8-1:16.0: usb_control_msg returned -32
[  279.468873][  T971] usb 8-1: USB disconnect, device number 4
[  279.689133][ T9067] infiniband syz1: set active
[  279.731069][ T9067] infiniband syz1: added bond_slave_1
[  279.774535][ T9067] syz1: rxe_create_cq: returned err = -12
[  279.780564][ T9067] infiniband syz1: Couldn't create ib_mad CQ
[  279.836035][ T9067] infiniband syz1: Couldn't open port 1
[  279.908556][ T9067] RDS/IB: syz1: added
[  279.931768][ T9067] smc: adding ib device syz1 with port count 1
[  279.938115][ T9067] smc:    ib device syz1 port 1 has pnetid 
[  283.611285][ T5840] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  283.694128][ T5940] libceph: connect (1)[c::]:6789 error -101
[  283.721698][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  283.810975][ T5840] usb 1-1: Using ep0 maxpacket: 8
[  283.812740][ T9158] ceph: No mds server is up or the cluster is laggy
[  283.832102][ T5840] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  283.855617][ T5840] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.881663][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.914302][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.949335][ T5840] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.085455][ T5840] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.245229][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.271272][ T9187] usbtmc 1-1:16.0: usb_control_msg returned -32
[  285.289066][ T5906] usb 1-1: USB disconnect, device number 11
[  286.455928][  T971] libceph: connect (1)[c::]:6789 error -101
[  286.462880][  T971] libceph: mon0 (1)[c::]:6789 connect error
[  286.631298][ T9206] ceph: No mds server is up or the cluster is laggy
[  289.391140][ T5840] libceph: connect (1)[c::]:6789 error -101
[  289.420211][ T5840] libceph: mon0 (1)[c::]:6789 connect error
[  289.525669][ T9250] ceph: No mds server is up or the cluster is laggy
[  289.682380][ T5840] libceph: connect (1)[c::]:6789 error -101
[  289.707785][ T5840] libceph: mon0 (1)[c::]:6789 connect error
[  292.052189][ T9316] ceph: No mds server is up or the cluster is laggy
[  294.442562][ T9390] ceph: No mds server is up or the cluster is laggy
[  294.881074][ T5902] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  295.557284][ T5902] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  295.601679][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.631107][ T5902] usb 7-1: Product: syz
[  295.652178][ T5902] usb 7-1: Manufacturer: syz
[  295.671016][ T5902] usb 7-1: SerialNumber: syz
[  295.736591][ T5902] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  295.826360][ T5902] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  296.052028][  T971] usb 7-1: USB disconnect, device number 7
[  296.730790][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.981'.
[  296.804382][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.7.981'.
[  296.917404][ T5902] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  296.949760][ T5902] ath9k_htc: Failed to initialize the device
[  297.003882][  T971] usb 7-1: ath9k_htc: USB layer deinitialized
[  297.284178][ T9444] ceph: No mds server is up or the cluster is laggy
[  298.723231][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1000'.
[  298.749114][ T9501] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  299.205310][ T9510] ceph: No mds server is up or the cluster is laggy
[  300.803230][ T9568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  300.809769][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  300.841340][ T9568] vhci_hcd vhci_hcd.0: Device attached
[  301.021073][ T5840] vhci_hcd: vhci_device speed not set
[  301.027870][ T9575] vlan2: entered promiscuous mode
[  301.056459][ T9575] bridge0: entered promiscuous mode
[  301.118638][ T5840] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  301.141255][  T971] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  301.333020][  T971] usb 1-1: config 0 has no interfaces?
[  301.343252][  T971] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  301.354211][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.364537][  T971] usb 1-1: config 0 descriptor??
[  301.471189][ T9582] ceph: No mds server is up or the cluster is laggy
[  301.604561][ T9569] vhci_hcd: connection reset by peer
[  301.610490][ T5902] usb 1-1: USB disconnect, device number 12
[  301.645480][ T6416] vhci_hcd: stop threads
[  301.650364][ T6416] vhci_hcd: release socket
[  301.685445][ T5840] vhci_hcd: vhci_device speed not set
[  301.692778][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'.
[  301.704579][ T6416] vhci_hcd: disconnect device
[  301.791403][ T5840] usb 33-1: device descriptor read/64, error -71
[  301.991529][ T5840] vhci_hcd: vhci_device speed not set
[  302.587229][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'.
[  302.612385][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'.
[  303.000529][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'.
[  303.271486][ T9643] ceph: No mds server is up or the cluster is laggy
[  304.318391][ T9678] sd 0:0:1:0: PR command failed: 1026
[  304.365959][ T9678] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  304.411097][ T9678] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  304.539120][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'.
[  305.720679][ T9708] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1061'.
[  305.752215][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1061'.
[  306.306368][ T9729] tmpfs: Bad value for 'huge'
[  307.781745][ T9756] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1080'.
[  307.831059][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1080'.
[  309.356016][ T9795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1092'.
[  309.610001][ T5840] hid-generic 0006:0003:007F.000A: unknown main item tag 0x0
[  309.986442][ T5840] hid-generic 0006:0003:007F.000A: item fetching failed at offset 5/132
[  310.076983][ T5840] hid-generic 0006:0003:007F.000A: probe with driver hid-generic failed with error -22
[  310.092080][ T9799] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1095'.
[  310.133426][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1095'.
[  311.526311][ T9837] lo speed is unknown, defaulting to 1000
[  312.150605][ T9855] netlink: 'syz.3.1117': attribute type 9 has an invalid length.
[  312.175440][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'.
[  313.634859][ T6000] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  313.832378][ T6000] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.859087][ T6000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  313.896513][ T6000] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  313.952679][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  314.028567][ T6000] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  314.061755][ T9885] ieee802154 phy0 wpan0: encryption failed: -22
[  314.081471][ T9882] 9pnet_virtio: no channels available for device syz
[  314.099500][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.218318][ T9852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  314.314070][ T9888] input: syz0 as /devices/virtual/input/input14
[  314.326076][ T6000] hub 7-1:1.0: bad descriptor, ignoring hub
[  314.369338][ T6000] hub 7-1:1.0: probe with driver hub failed with error -5
[  314.411526][ T6000] cdc_wdm 7-1:1.0: skipping garbage
[  314.423099][ T6000] cdc_wdm 7-1:1.0: skipping garbage
[  314.442617][ T6000] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  314.682029][ T9894] netlink: 'syz.3.1131': attribute type 9 has an invalid length.
[  314.773025][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'.
[  314.910578][ T5902] usb 7-1: USB disconnect, device number 8
[  315.896679][ T9913] tmpfs: Bad value for 'huge'
[  316.695656][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  316.704701][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  317.161497][ T9934] netlink: 'syz.1.1148': attribute type 9 has an invalid length.
[  317.328198][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  317.419597][ T9936] ubi0: attaching mtd0
[  317.433699][ T9936] ubi0: scanning is finished
[  317.438461][ T9936] ubi0: empty MTD device detected
[  318.185586][ T9936] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  318.496784][ T9947] tmpfs: Bad value for 'huge'
[  319.551107][  T971] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  319.792705][  T971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.829509][  T971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  319.867450][  T971] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  319.941086][  T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  319.947764][ T9979] 9pnet_fd: Insufficient options for proto=fd
[  319.994309][  T971] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  320.024779][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.072062][ T9956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  320.092431][  T971] hub 5-1:1.0: bad descriptor, ignoring hub
[  320.098363][  T971] hub 5-1:1.0: probe with driver hub failed with error -5
[  320.127456][  T971] cdc_wdm 5-1:1.0: skipping garbage
[  320.144936][  T971] cdc_wdm 5-1:1.0: skipping garbage
[  320.160808][  T971] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  320.416769][ T5940] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  320.563862][ T5902] usb 5-1: USB disconnect, device number 10
[  320.599099][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.669676][ T5940] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  320.790458][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  320.881549][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.890234][ T5940] usb 1-1: Product: syz
[  320.897633][ T5940] usb 1-1: Manufacturer: syz
[  320.904744][ T5940] usb 1-1: SerialNumber: syz
[  321.293547][ T9985] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  321.630026][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1178'.
[  321.669104][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1178'.
[  321.902296][T10013] siw: device registration error -23
[  321.972401][ T9985] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  321.980271][T10013] lo speed is unknown, defaulting to 1000
[  322.265943][ T5940] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  322.291236][ T5940] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  322.298892][ T5940] cdc_mbim 1-1:1.0: setting rx_max = 2048
[  322.525084][ T5940] cdc_mbim 1-1:1.0: setting tx_max = 184
[  322.547152][ T5940] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  322.572520][ T5940] wwan wwan0: port wwan0mbim0 attached
[  322.711014][ T5940] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42
[  323.381835][    C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71
[  323.388763][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes
[  323.396090][    C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71
[  323.402795][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes
[  323.409206][    C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71
[  323.415913][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes
[  323.422462][    C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71
[  323.429166][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes
[  323.435525][    C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71
[  323.442223][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes
[  323.448442][    C1] cdc_mbim 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  323.641030][ T5902] usb 1-1: USB disconnect, device number 13
[  323.658145][ T5902] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  323.789660][   T29] audit: type=1326 audit(1738378489.558:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  323.795705][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'.
[  323.832087][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'.
[  324.022104][  T971] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  324.032879][   T29] audit: type=1326 audit(1738378489.558:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.055543][   T29] audit: type=1326 audit(1738378489.568:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.101184][   T29] audit: type=1326 audit(1738378489.568:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.108809][T10034] 9pnet_fd: Insufficient options for proto=fd
[  324.130326][   T29] audit: type=1326 audit(1738378489.568:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.153304][   T29] audit: type=1326 audit(1738378489.568:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.177761][   T29] audit: type=1326 audit(1738378489.568:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.208405][ T5902] wwan wwan0: port wwan0mbim0 disconnected
[  324.276421][  T971] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  324.288232][  T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.312376][   T29] audit: type=1326 audit(1738378489.568:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.391054][  T971] usb 8-1: Product: syz
[  324.426314][  T971] usb 8-1: Manufacturer: syz
[  324.451457][  T971] usb 8-1: SerialNumber: syz
[  324.489038][  T971] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  324.507884][   T29] audit: type=1326 audit(1738378489.568:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.541822][ T5902] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  324.575023][   T29] audit: type=1326 audit(1738378489.568:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f043e58cda9 code=0x7ffc0000
[  324.855071][   T55] Bluetooth: hci6: unexpected event for opcode 0x0103
[  329.824186][   T55] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  329.835105][   T55] Bluetooth: hci6: Injecting HCI hardware error event
[  330.422131][   T55] Bluetooth: hci6: hardware error 0x00
[  331.245314][ T5906] usb 8-1: USB disconnect, device number 5
[  331.259970][ T5902] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  331.266887][    C0] sched: DL replenish lagged too much
[  331.277209][ T5902] ath9k_htc: Failed to initialize the device
[  331.284100][ T5906] usb 8-1: ath9k_htc: USB layer deinitialized
[  331.728071][T10050] pimreg: entered allmulticast mode
[  332.372224][T10050] syz_tun: entered allmulticast mode
[  332.409335][T10054] syz_tun: left allmulticast mode
[  332.511352][   T55] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  332.826960][T10054] pimreg: left allmulticast mode
[  333.561696][T10071] netlink: 'syz.0.1202': attribute type 9 has an invalid length.
[  333.580263][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  333.630994][ T5902] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  333.841992][ T5902] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.902943][ T5902] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  333.940999][ T5902] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  333.982123][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'.
[  333.988616][ T5902] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  334.051133][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'.
[  334.053830][ T5902] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  334.137190][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.222407][T10064] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.234555][ T5902] hub 7-1:1.0: bad descriptor, ignoring hub
[  334.258396][ T5902] hub 7-1:1.0: probe with driver hub failed with error -5
[  334.286948][ T5902] cdc_wdm 7-1:1.0: skipping garbage
[  334.320925][ T5902] cdc_wdm 7-1:1.0: skipping garbage
[  334.348945][ T5902] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  334.357615][T10080] 9pnet_fd: Insufficient options for proto=fd
[  334.861285][ T5902] usb 7-1: USB disconnect, device number 9
[  335.536185][T10096] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  335.590440][ T6000] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  335.881925][ T6000] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.912347][ T6000] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  335.929542][ T6000] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  335.980970][ T6000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  336.040967][ T6000] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  336.069882][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.117067][T10082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  336.132402][ T6000] hub 2-1:1.0: bad descriptor, ignoring hub
[  336.205050][ T6000] hub 2-1:1.0: probe with driver hub failed with error -5
[  336.255613][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'.
[  336.322064][ T6000] cdc_wdm 2-1:1.0: skipping garbage
[  336.353496][T10104] netlink: 'syz.4.1214': attribute type 1 has an invalid length.
[  336.358244][ T6000] cdc_wdm 2-1:1.0: skipping garbage
[  336.699391][T10104] netlink: 'syz.4.1214': attribute type 2 has an invalid length.
[  336.719640][ T6000] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  336.732656][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1216'.
[  336.960491][T10111] 8021q: adding VLAN 0 to HW filter on device bond1
[  337.094164][T10116] 
[  337.096547][T10116] ======================================================
[  337.103576][T10116] WARNING: possible circular locking dependency detected
[  337.110604][T10116] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted
[  337.117379][T10116] ------------------------------------------------------
[  337.124411][T10116] syz.4.1218/10116 is trying to acquire lock:
[  337.130488][T10116] ffff88814377ef90 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x9d/0x400
[  337.139536][T10116] 
[  337.139536][T10116] but task is already holding lock:
[  337.146915][T10116] ffff888143b185d8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x34e/0x1910
[  337.157162][T10116] 
[  337.157162][T10116] which lock already depends on the new lock.
[  337.157162][T10116] 
[  337.167666][T10116] 
[  337.167666][T10116] the existing dependency chain (in reverse order) is:
[  337.176772][T10116] 
[  337.176772][T10116] -> #6 (&q->sysfs_lock){+.+.}-{4:4}:
[  337.184360][T10116]        lock_acquire+0x1ed/0x550
[  337.189401][T10116]        __mutex_lock+0x19c/0x1010
[  337.194537][T10116]        blk_mq_update_nr_hw_queues+0x34e/0x1910
[  337.200883][T10116]        nbd_start_device+0x163/0xab0
[  337.206268][T10116]        nbd_ioctl+0x5dc/0xf40
[  337.211039][T10116]        blkdev_ioctl+0x57f/0x6a0
[  337.216074][T10116]        __se_sys_ioctl+0xf7/0x170
[  337.221198][T10116]        do_syscall_64+0xf3/0x230
[  337.226231][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.232662][T10116] 
[  337.232662][T10116] -> #5 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  337.241295][T10116]        lock_acquire+0x1ed/0x550
[  337.246333][T10116]        blk_mq_submit_bio+0x14e1/0x25a0
[  337.251975][T10116]        __submit_bio+0x2cf/0x6a0
[  337.257011][T10116]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  337.263172][T10116]        mpage_readahead+0x630/0x780
[  337.268471][T10116]        read_pages+0x17b/0x570
[  337.273332][T10116]        page_cache_ra_unbounded+0x708/0x820
[  337.279324][T10116]        page_cache_sync_ra+0x3e2/0xb00
[  337.284880][T10116]        filemap_get_pages+0x59a/0x1fb0
[  337.290441][T10116]        filemap_read+0x464/0x1260
[  337.295564][T10116]        blkdev_read_iter+0x2d8/0x430
[  337.300954][T10116]        vfs_read+0x977/0xb40
[  337.305637][T10116]        ksys_read+0x18f/0x2b0
[  337.310408][T10116]        do_syscall_64+0xf3/0x230
[  337.315446][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.321875][T10116] 
[  337.321875][T10116] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  337.330420][T10116]        lock_acquire+0x1ed/0x550
[  337.335461][T10116]        down_read+0xb1/0xa40
[  337.340154][T10116]        page_cache_ra_unbounded+0x156/0x820
[  337.346146][T10116]        do_sync_mmap_readahead+0x4a6/0x990
[  337.352053][T10116]        filemap_fault+0x89e/0x16c0
[  337.357262][T10116]        __do_fault+0x137/0x390
[  337.362129][T10116]        __handle_mm_fault+0x4c44/0x70f0
[  337.367768][T10116]        handle_mm_fault+0x3e5/0x8d0
[  337.373059][T10116]        exc_page_fault+0x2b9/0x8b0
[  337.378263][T10116]        asm_exc_page_fault+0x26/0x30
[  337.383646][T10116]        _copy_from_iter+0x263/0x1c20
[  337.389036][T10116]        sctp_make_abort_user+0x2f3/0x9b0
[  337.394764][T10116]        sctp_sendmsg_check_sflags+0x1b9/0x2c0
[  337.400929][T10116]        sctp_sendmsg+0xc1d/0x3520
[  337.406044][T10116]        __sock_sendmsg+0x1a6/0x270
[  337.411246][T10116]        ____sys_sendmsg+0x52a/0x7e0
[  337.416548][T10116]        __sys_sendmmsg+0x36a/0x720
[  337.421795][T10116]        __x64_sys_sendmmsg+0xa0/0xb0
[  337.427178][T10116]        do_syscall_64+0xf3/0x230
[  337.432209][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.438654][T10116] 
[  337.438654][T10116] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}:
[  337.446320][T10116]        lock_acquire+0x1ed/0x550
[  337.451359][T10116]        lock_sock_nested+0x48/0x100
[  337.456652][T10116]        inet_sendmsg+0x120/0x390
[  337.461677][T10116]        __sock_sendmsg+0x1a6/0x270
[  337.466879][T10116]        sock_sendmsg+0x134/0x200
[  337.471905][T10116]        __sock_xmit+0x219/0x4e0
[  337.476848][T10116]        nbd_send_cmd+0x996/0x2110
[  337.481964][T10116]        nbd_queue_rq+0xcd5/0xef0
[  337.486989][T10116]        blk_mq_dispatch_rq_list+0xad5/0x19d0
[  337.493066][T10116]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  337.499921][T10116]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  337.506427][T10116]        blk_mq_run_hw_queue+0x354/0x500
[  337.512063][T10116]        blk_mq_flush_plug_list+0x118e/0x1870
[  337.518135][T10116]        __blk_flush_plug+0x420/0x500
[  337.523515][T10116]        __submit_bio+0x54a/0x6a0
[  337.528543][T10116]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  337.534699][T10116]        block_read_full_folio+0x9b3/0xae0
[  337.540509][T10116]        filemap_read_folio+0x14a/0x3b0
[  337.546062][T10116]        do_read_cache_folio+0x373/0x5b0
[  337.551789][T10116]        read_part_sector+0xb3/0x260
[  337.557073][T10116]        adfspart_check_ICS+0xd9/0x9a0
[  337.562535][T10116]        bdev_disk_changed+0x72e/0x13f0
[  337.568077][T10116]        blkdev_get_whole+0x2d2/0x450
[  337.573457][T10116]        bdev_open+0x2d4/0xc50
[  337.578225][T10116]        blkdev_open+0x38e/0x4e0
[  337.583175][T10116]        do_dentry_open+0xdee/0x1960
[  337.588459][T10116]        vfs_open+0x3b/0x370
[  337.593049][T10116]        path_openat+0x2c81/0x3590
[  337.598168][T10116]        do_filp_open+0x27f/0x4e0
[  337.603198][T10116]        do_sys_openat2+0x13e/0x1d0
[  337.608397][T10116]        __x64_sys_openat+0x247/0x2a0
[  337.613769][T10116]        do_syscall_64+0xf3/0x230
[  337.618801][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.625225][T10116] 
[  337.625225][T10116] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  337.632891][T10116]        lock_acquire+0x1ed/0x550
[  337.637924][T10116]        __mutex_lock+0x19c/0x1010
[  337.643040][T10116]        nbd_queue_rq+0x262/0xef0
[  337.648066][T10116]        blk_mq_dispatch_rq_list+0xad5/0x19d0
[  337.654137][T10116]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  337.660990][T10116]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  337.667511][T10116]        blk_mq_run_hw_queue+0x354/0x500
[  337.673176][T10116]        blk_mq_flush_plug_list+0x118e/0x1870
[  337.679252][T10116]        __blk_flush_plug+0x420/0x500
[  337.684635][T10116]        __submit_bio+0x54a/0x6a0
[  337.689698][T10116]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  337.695862][T10116]        block_read_full_folio+0x9b3/0xae0
[  337.701677][T10116]        filemap_read_folio+0x14a/0x3b0
[  337.707231][T10116]        do_read_cache_folio+0x373/0x5b0
[  337.712882][T10116]        read_part_sector+0xb3/0x260
[  337.718169][T10116]        adfspart_check_ICS+0xd9/0x9a0
[  337.723631][T10116]        bdev_disk_changed+0x72e/0x13f0
[  337.729176][T10116]        blkdev_get_whole+0x2d2/0x450
[  337.734552][T10116]        bdev_open+0x2d4/0xc50
[  337.739326][T10116]        blkdev_open+0x38e/0x4e0
[  337.744273][T10116]        do_dentry_open+0xdee/0x1960
[  337.749555][T10116]        vfs_open+0x3b/0x370
[  337.754143][T10116]        path_openat+0x2c81/0x3590
[  337.759259][T10116]        do_filp_open+0x27f/0x4e0
[  337.764288][T10116]        do_sys_openat2+0x13e/0x1d0
[  337.769484][T10116]        __x64_sys_openat+0x247/0x2a0
[  337.774860][T10116]        do_syscall_64+0xf3/0x230
[  337.779891][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.786314][T10116] 
[  337.786314][T10116] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  337.793547][T10116]        lock_acquire+0x1ed/0x550
[  337.798583][T10116]        __mutex_lock+0x19c/0x1010
[  337.803702][T10116]        nbd_queue_rq+0xcf/0xef0
[  337.808644][T10116]        blk_mq_dispatch_rq_list+0xad5/0x19d0
[  337.814712][T10116]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  337.821565][T10116]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  337.828068][T10116]        blk_mq_run_hw_queue+0x354/0x500
[  337.833703][T10116]        blk_mq_flush_plug_list+0x118e/0x1870
[  337.839773][T10116]        __blk_flush_plug+0x420/0x500
[  337.845151][T10116]        __submit_bio+0x54a/0x6a0
[  337.850180][T10116]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  337.856368][T10116]        block_read_full_folio+0x9b3/0xae0
[  337.862176][T10116]        filemap_read_folio+0x14a/0x3b0
[  337.867725][T10116]        do_read_cache_folio+0x373/0x5b0
[  337.873365][T10116]        read_part_sector+0xb3/0x260
[  337.878647][T10116]        adfspart_check_ICS+0xd9/0x9a0
[  337.884102][T10116]        bdev_disk_changed+0x72e/0x13f0
[  337.889643][T10116]        blkdev_get_whole+0x2d2/0x450
[  337.895019][T10116]        bdev_open+0x2d4/0xc50
[  337.899789][T10116]        blkdev_open+0x38e/0x4e0
[  337.904738][T10116]        do_dentry_open+0xdee/0x1960
[  337.910022][T10116]        vfs_open+0x3b/0x370
[  337.914609][T10116]        path_openat+0x2c81/0x3590
[  337.919730][T10116]        do_filp_open+0x27f/0x4e0
[  337.924762][T10116]        do_sys_openat2+0x13e/0x1d0
[  337.929959][T10116]        __x64_sys_openat+0x247/0x2a0
[  337.935329][T10116]        do_syscall_64+0xf3/0x230
[  337.940360][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.946782][T10116] 
[  337.946782][T10116] -> #0 (set->srcu){.+.+}-{0:0}:
[  337.953923][T10116]        validate_chain+0x18ef/0x5920
[  337.959293][T10116]        __lock_acquire+0x1397/0x2100
[  337.964674][T10116]        lock_sync+0x18b/0x310
[  337.969448][T10116]        __synchronize_srcu+0xb1/0x400
[  337.974912][T10116]        elevator_disable+0x8c/0x3f0
[  337.980203][T10116]        blk_mq_update_nr_hw_queues+0x599/0x1910
[  337.986542][T10116]        nbd_start_device+0x163/0xab0
[  337.991915][T10116]        nbd_ioctl+0x5dc/0xf40
[  337.996681][T10116]        blkdev_ioctl+0x57f/0x6a0
[  338.001709][T10116]        __se_sys_ioctl+0xf7/0x170
[  338.006826][T10116]        do_syscall_64+0xf3/0x230
[  338.011857][T10116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.018280][T10116] 
[  338.018280][T10116] other info that might help us debug this:
[  338.018280][T10116] 
[  338.028531][T10116] Chain exists of:
[  338.028531][T10116]   set->srcu --> &q->q_usage_counter(io)#53 --> &q->sysfs_lock
[  338.028531][T10116] 
[  338.041956][T10116]  Possible unsafe locking scenario:
[  338.041956][T10116] 
[  338.049574][T10116]        CPU0                    CPU1
[  338.054931][T10116]        ----                    ----
[  338.060285][T10116]   lock(&q->sysfs_lock);
[  338.064621][T10116]                                lock(&q->q_usage_counter(io)#53);
[  338.072539][T10116]                                lock(&q->sysfs_lock);
[  338.079394][T10116]   sync(set->srcu);
[  338.083292][T10116] 
[  338.083292][T10116]  *** DEADLOCK ***
[  338.083292][T10116] 
[  338.091430][T10116] 5 locks held by syz.4.1218/10116:
[  338.096626][T10116]  #0: ffff888025ac4198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40
[  338.105982][T10116]  #1: ffff888025ac40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa0/0x1910
[  338.116987][T10116]  #2: ffff888143b180a8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x281/0x1910
[  338.128694][T10116]  #3: ffff888143b180e0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x281/0x1910
[  338.140663][T10116]  #4: ffff888143b185d8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x34e/0x1910
[  338.151321][T10116] 
[  338.151321][T10116] stack backtrace:
[  338.157201][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.4.1218 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[  338.157226][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  338.157240][T10116] Call Trace:
[  338.157250][T10116]  <TASK>
[  338.157261][T10116]  dump_stack_lvl+0x241/0x360
[  338.157288][T10116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.157311][T10116]  ? __pfx__printk+0x10/0x10
[  338.157349][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157386][T10116]  print_circular_bug+0x13a/0x1b0
[  338.157411][T10116]  check_noncircular+0x36a/0x4a0
[  338.157435][T10116]  ? __pfx_check_noncircular+0x10/0x10
[  338.157457][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157490][T10116]  ? lockdep_lock+0x123/0x2b0
[  338.157522][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157556][T10116]  ? add_lock_to_list+0x1e8/0x2f0
[  338.157581][T10116]  validate_chain+0x18ef/0x5920
[  338.157613][T10116]  ? __pfx_validate_chain+0x10/0x10
[  338.157637][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157676][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157710][T10116]  ? register_lock_class+0x102/0x980
[  338.157742][T10116]  ? __pfx_register_lock_class+0x10/0x10
[  338.157775][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.157809][T10116]  ? mark_lock+0x9a/0x360
[  338.157842][T10116]  __lock_acquire+0x1397/0x2100
[  338.157880][T10116]  lock_sync+0x18b/0x310
[  338.157908][T10116]  ? __synchronize_srcu+0x9d/0x400
[  338.157942][T10116]  ? __synchronize_srcu+0x9d/0x400
[  338.157973][T10116]  ? __pfx_lock_sync+0x10/0x10
[  338.158004][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158037][T10116]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  338.158070][T10116]  __synchronize_srcu+0xb1/0x400
[  338.158103][T10116]  ? __pfx___synchronize_srcu+0x10/0x10
[  338.158140][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158174][T10116]  ? ktime_get_mono_fast_ns+0x303/0x320
[  338.158200][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158234][T10116]  ? synchronize_srcu+0x2a7/0x2d0
[  338.158267][T10116]  elevator_disable+0x8c/0x3f0
[  338.158297][T10116]  blk_mq_update_nr_hw_queues+0x599/0x1910
[  338.158329][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158369][T10116]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  338.158399][T10116]  ? tomoyo_path_number_perm+0x206/0x860
[  338.158427][T10116]  ? __pfx___mutex_lock+0x10/0x10
[  338.158460][T10116]  nbd_start_device+0x163/0xab0
[  338.158492][T10116]  nbd_ioctl+0x5dc/0xf40
[  338.158523][T10116]  ? __pfx_nbd_ioctl+0x10/0x10
[  338.158554][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158587][T10116]  ? file_to_blk_mode+0xcc/0x140
[  338.158618][T10116]  ? __pfx_nbd_ioctl+0x10/0x10
[  338.158645][T10116]  blkdev_ioctl+0x57f/0x6a0
[  338.158671][T10116]  ? __pfx_blkdev_ioctl+0x10/0x10
[  338.158699][T10116]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.158732][T10116]  ? __pfx_blkdev_ioctl+0x10/0x10
[  338.158758][T10116]  __se_sys_ioctl+0xf7/0x170
[  338.158789][T10116]  do_syscall_64+0xf3/0x230
[  338.158820][T10116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.158850][T10116] RIP: 0033:0x7f521858cda9
[  338.158869][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.158888][T10116] RSP: 002b:00007f5219390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.158910][T10116] RAX: ffffffffffffffda RBX: 00007f52187a5fa0 RCX: 00007f521858cda9
[  338.158927][T10116] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006
[  338.158940][T10116] RBP: 00007f521860e2a0 R08: 0000000000000000 R09: 0000000000000000
[  338.158954][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.158968][T10116] R13: 0000000000000000 R14: 00007f52187a5fa0 R15: 00007ffff7329728
[  338.158990][T10116]  </TASK>
[  338.608108][ T6000] usb 2-1: USB disconnect, device number 11
[  338.636362][   T55] block nbd4: Receive control failed (result -32)
[  338.636425][ T5859] block nbd4: Receive control failed (result -32)
[  338.661567][T10116] block nbd4: shutting down sockets